Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/N501NOe2mS9D7_nnALWwNM80qMs.roa
File: N501NOe2mS9D7_nnALWwNM80qMs.roa (raw, json)
Hash identifier: P/E9ioDB6VA9gH9ex0UhOk2JFyAOw06oFgivm68Pnbk=
Subject key identifier: 37:9D:35:34:E7:B6:99:2F:43:EF:F9:E7:00:B5:B0:34:CF:34:A8:CB
Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial: 0197F95E2FE750196BB2C54DE78DAEC0FB6E
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/N501NOe2mS9D7_nnALWwNM80qMs.roa
Signing time: Fri 11 Jul 2025 12:03:08 +0000
ROA not before: Fri 11 Jul 2025 12:03:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 329007
IP address blocks: 103.124.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 14:17:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f9:5e:2f:e7:50:19:6b:b2:c5:4d:e7:8d:ae:c0:fb:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
Validity
Not Before: Jul 11 12:03:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=379d3534e7b6992f43eff9e700b5b034cf34a8cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a5:42:5d:2a:a3:9c:54:5e:5b:53:6c:d5:65:
6d:31:83:e0:9e:5d:ea:a1:a7:9b:de:db:c5:15:82:
0b:e9:9f:84:31:82:a0:97:ac:45:8a:06:5a:0a:0d:
05:fa:cb:30:f9:72:78:7c:43:5c:20:e2:ae:8c:61:
cb:02:ea:f7:e2:b1:4c:62:1e:b8:4d:4d:8a:2d:35:
d4:54:33:e9:57:c9:cb:4e:5c:6c:7c:67:ae:a6:1c:
c1:11:14:15:cd:5e:a3:cf:57:6e:43:32:9d:0f:33:
ca:13:34:8b:46:75:14:ac:1f:ea:82:8d:6f:18:9b:
2b:bf:d3:4e:9f:06:b7:1b:00:e5:c9:7c:18:be:2b:
01:c4:00:a5:a0:47:02:22:1a:88:9c:e3:db:bf:3f:
bc:80:26:86:10:05:31:46:7f:3b:a4:f6:2f:4b:0d:
05:e1:24:5a:c2:34:0d:8d:92:1d:23:92:ce:d2:ce:
d5:5b:6c:f7:d2:e2:6c:2e:eb:03:47:44:a3:09:f0:
22:35:15:f3:62:72:14:df:93:90:f0:d0:9c:99:ae:
c2:6a:14:65:1f:64:e4:a3:11:cc:4b:39:01:d2:e9:
cd:39:97:e1:60:d4:a9:ab:73:50:dd:ce:65:20:1f:
27:e2:39:ee:27:0f:cf:7a:6d:07:1d:00:87:c9:ee:
f6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:9D:35:34:E7:B6:99:2F:43:EF:F9:E7:00:B5:B0:34:CF:34:A8:CB
X509v3 Authority Key Identifier:
keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/N501NOe2mS9D7_nnALWwNM80qMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.124.165.0/24
Signature Algorithm: sha256WithRSAEncryption
84:33:d7:bb:a1:ec:9d:b1:22:4f:07:b7:41:ba:5b:c2:3f:7b:
0b:93:c3:b0:b3:51:6f:70:45:44:39:c8:94:08:02:7c:e9:cf:
ab:54:66:69:6c:c1:31:9f:18:aa:d5:e3:32:8c:c5:fb:0e:d4:
c2:eb:c6:fb:fc:df:25:0e:ea:2b:27:4c:7a:5a:6e:02:07:e5:
41:91:7a:15:61:83:44:15:a5:7f:d0:56:e9:04:fa:6e:ba:9f:
69:04:3a:0c:7e:f1:ec:3d:f2:42:90:96:6a:6f:10:56:0e:7c:
47:25:c2:4a:fd:ac:a3:fb:e1:7f:a2:8b:8d:f7:92:83:6a:92:
64:4e:f2:92:92:71:64:da:7a:aa:e4:d4:05:e8:bd:91:32:7b:
e4:98:1b:e0:47:08:88:ad:9e:d6:c1:4f:5e:59:76:f7:3d:0f:
b7:25:97:5e:34:3e:0b:8f:8c:45:22:8d:49:01:fb:fc:a0:57:
da:61:c8:02:bc:50:fa:fc:a0:e9:cf:68:3b:78:62:cb:b2:75:
77:db:86:b8:48:02:cf:d1:ce:be:fd:d6:ea:bf:b0:ef:19:c0:
df:0d:ec:6c:dc:7b:f4:40:54:92:70:4f:1f:5c:82:2c:6c:76:
61:d7:00:ac:a7:6e:9a:33:95:45:a0:98:ca:9d:df:eb:bc:cc:
17:bc:50:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:09:45 2025 by rpki-client