Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/ncS74zvxKuwiH5pEIZu95866En8.roa
File: ncS74zvxKuwiH5pEIZu95866En8.roa (raw, json)
Hash identifier: JB/1ghwJzXPwyoSCZqrHWDd9ialZNtfjL3KbJ0nmPhI=
Subject key identifier: 9D:C4:BB:E3:3B:F1:2A:EC:22:1F:9A:44:21:9B:BD:E7:CE:BA:12:7F
Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Certificate serial: 0198C3F13FC840D057DDE30F6F4C699CDA8D
Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/ncS74zvxKuwiH5pEIZu95866En8.roa
Signing time: Tue 19 Aug 2025 20:07:04 +0000
ROA not before: Tue 19 Aug 2025 20:07:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209641
IP address blocks: 2a0e:c444::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c3:f1:3f:c8:40:d0:57:dd:e3:0f:6f:4c:69:9c:da:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Validity
Not Before: Aug 19 20:07:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9dc4bbe33bf12aec221f9a44219bbde7ceba127f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:40:43:34:41:70:17:9c:f4:05:7e:85:12:0e:
81:18:96:b0:9d:ed:15:56:52:06:ab:c4:bc:3e:84:
fe:e5:f7:9c:98:00:c1:59:23:cf:43:07:bf:95:cf:
8e:73:b5:eb:87:46:e7:61:86:44:a8:23:2d:cd:70:
f1:c7:91:b2:1d:f1:0c:08:08:fd:ae:48:51:74:4d:
c0:40:0f:8a:df:ad:4d:8c:70:99:d9:1e:7e:9e:7e:
a2:c4:64:9b:e5:9a:8a:d6:f2:aa:f5:09:c1:d7:6b:
fc:f2:7b:2d:5e:8f:45:52:ce:a0:a3:15:80:4a:f0:
fa:54:12:ee:08:6a:9e:f9:7b:38:8c:13:b6:d0:57:
ee:9e:c4:d1:15:c7:77:76:db:7f:ab:b5:20:f4:f4:
9b:4f:be:eb:9e:ec:0d:0f:30:8c:68:31:51:20:ce:
69:83:3e:15:57:49:6d:99:ff:05:d3:1a:3d:f8:21:
41:fb:5c:2e:80:60:bb:67:80:7e:28:89:da:0a:b4:
8b:80:e9:35:6e:bd:64:a5:ea:1f:46:ab:ed:48:0d:
a5:eb:8b:29:75:71:73:5b:7c:c5:23:57:97:fd:7f:
4d:a1:95:aa:69:c3:94:01:42:4e:9c:c7:de:a9:79:
4c:c7:31:15:05:85:9a:18:9b:f6:6c:90:d2:63:e5:
69:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C4:BB:E3:3B:F1:2A:EC:22:1F:9A:44:21:9B:BD:E7:CE:BA:12:7F
X509v3 Authority Key Identifier:
keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/ncS74zvxKuwiH5pEIZu95866En8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:c444::/32
Signature Algorithm: sha256WithRSAEncryption
77:d8:e4:42:fd:16:cc:b0:96:99:80:85:cd:f7:f1:c4:ef:31:
60:7f:9f:46:01:03:5e:3b:99:53:b6:85:6b:ed:2f:12:6f:38:
9e:87:68:9f:02:fb:59:0c:88:85:41:8c:72:7e:5f:5e:6a:85:
5c:a2:01:9d:e7:dc:63:e8:b9:31:17:52:ad:8e:e8:8e:4e:aa:
00:52:b3:70:65:8d:47:06:5b:0c:47:ea:b8:20:ea:fa:08:a3:
54:9a:62:da:65:ef:41:be:76:45:10:1c:c6:3c:4f:cd:29:d8:
47:af:89:07:9f:18:e3:9c:6e:15:a4:81:a1:e2:4f:e6:e2:42:
e6:0a:0d:4d:64:bc:e9:a9:17:60:c2:61:9e:25:b3:41:6c:32:
84:50:12:d9:9b:fb:81:1a:15:a3:9f:8f:00:5d:99:4a:8c:05:
2a:85:59:25:18:d4:0a:49:fa:ef:53:5e:5a:26:47:e2:ee:eb:
a5:96:88:32:ae:2c:a7:13:da:db:9b:22:6c:ee:63:f3:90:79:
d8:49:ea:e6:31:b8:59:87:91:c3:63:3c:b9:fd:2b:a4:1f:51:
f5:dc:80:1f:56:4e:4c:f5:1e:2c:c1:a0:7c:bb:f0:82:0e:8a:
59:3e:35:d9:2d:1e:f2:8f:56:b9:d3:35:86:a1:ea:e6:c0:b2:
73:24:f9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:52:14 2025 by rpki-client