Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/npXHmGXZGuLcOHTCUM12CgHnXyg.roa
File: npXHmGXZGuLcOHTCUM12CgHnXyg.roa (raw, json)
Hash identifier: 1gC/eDL6k6iHyWBQvbxBWaVuZWHOyh/0XMWrseRbP5Q=
Subject key identifier: 9E:95:C7:98:65:D9:1A:E2:DC:38:74:C2:50:CD:76:0A:01:E7:5F:28
Certificate issuer: /CN=07ea523ec7f9377a1a9e5d6fa86817ed3d6c0a82
Certificate serial: 019832916385DDE2F69030655C9C4ED9A485
Authority key identifier: 07:EA:52:3E:C7:F9:37:7A:1A:9E:5D:6F:A8:68:17:ED:3D:6C:0A:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-pSPsf5N3oanl1vqGgX7T1sCoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/npXHmGXZGuLcOHTCUM12CgHnXyg.roa
Signing time: Tue 22 Jul 2025 14:37:25 +0000
ROA not before: Tue 22 Jul 2025 14:37:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59868
IP address blocks: 185.48.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-pSPsf5N3oanl1vqGgX7T1sCoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:32:91:63:85:dd:e2:f6:90:30:65:5c:9c:4e:d9:a4:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ea523ec7f9377a1a9e5d6fa86817ed3d6c0a82
Validity
Not Before: Jul 22 14:37:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e95c79865d91ae2dc3874c250cd760a01e75f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:67:25:5a:41:dc:2f:4e:29:31:42:ef:51:62:
08:96:e6:49:98:dc:84:00:3f:25:02:a6:bf:a1:d6:
41:3a:48:75:91:88:39:ef:a0:54:7f:4b:d4:cb:eb:
8b:63:8e:7e:11:9a:48:43:c3:49:c1:05:a0:8a:73:
2a:1c:c8:32:0b:af:c6:a5:1d:48:61:6d:ae:64:5e:
24:49:6e:d3:90:15:2b:ec:8f:37:1c:82:19:89:9c:
e8:18:69:10:1e:8b:52:60:9a:78:b7:f6:b6:5d:53:
ad:86:37:3d:d0:e0:4b:20:4a:7a:d4:d8:03:c6:f7:
b3:43:27:ea:28:23:1b:f3:fd:0c:63:c4:a9:a9:4c:
13:20:92:f7:94:c4:60:2a:90:3b:36:8b:1d:cb:7d:
fa:43:87:da:99:1d:97:d3:f0:9c:02:3f:90:a2:cf:
71:aa:a1:f1:f8:9c:28:76:36:9b:37:46:b4:74:f8:
5b:ef:30:b3:2e:7a:46:65:a6:b4:fc:89:6a:1b:f3:
70:68:e2:fb:8d:da:53:00:56:e6:5e:66:f9:1d:90:
a8:5a:a7:bf:17:cc:41:a5:65:4a:77:31:35:8e:34:
cc:9a:93:a1:ad:2b:95:11:ae:3c:5b:de:47:18:de:
4c:c5:4f:7d:17:db:7f:83:d2:eb:ca:0b:70:f6:8c:
85:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:95:C7:98:65:D9:1A:E2:DC:38:74:C2:50:CD:76:0A:01:E7:5F:28
X509v3 Authority Key Identifier:
keyid:07:EA:52:3E:C7:F9:37:7A:1A:9E:5D:6F:A8:68:17:ED:3D:6C:0A:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-pSPsf5N3oanl1vqGgX7T1sCoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/npXHmGXZGuLcOHTCUM12CgHnXyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.64.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:ba:84:79:bf:ed:0d:6c:d6:3a:9d:fc:bf:63:98:54:2c:ff:
02:39:91:57:10:03:00:b8:75:24:77:50:21:9b:37:4a:80:92:
ab:c6:9d:de:be:c9:72:73:40:0f:87:71:8a:da:09:a6:8e:75:
69:64:0f:b4:05:6a:6f:34:ad:85:e7:47:2f:92:75:96:fe:3c:
97:73:65:ae:0e:fe:43:78:62:e1:0d:f5:5e:b7:6b:ef:80:06:
31:f4:42:d4:16:88:94:a6:18:ef:ff:c6:7c:60:c4:e2:80:66:
59:84:9f:5d:db:f0:db:74:5a:c3:c9:e7:a9:83:6a:10:ba:0e:
1e:b3:b6:1c:53:d9:91:d7:c0:c9:fb:29:58:bf:93:92:85:ff:
c1:93:de:04:a2:f3:e4:23:a5:3c:fa:5a:28:31:73:2e:10:04:
94:b6:e6:37:c7:c1:2d:a7:23:ca:5c:6e:ee:f0:81:67:b6:81:
a7:5f:98:ca:06:33:8d:a6:bf:c6:2e:05:76:c8:24:a1:e6:b8:
b9:50:95:00:8d:df:5c:b0:05:d2:6d:a3:18:d3:fb:02:52:9d:
b1:87:d0:c3:ff:11:ac:c5:e8:f2:06:7c:d5:6c:93:a1:61:f1:
14:58:0b:f6:6a:44:64:fa:a0:6a:21:02:53:7b:b6:36:eb:90:
9e:80:b5:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:46:30 2025 by rpki-client