Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/NmvHQJaQ4JUQC6anntlzMvrL-Z8.roa
File: NmvHQJaQ4JUQC6anntlzMvrL-Z8.roa (raw, json)
Hash identifier: YU+lvt/vIazw7vVVUGccAAia8UJtfpTF+Fji8oBXsm0=
Subject key identifier: 36:6B:C7:40:96:90:E0:95:10:0B:A6:A7:9E:D9:73:32:FA:CB:F9:9F
Certificate issuer: /CN=a2b12e8df3abd5559f9cf9680af65dd16589de86
Certificate serial: 0197EE1F01D83DEF559884D146CDA356FBF2
Authority key identifier: A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/NmvHQJaQ4JUQC6anntlzMvrL-Z8.roa
Signing time: Wed 09 Jul 2025 07:38:18 +0000
ROA not before: Wed 09 Jul 2025 07:38:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 152179
IP address blocks: 46.236.196.0/23 maxlen: 24
46.236.198.0/24 maxlen: 24
46.236.200.0/23 maxlen: 24
46.236.202.0/24 maxlen: 24
46.236.204.0/23 maxlen: 24
46.236.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.mft
rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 11:55:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ee:1f:01:d8:3d:ef:55:98:84:d1:46:cd:a3:56:fb:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b12e8df3abd5559f9cf9680af65dd16589de86
Validity
Not Before: Jul 9 07:38:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=366bc7409690e095100ba6a79ed97332facbf99f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:89:c0:b2:99:56:e1:a2:b4:c2:98:eb:81:7f:
34:c2:79:8d:1c:fc:21:f7:05:4d:0e:25:04:91:a3:
8a:c3:8b:7b:5b:32:b8:5a:b2:5f:28:50:bc:c2:e8:
6b:ba:39:21:ff:63:fe:7d:77:a7:74:ca:ce:4e:55:
47:20:26:25:a9:ae:ec:83:54:4b:47:a8:26:13:6f:
54:a4:87:49:e1:23:c4:c8:a6:2a:82:ac:8a:25:cf:
83:d1:f4:71:b9:c0:16:8d:39:07:35:07:7b:93:87:
e6:f7:95:aa:fc:cc:37:9d:0d:45:db:d1:25:06:5c:
71:fb:2e:de:6f:e2:b5:7b:ed:0a:6d:d3:30:69:94:
a3:dd:50:52:9e:62:72:17:6b:e3:19:47:30:41:cb:
58:3e:55:df:0c:87:0c:cc:22:3e:b9:71:ab:03:8c:
f9:5e:7c:04:84:66:ac:34:eb:ef:30:ae:39:70:5d:
59:04:3b:01:58:2b:60:6a:20:f5:fe:aa:df:29:00:
7e:fa:40:80:3c:e6:c1:40:b7:00:65:0a:57:6d:09:
69:d1:00:73:6f:21:76:6d:f2:d6:ad:b8:b7:ed:ef:
e0:2a:36:82:22:54:a4:91:09:ac:4e:e7:93:90:e8:
a4:2e:3e:9a:5e:55:63:4e:27:ec:5a:d1:8a:49:4f:
c3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:6B:C7:40:96:90:E0:95:10:0B:A6:A7:9E:D9:73:32:FA:CB:F9:9F
X509v3 Authority Key Identifier:
keyid:A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/NmvHQJaQ4JUQC6anntlzMvrL-Z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.196.0-46.236.198.255
46.236.200.0-46.236.202.255
46.236.204.0-46.236.206.255
Signature Algorithm: sha256WithRSAEncryption
24:87:54:9b:4b:bb:e1:c7:3f:a2:09:f8:f5:cf:ec:23:7b:ff:
eb:89:7a:76:7e:3e:ba:db:a4:15:9b:fb:e7:cd:84:0c:63:99:
77:f6:4c:df:f9:e2:dd:8f:14:47:b1:c5:2a:08:b9:09:2c:2b:
e0:dc:f6:0e:06:de:7f:55:3c:3d:65:57:7c:5e:b3:c2:49:cb:
0e:0e:fe:d0:e7:03:8b:24:35:f9:8e:cb:59:54:bd:18:1b:c7:
65:d9:44:59:b0:ea:10:d7:3c:61:6c:07:d9:b5:cd:16:97:3a:
02:56:37:0b:fa:e9:5c:39:b7:2b:eb:09:c0:e0:e5:76:b7:31:
36:eb:8a:52:4f:86:6b:ab:f4:d2:49:31:da:59:73:ed:eb:35:
aa:0d:ee:40:d0:84:76:c2:b7:27:c8:ea:44:ef:ee:6c:20:eb:
73:f9:86:09:e0:55:0c:d9:a8:1a:4f:02:45:e6:88:f3:5b:be:
4b:35:88:a2:36:d1:c7:e6:0a:3f:0e:c2:c3:ca:c9:e9:86:6f:
22:11:ca:67:7f:cf:5f:39:62:8c:c1:08:ad:eb:a7:5a:81:d8:
01:74:ad:22:05:58:dd:e0:a9:85:42:d1:c2:fe:55:f0:fa:62:
ed:4e:0a:fc:5d:cc:fd:1f:5b:91:8f:4f:34:3a:7d:c5:1a:ca:
f8:d2:0d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:38:46 2025 by rpki-client