Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/NmpssQUEcEZNKaoW0BQiwNAoyOM.roa
File: NmpssQUEcEZNKaoW0BQiwNAoyOM.roa (raw, json)
Hash identifier: umT/ksYC6kbCYRycfHE77LtnW64FjufV8F+An3q8R18=
Subject key identifier: 36:6A:6C:B1:05:04:70:46:4D:29:AA:16:D0:14:22:C0:D0:28:C8:E3
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 0197F8C9DECECEA03DE6DD528A2A59F58A46
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/NmpssQUEcEZNKaoW0BQiwNAoyOM.roa
Signing time: Fri 11 Jul 2025 09:21:08 +0000
ROA not before: Fri 11 Jul 2025 09:21:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395374
IP address blocks: 79.98.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 14:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f8:c9:de:ce:ce:a0:3d:e6:dd:52:8a:2a:59:f5:8a:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jul 11 09:21:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=366a6cb1050470464d29aa16d01422c0d028c8e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d8:a1:e9:1f:63:cc:96:5a:ec:33:bc:71:58:
64:3e:9f:6c:e8:0d:c9:21:1c:fa:ee:ea:ed:15:8b:
39:17:ff:7b:4e:8d:70:45:c1:9a:d0:85:ce:34:39:
86:f3:34:57:44:66:6f:9b:9b:6a:4a:e1:97:5a:85:
ff:e6:61:ed:5b:ee:ea:0f:75:19:de:63:64:95:76:
b5:a6:85:c1:41:a3:84:64:67:e0:52:fc:6e:7e:10:
23:04:35:71:ae:b4:c7:64:70:d5:16:5e:76:a6:54:
be:f8:fd:57:5a:d5:4e:2a:b5:bc:fd:21:b2:d8:0a:
9a:cd:27:96:14:35:5b:19:87:e7:29:78:44:bb:fd:
da:d6:4a:02:c9:84:11:26:40:6a:ed:3e:22:ab:5f:
76:f7:a5:b9:44:1c:33:8c:18:b2:ec:74:ca:97:40:
65:14:fd:f9:b9:1e:1a:3c:a0:dc:e7:68:73:1c:16:
ac:b0:f6:c8:f1:80:80:6d:33:73:8f:51:8e:f8:5f:
54:61:1c:0a:b1:c2:45:97:51:94:c5:a5:98:9b:7a:
87:7e:92:4b:9f:26:0e:fc:e0:51:46:22:bb:d1:0d:
02:80:ee:a3:3f:c9:04:d9:8d:d2:e0:4b:eb:e6:5c:
6e:10:2f:2b:2b:7e:14:89:45:fc:5f:a4:bf:de:c9:
c9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:6A:6C:B1:05:04:70:46:4D:29:AA:16:D0:14:22:C0:D0:28:C8:E3
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/NmpssQUEcEZNKaoW0BQiwNAoyOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.246.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:61:13:3c:7c:e4:69:51:fd:f6:32:b4:e3:a1:72:e2:2a:6c:
5f:16:c8:61:b3:d9:ab:b0:7b:cf:0b:54:9c:db:08:26:f6:05:
c6:99:a4:46:62:da:a2:4c:65:c9:7c:db:39:36:fb:aa:ec:a8:
80:4a:04:62:70:68:7e:81:08:22:f4:7b:97:e3:11:1c:37:de:
b4:f3:05:49:84:54:d9:b3:68:9c:6f:8e:8c:da:c0:4e:45:de:
7e:31:05:94:f6:74:25:cd:bd:24:95:a9:3a:ef:06:54:15:0d:
de:44:54:b2:80:d8:c0:60:ce:cf:c1:20:2c:56:dc:82:c3:fd:
68:58:0c:fa:38:40:32:a6:d7:10:67:b4:96:7d:00:19:e2:5a:
bc:0e:44:55:32:2e:8b:ca:88:07:75:55:50:ee:ba:b5:3e:8e:
5a:95:dd:ec:16:cd:21:d0:bf:cc:48:1c:46:b0:21:20:e5:51:
7e:c6:d2:2a:99:74:bc:62:6a:dd:df:31:ff:8a:a3:dc:82:8b:
0a:4a:74:70:b1:44:f4:fd:1e:50:cb:b9:23:0a:34:be:15:ed:
66:6d:58:2b:20:a7:a8:b3:a7:75:72:c9:1e:d4:14:e2:7e:1c:
22:c6:ad:dd:53:17:0c:ea:cb:be:79:be:09:95:a5:8a:25:77:
58:23:fd:13
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZf4yd7OzqA95t1SiipZ9YpGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz
YWE5YjMwHhcNMjUwNzExMDkyMTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNjZhNmNiMTA1MDQ3MDQ2NGQyOWFhMTZkMDE0MjJjMGQwMjhjOGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNih6R9jzJZa7DO8cVhkPp9s6A3J
IRz67urtFYs5F/97To1wRcGa0IXONDmG8zRXRGZvm5tqSuGXWoX/5mHtW+7qD3UZ
3mNklXa1poXBQaOEZGfgUvxufhAjBDVxrrTHZHDVFl52plS++P1XWtVOKrW8/SGy
2AqazSeWFDVbGYfnKXhEu/3a1koCyYQRJkBq7T4iq19296W5RBwzjBiy7HTKl0Bl
FP35uR4aPKDc52hzHBassPbI8YCAbTNzj1GO+F9UYRwKscJFl1GUxaWYm3qHfpJL
nyYO/OBRRiK70Q0CgO6jP8kE2Y3S4Evr5lxuEC8rK34UiUX8X6S/3snJEwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDZqbLEFBHBGTSmqFtAUIsDQKMjjMB8GA1UdIwQY
MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt
MGFlMmU5MjJhMjkyLzEvTm1wc3NRVUVjRVpOS2FvVzBCUWl3TkFveU9NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky
LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT2L2MA0G
CSqGSIb3DQEBCwUAA4IBAQCNYRM8fORpUf32MrTjoXLiKmxfFshhs9mrsHvPC1Sc
2wgm9gXGmaRGYtqiTGXJfNs5Nvuq7KiASgRicGh+gQgi9HuX4xEcN9608wVJhFTZ
s2icb46M2sBORd5+MQWU9nQlzb0klak67wZUFQ3eRFSygNjAYM7PwSAsVtyCw/1o
WAz6OEAyptcQZ7SWfQAZ4lq8DkRVMi6LyogHdVVQ7rq1Po5ald3sFs0h0L/MSBxG
sCEg5VF+xtIqmXS8Ymrd3zH/iqPcgosKSnRwsUT0/R5Qy7kjCjS+Fe1mbVgrIKeo
s6d1cske1BTifhwixq3dUxcM6su+eb4JlaWKJXdYI/0T
-----END CERTIFICATE-----
Generated at Thu Jul 24 17:12:17 2025 by rpki-client