Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/N0tnGOt4jtbT21_fNuLzd-6Giq8.roa
File: N0tnGOt4jtbT21_fNuLzd-6Giq8.roa (raw, json)
Hash identifier: OHYG3DyFkyhMaaBRhCewxNtLo2dvWOyUxLepSgoJQ0w=
Subject key identifier: 37:4B:67:18:EB:78:8E:D6:D3:DB:5F:DF:36:E2:F3:77:EE:86:8A:AF
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0197F04B805B1DD355B84627E19CC1168D78
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/N0tnGOt4jtbT21_fNuLzd-6Giq8.roa
Signing time: Wed 09 Jul 2025 17:46:09 +0000
ROA not before: Wed 09 Jul 2025 17:46:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212057
IP address blocks: 85.93.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f0:4b:80:5b:1d:d3:55:b8:46:27:e1:9c:c1:16:8d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 9 17:46:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=374b6718eb788ed6d3db5fdf36e2f377ee868aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c2:5f:58:8e:94:be:bf:3f:45:9b:e2:d1:ff:
c1:cc:e5:bd:09:26:89:45:65:43:0e:bf:a4:fc:b0:
2d:ef:85:49:4a:8e:1b:af:ad:59:00:09:bb:8d:a4:
cf:9b:d8:4d:3c:f5:65:e8:ba:98:78:4b:47:d7:8f:
e3:fd:81:36:60:50:1e:8d:68:4c:61:aa:3e:e3:ed:
cd:ed:df:49:ce:68:0d:8e:e6:5a:ab:e5:9b:9a:68:
53:28:a4:a0:e7:75:5e:7a:99:06:1e:09:9d:ae:01:
24:be:52:ad:a6:f7:8f:e5:0f:c2:07:d5:75:d7:bd:
da:87:13:5c:b3:ff:b1:cc:c0:74:17:4d:c5:09:d8:
0c:b8:24:6c:5c:84:7e:ad:4f:f2:d8:5d:1c:36:40:
86:bb:21:7f:95:4a:9a:65:7f:04:92:4b:45:63:7b:
28:09:2b:d6:3a:59:62:3b:40:24:5f:16:9c:24:2d:
b3:9e:dd:17:31:26:28:6e:d9:03:94:10:4c:9b:a5:
2a:65:c9:62:9e:04:33:a1:bc:a9:3f:6a:cd:92:94:
57:66:43:be:6d:09:4b:62:ad:c4:f0:4b:9f:3d:4d:
30:e4:be:5d:12:33:d5:da:ee:1b:01:e6:c5:3a:21:
e1:e3:84:1d:dc:e3:87:30:a5:8e:fb:9e:f6:83:5f:
08:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4B:67:18:EB:78:8E:D6:D3:DB:5F:DF:36:E2:F3:77:EE:86:8A:AF
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/N0tnGOt4jtbT21_fNuLzd-6Giq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.93.31.0/24
Signature Algorithm: sha256WithRSAEncryption
e7:1c:c4:42:1d:52:bc:7b:be:a7:c7:a2:87:f7:e8:f8:ae:78:
69:06:7d:63:66:4d:ee:b3:35:ff:9f:4c:5d:cc:ed:d9:df:8d:
74:65:1e:14:e2:78:9b:29:03:09:c5:f1:33:f4:95:29:47:6a:
06:0f:44:8a:8c:08:ff:70:29:79:db:49:cf:7d:d6:76:de:a7:
a4:11:5c:8a:5a:53:a8:06:ca:d7:48:08:a0:59:1c:b7:76:b8:
2a:e3:06:13:f1:7c:ea:6c:95:1f:9c:e4:41:d1:ae:6c:c1:85:
d5:db:d1:ae:e0:a7:2e:8d:f1:7d:86:49:fe:bd:8a:3d:d3:bb:
ef:f9:d7:bf:0e:86:6b:24:94:7f:d3:01:3d:50:af:f4:14:dd:
91:f6:e6:df:a4:65:03:09:47:78:22:45:10:37:42:0a:cc:7b:
f3:d3:d6:46:f4:86:61:41:b5:10:62:50:32:5a:3a:f9:bd:34:
cf:51:22:c1:4c:6b:49:fe:b0:35:83:5c:70:88:fc:b6:d4:63:
62:37:bd:cc:4d:60:5c:24:61:9a:99:e8:31:77:30:c2:81:c6:
22:e0:72:97:f4:f7:1a:30:27:2f:33:9c:3b:20:ad:69:de:dc:
5b:c3:df:14:b7:9d:d7:a3:1b:41:32:88:54:9e:f4:f4:a6:32:
5f:e3:33:78
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZfwS4BbHdNVuEYn4ZzBFo14MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwNzA5MTc0NjA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzRiNjcxOGViNzg4ZWQ2ZDNkYjVmZGYzNmUyZjM3N2VlODY4YWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcJfWI6Uvr8/RZvi0f/BzOW9CSaJ
RWVDDr+k/LAt74VJSo4br61ZAAm7jaTPm9hNPPVl6LqYeEtH14/j/YE2YFAejWhM
Yao+4+3N7d9JzmgNjuZaq+WbmmhTKKSg53VeepkGHgmdrgEkvlKtpveP5Q/CB9V1
173ahxNcs/+xzMB0F03FCdgMuCRsXIR+rU/y2F0cNkCGuyF/lUqaZX8EkktFY3so
CSvWOlliO0AkXxacJC2znt0XMSYobtkDlBBMm6UqZclingQzobypP2rNkpRXZkO+
bQlLYq3E8EufPU0w5L5dEjPV2u4bAebFOiHh44Qd3OOHMKWO+572g18IxQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDdLZxjreI7W09tf3zbi83fuhoqvMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvTjB0bkdPdDRqdGJUMjFfZk51THpkLTZHaXE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVV0fMA0G
CSqGSIb3DQEBCwUAA4IBAQDnHMRCHVK8e76nx6KH9+j4rnhpBn1jZk3uszX/n0xd
zO3Z3410ZR4U4nibKQMJxfEz9JUpR2oGD0SKjAj/cCl520nPfdZ23qekEVyKWlOo
BsrXSAigWRy3drgq4wYT8XzqbJUfnORB0a5swYXV29Gu4KcujfF9hkn+vYo907vv
+de/DoZrJJR/0wE9UK/0FN2R9ubfpGUDCUd4IkUQN0IKzHvz09ZG9IZhQbUQYlAy
Wjr5vTTPUSLBTGtJ/rA1g1xwiPy21GNiN73MTWBcJGGamegxdzDCgcYi4HKX9Pca
MCcvM5w7IK1p3txbw98Ut53XoxtBMohUnvT0pjJf4zN4
-----END CERTIFICATE-----
Generated at Mon Jul 21 08:05:11 2025 by rpki-client