Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/N8UiZC6ekKP1es4B_Bk3APFkdxc.roa
File: N8UiZC6ekKP1es4B_Bk3APFkdxc.roa (raw, json)
Hash identifier: tgQGNuurT5CnHai6yz0N+Wra1nyaeCzvPS5Kjtxbyvk=
Subject key identifier: 37:C5:22:64:2E:9E:90:A3:F5:7A:CE:01:FC:19:37:00:F1:64:77:17
Certificate issuer: /CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64
Certificate serial: 0199E259C573995EC3730A30D9EA159C407A
Authority key identifier: 3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/N8UiZC6ekKP1es4B_Bk3APFkdxc.roa
Signing time: Tue 14 Oct 2025 10:52:38 +0000
ROA not before: Tue 14 Oct 2025 10:52:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36530
IP address blocks: 86.109.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 16:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e2:59:c5:73:99:5e:c3:73:0a:30:d9:ea:15:9c:40:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64
Validity
Not Before: Oct 14 10:52:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=37c522642e9e90a3f57ace01fc193700f1647717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:c3:25:48:90:de:71:f2:72:48:f1:c8:59:91:
78:ba:17:bf:5d:ed:56:0b:ca:79:83:3b:f0:ed:f9:
0d:81:71:40:37:42:d1:dd:18:58:fa:a6:2e:bf:2c:
83:9a:5a:b0:1e:3f:d3:e4:b4:5f:39:6a:b4:a5:27:
75:56:66:a0:e3:4f:6c:07:cd:15:df:27:b3:93:ee:
f5:0a:11:68:ba:82:54:bf:1d:3a:13:4e:0a:5d:8f:
d0:9b:28:f9:9e:cc:7e:73:a2:8b:08:81:38:3b:33:
dc:1f:7a:3a:c4:c9:90:4e:3f:73:f8:f5:cd:f6:0c:
45:24:4a:47:81:f3:1d:26:73:e9:d2:8a:73:a5:9d:
12:a3:31:20:ea:ca:1a:ed:55:c1:a9:0d:28:60:f7:
43:0b:dc:d6:0b:6d:db:f0:17:86:15:ec:f2:2d:a6:
2e:51:17:8f:b0:7e:4c:f6:02:5f:5c:0e:ed:85:c6:
93:c5:6d:33:ef:24:8e:7f:b3:42:3a:c7:05:a9:31:
01:bc:5f:bc:fe:71:17:40:87:cb:da:50:bc:ab:98:
07:96:9f:76:6a:41:d1:2c:00:ff:1e:a6:da:b9:eb:
0b:53:69:ec:e3:32:b5:ee:71:3b:92:bf:43:94:de:
af:53:e1:25:28:aa:46:40:39:ae:e7:c6:8c:e3:ea:
32:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C5:22:64:2E:9E:90:A3:F5:7A:CE:01:FC:19:37:00:F1:64:77:17
X509v3 Authority Key Identifier:
keyid:3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/N8UiZC6ekKP1es4B_Bk3APFkdxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.109.74.0/24
Signature Algorithm: sha256WithRSAEncryption
77:fa:d2:71:40:12:38:8d:fd:0c:5c:ea:68:7f:d4:b5:24:5c:
bc:01:ab:cb:d9:14:06:5a:a1:eb:14:84:0d:5d:a4:4f:41:3e:
12:6f:35:2c:fb:98:51:60:ff:92:b9:ac:a3:02:ec:f7:63:7f:
54:38:db:05:96:a5:27:c3:5a:ad:93:f3:94:20:80:c5:15:e3:
cd:c0:99:65:b3:3d:7b:c6:c8:f2:11:5b:08:bb:30:2b:12:06:
83:eb:1d:1a:dc:9f:7a:99:2e:4c:15:ca:2e:48:e4:35:59:13:
04:69:b2:4a:4f:db:d8:fc:ce:34:e0:1d:50:50:dc:be:9e:b9:
7c:37:d3:1f:d0:2e:9e:e4:ee:74:18:96:b4:34:50:4c:95:f9:
16:06:bd:b8:ac:2c:9c:44:ef:bf:ac:0f:ac:89:5b:1d:1b:31:
73:f5:b0:bb:9e:af:93:bb:cf:4f:e9:b6:5f:42:3a:fe:4f:45:
0e:63:a9:60:d2:d9:60:e9:03:0d:2d:74:97:98:6f:8d:18:14:
ae:75:3c:6b:e2:c8:f9:30:db:b0:42:72:d7:91:da:62:28:df:
80:c2:8d:b4:36:ce:c7:10:e1:19:81:f7:af:02:dc:d0:b7:32:
c1:b3:79:75:84:18:f4:87:a7:64:02:4d:fa:8b:e1:53:63:03:
db:3a:8b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:05:16 2025 by rpki-client