Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/NlsrM9j9VUiM42jtu0FZB88d1z8.roa
File: NlsrM9j9VUiM42jtu0FZB88d1z8.roa (raw, json)
Hash identifier: 6PC/+zU3u3k/HKNCn3GHAiUb1zNn0DzxWjzqB9gdYy8=
Subject key identifier: 36:5B:2B:33:D8:FD:55:48:8C:E3:68:ED:BB:41:59:07:CF:1D:D7:3F
Certificate issuer: /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Certificate serial: 019883682E418972F96ADC805506EDDCBD30
Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/NlsrM9j9VUiM42jtu0FZB88d1z8.roa
Signing time: Thu 07 Aug 2025 07:21:39 +0000
ROA not before: Thu 07 Aug 2025 07:21:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209155
IP address blocks: 185.16.230.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:68:2e:41:89:72:f9:6a:dc:80:55:06:ed:dc:bd:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Validity
Not Before: Aug 7 07:21:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=365b2b33d8fd55488ce368edbb415907cf1dd73f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:01:5f:25:7b:25:ef:70:d1:6f:9d:3b:eb:31:
53:e1:10:40:41:73:d4:c9:19:b1:b6:e3:2c:6e:91:
ba:4d:bb:f9:99:35:ef:1a:18:0b:3c:f4:53:cc:b6:
58:1e:61:17:31:56:a5:1b:23:f9:ee:16:96:b4:1f:
52:05:5e:18:b9:2a:e4:a4:ec:80:54:33:c4:d5:4d:
eb:a0:29:0d:2b:54:1c:87:50:fa:4f:c8:6a:98:33:
9e:83:67:e1:6d:8b:c1:b9:92:88:72:08:00:12:fa:
2b:b3:73:be:c3:ce:8a:c4:28:1e:cb:54:e9:d7:f1:
52:90:b5:2e:7b:30:12:c8:93:38:e0:b5:17:c5:2b:
37:40:66:31:47:ca:0c:02:28:21:78:99:a2:3d:9f:
49:9f:bf:46:23:d1:ad:37:92:d9:b7:92:e1:b8:9b:
95:43:4c:25:e1:06:62:74:19:67:e8:9a:1a:6b:dc:
4c:17:3b:63:42:08:8f:10:0b:98:8b:df:43:69:cd:
96:f6:0a:94:0a:0c:30:a3:36:1c:a7:04:5f:59:8e:
dd:3d:45:cb:33:67:2d:74:b8:69:82:db:82:e9:a6:
d6:21:58:e0:79:3e:4c:17:d9:2d:c1:03:39:51:86:
c4:49:ac:dd:f1:02:42:76:18:0d:92:b8:2d:e6:b1:
77:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:5B:2B:33:D8:FD:55:48:8C:E3:68:ED:BB:41:59:07:CF:1D:D7:3F
X509v3 Authority Key Identifier:
keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/NlsrM9j9VUiM42jtu0FZB88d1z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.16.230.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:bf:5b:25:61:eb:f3:46:69:92:89:a6:2c:15:3e:34:8a:e1:
4e:bc:5b:87:12:e3:25:39:e2:14:9e:ff:81:92:54:ce:f3:15:
77:29:23:32:74:fe:1b:f5:39:4d:ad:83:e6:14:50:38:9e:b2:
ec:8a:71:06:8e:72:43:d0:23:27:2e:11:d3:35:4b:b0:3f:1e:
e2:5d:cf:4f:85:54:40:6a:64:d9:b3:c6:1c:43:03:cb:30:e4:
62:cd:59:e7:5d:21:2c:41:e2:84:09:c7:20:00:d4:9a:69:95:
e8:8e:6c:5e:da:fa:8f:76:76:37:9e:78:2e:9e:99:d2:30:7f:
9c:24:e6:01:21:21:6f:3f:f1:71:35:02:49:d3:94:3b:35:cf:
e8:59:29:c7:c6:74:fd:3a:60:c0:00:fd:a3:44:73:16:2e:2e:
9e:83:5e:80:87:57:ac:8c:1b:2b:cf:71:75:7f:66:00:64:a0:
65:1a:e3:35:14:3d:97:57:8d:3f:16:6d:01:e0:bd:c3:23:42:
cd:4d:d8:c0:7d:05:20:f7:90:04:01:57:61:71:29:78:74:1d:
e6:c0:fa:76:1d:55:46:4f:db:15:3b:31:bc:d5:33:60:f8:fe:
3e:ea:4d:11:16:d5:69:b7:81:76:5f:af:e4:b1:1a:54:bf:5c:
9a:55:fa:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:18:57 2025 by rpki-client