Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/nPembSTO0FXvbw8zcrfb1ZNsGHs.roa
File: nPembSTO0FXvbw8zcrfb1ZNsGHs.roa (raw, json)
Hash identifier: eFcHKopiqLAXcwkADSpifmFlMBENxHJyplWhREP1i08=
Subject key identifier: 9C:F7:A6:6D:24:CE:D0:55:EF:6F:0F:33:72:B7:DB:D5:93:6C:18:7B
Certificate issuer: /CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Certificate serial: 01999C0BCBC0F77669BF60A406E5A477F43B
Authority key identifier: C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/nPembSTO0FXvbw8zcrfb1ZNsGHs.roa
Signing time: Tue 30 Sep 2025 19:14:02 +0000
ROA not before: Tue 30 Sep 2025 19:14:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204968
IP address blocks: 2a0d:48c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9c:0b:cb:c0:f7:76:69:bf:60:a4:06:e5:a4:77:f4:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Validity
Not Before: Sep 30 19:14:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9cf7a66d24ced055ef6f0f3372b7dbd5936c187b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7d:55:e5:e9:14:79:f7:3b:dd:96:33:66:4d:
4b:42:fa:e3:e1:b6:70:8d:b0:4e:fb:66:38:d6:e6:
e2:a0:08:79:1f:f7:e2:2f:30:09:10:fb:23:4b:3c:
2a:45:4d:6e:f3:ce:86:27:a1:de:f5:3d:bb:a6:18:
00:60:3c:b1:d5:5d:01:4c:c9:e8:7f:38:cc:59:42:
66:3b:0f:61:4a:15:1c:b8:20:2a:d9:f4:f9:ff:01:
0a:86:6b:8c:a0:e1:6f:2c:97:80:33:e7:a1:da:bc:
84:21:d6:f9:8f:f0:6d:18:66:f2:06:5b:f1:17:fe:
71:13:d6:4e:32:51:19:f0:f7:a9:f9:8b:36:d2:b0:
84:c0:32:ab:e1:4d:55:34:70:2a:a1:a9:a7:ff:8c:
1a:58:c3:0f:82:b0:4d:db:43:ff:1d:eb:08:d0:0d:
70:8c:31:e4:a7:3e:02:82:fe:a7:9c:92:96:a6:b1:
f7:0b:b7:c5:ce:96:27:8e:df:ee:e7:d5:7d:28:9d:
22:35:c8:d6:64:83:5d:d8:13:5a:86:69:16:2c:79:
5e:26:82:d6:a5:b4:c4:25:4b:a5:14:8d:ac:54:76:
68:3f:40:20:5d:dc:47:ed:4c:75:88:5a:28:d6:02:
ea:41:7a:f9:0c:25:fd:aa:ee:9e:e8:6e:9b:e3:6d:
96:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F7:A6:6D:24:CE:D0:55:EF:6F:0F:33:72:B7:DB:D5:93:6C:18:7B
X509v3 Authority Key Identifier:
keyid:C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/nPembSTO0FXvbw8zcrfb1ZNsGHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:48c0::/29
Signature Algorithm: sha256WithRSAEncryption
76:3c:72:d1:46:bb:cd:b5:8c:91:8d:91:49:90:3c:05:5a:bd:
d5:74:f1:10:bf:2a:43:f3:90:bb:e9:5f:d2:0a:04:a5:66:f9:
39:dd:b8:87:eb:90:9f:b4:e5:77:84:b0:ab:b6:37:19:3b:e3:
fe:19:1b:78:0b:54:20:9e:5c:91:52:01:61:a5:12:ac:31:98:
3c:65:3b:91:53:7e:94:0f:bb:d7:2a:56:16:7e:34:27:1e:25:
df:42:41:37:eb:ea:3e:95:ab:77:3e:aa:65:33:e6:17:bd:49:
8b:51:d0:fe:df:a2:49:67:1b:64:5f:d8:89:29:b8:69:f2:9b:
d1:4e:f0:ef:1e:8b:f5:cd:8f:b3:d7:a9:43:e0:a1:54:28:ca:
3d:65:6a:5f:e0:16:59:a4:a5:e8:1d:e2:cd:55:ac:5b:b1:29:
d4:2b:cb:eb:54:7f:5e:f1:f9:be:f2:17:fe:f3:d1:f9:6c:f6:
6a:0f:d8:af:58:c7:fe:58:37:1d:d8:fd:43:11:1f:03:60:20:
46:67:20:d9:d7:bf:d1:4a:10:53:de:44:fd:0a:c5:93:0c:31:
ac:3b:88:aa:bc:b0:a0:58:e5:8e:98:1e:e0:d7:4c:3f:25:1e:
c4:7f:4b:c8:76:ea:7b:e7:14:56:df:89:42:64:9c:cf:c3:e6:
8c:35:b0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:59:24 2025 by rpki-client