Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/NdqKUrUfQ7hC78ndwbebfNQmJMY.roa
File: NdqKUrUfQ7hC78ndwbebfNQmJMY.roa (raw, json)
Hash identifier: T39riYQ4D+P3JyWh5MJGnK2S7ndZOahw3bifY1WhRS0=
Subject key identifier: 35:DA:8A:52:B5:1F:43:B8:42:EF:C9:DD:C1:B7:9B:7C:D4:26:24:C6
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019823DBD5CC03075C34A8B4954813B9ED77
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/NdqKUrUfQ7hC78ndwbebfNQmJMY.roa
Signing time: Sat 19 Jul 2025 18:04:26 +0000
ROA not before: Sat 19 Jul 2025 18:04:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 329007
IP address blocks: 163.5.162.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:23:db:d5:cc:03:07:5c:34:a8:b4:95:48:13:b9:ed:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 19 18:04:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35da8a52b51f43b842efc9ddc1b79b7cd42624c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ec:05:50:2b:1f:b3:6f:6a:e9:2f:a9:60:a4:
2c:98:60:c7:f2:e6:05:84:be:a8:fe:c9:5f:3e:29:
c8:43:b1:7d:d2:1b:ed:d3:6f:ec:b9:74:bc:ba:8f:
14:02:2e:75:5c:66:3e:d8:43:9a:2e:c6:16:8c:a2:
8f:70:69:94:56:36:ba:19:e4:62:15:f9:2d:12:de:
fd:ca:9c:a3:fb:ec:74:68:a9:5c:bb:11:2d:3b:90:
b3:b7:54:47:62:ea:d1:c7:2c:29:73:b0:59:1e:39:
88:8c:06:ce:2c:a5:18:01:0b:13:1e:a8:0a:b1:75:
12:db:b4:03:ea:18:66:6f:f9:89:b8:92:97:cc:ff:
b8:44:a3:00:a3:b2:ec:ba:a1:fc:de:0c:81:2b:10:
66:9d:71:d2:16:a8:23:e7:12:58:b9:a2:8a:23:2c:
45:09:d4:ad:c3:5d:43:2b:ee:11:9f:34:80:05:37:
b1:a4:fa:d9:72:45:7d:b3:8a:04:ef:f4:01:4b:c4:
aa:14:ba:fa:f3:a8:ec:d3:ce:6c:17:ae:e4:f2:63:
a5:b6:25:00:bd:ff:6c:e7:5a:7d:0d:ed:ec:be:eb:
e2:07:3a:8b:cf:72:be:e5:74:2b:9d:dc:c0:4f:2d:
35:79:8d:c2:bf:f1:c0:5d:c4:b9:41:18:f6:58:2c:
ac:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:DA:8A:52:B5:1F:43:B8:42:EF:C9:DD:C1:B7:9B:7C:D4:26:24:C6
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/NdqKUrUfQ7hC78ndwbebfNQmJMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.162.0/24
163.5.179.0/24
Signature Algorithm: sha256WithRSAEncryption
78:85:06:d5:5c:9f:e2:79:3d:b6:62:59:8d:ea:ed:34:f5:50:
a1:f1:b4:f6:02:45:e5:d5:47:07:17:9b:98:ba:1c:47:36:42:
2c:b5:c5:8c:01:0c:13:3c:b7:69:44:8f:c4:87:f0:91:58:09:
5f:76:5b:c7:3c:3f:df:f5:f7:f5:86:44:23:5a:e9:1f:49:07:
e0:78:b0:de:8f:91:1b:3a:73:ec:e9:02:e5:ef:48:63:63:0f:
d4:ba:d5:4b:91:48:25:c6:3f:59:7e:1c:10:b6:5c:a9:8d:d8:
38:ab:e7:fa:32:d7:e6:c4:97:94:7b:a7:8a:de:05:3c:15:95:
61:61:b8:d7:ea:9c:ef:6b:4b:4c:5f:d6:58:ac:fb:9d:94:af:
73:00:eb:cb:3d:ed:76:e1:65:94:d0:5d:20:03:2e:a0:64:d0:
9e:10:cb:0f:cc:d3:ca:bc:69:bf:5f:9e:43:24:fa:50:c3:b6:
57:9e:ea:7e:86:9f:f8:5c:ba:d4:b7:cb:ab:65:87:8f:dc:53:
0d:ad:58:cb:2f:ed:fc:d1:77:91:d2:6f:8a:70:7e:56:e9:33:
88:a2:d1:14:62:b2:90:92:93:5f:ab:5e:c6:e1:68:fd:76:66:
27:f8:56:37:50:eb:4c:de:9a:3d:da:98:01:ee:2f:3e:05:0d:
58:c0:18:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 08:03:18 2025 by rpki-client