Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/eaf286-ae94-4c46-a0a7-4dfd24607dbb/1/nw68p4MzATkHpZnxEQJwmsW_HEc.roa
File: nw68p4MzATkHpZnxEQJwmsW_HEc.roa (raw, json)
Hash identifier: 1npuAHi5i81w1SD+MRYJu+5LmG8V+WtE/rfrB9iI3FM=
Subject key identifier: 9F:0E:BC:A7:83:33:01:39:07:A5:99:F1:11:02:70:9A:C5:BF:1C:47
Certificate issuer: /CN=9f766fbfe6d957100021380bb0555e0a3ba6d8e3
Certificate serial: 0197F3BB4FFC913D0B0CD5A5EDF751CECE7B
Authority key identifier: 9F:76:6F:BF:E6:D9:57:10:00:21:38:0B:B0:55:5E:0A:3B:A6:D8:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n3Zvv-bZVxAAITgLsFVeCjum2OM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/eaf286-ae94-4c46-a0a7-4dfd24607dbb/1/nw68p4MzATkHpZnxEQJwmsW_HEc.roa
Signing time: Thu 10 Jul 2025 09:47:08 +0000
ROA not before: Thu 10 Jul 2025 09:47:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15614
IP address blocks: 193.8.86.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/eaf286-ae94-4c46-a0a7-4dfd24607dbb/1/n3Zvv-bZVxAAITgLsFVeCjum2OM.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/eaf286-ae94-4c46-a0a7-4dfd24607dbb/1/n3Zvv-bZVxAAITgLsFVeCjum2OM.mft
rsync://rpki.ripe.net/repository/DEFAULT/n3Zvv-bZVxAAITgLsFVeCjum2OM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 17:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f3:bb:4f:fc:91:3d:0b:0c:d5:a5:ed:f7:51:ce:ce:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f766fbfe6d957100021380bb0555e0a3ba6d8e3
Validity
Not Before: Jul 10 09:47:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f0ebca78333013907a599f11102709ac5bf1c47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:53:62:12:b7:b7:09:23:d9:08:56:8d:fa:a8:
fa:75:79:57:97:06:a6:35:9a:51:b1:c7:f8:e7:20:
23:2f:c9:fb:dc:88:77:ce:1d:0e:81:79:5f:f2:33:
60:ca:0f:c8:cd:a7:59:25:64:c5:88:a4:45:79:93:
5f:65:7a:34:01:c1:6d:f5:73:90:11:f1:59:90:72:
4f:47:22:1c:48:c2:60:16:d8:72:4b:d1:0d:58:39:
be:6e:fa:44:2b:c9:af:8c:5a:4a:5e:83:5f:a0:87:
5f:cd:51:1a:71:0f:95:17:54:a7:eb:7c:a2:ad:be:
c2:b4:58:b9:b6:9d:f1:9c:5d:57:29:b2:ba:f2:a5:
08:0e:89:99:4e:8e:9a:1b:dd:9c:6f:0f:ad:f7:31:
fb:7d:1d:bd:15:ca:15:37:d8:b1:de:ef:8d:e2:2f:
3e:c2:c9:46:61:dd:c2:0b:18:49:73:81:c2:41:0a:
07:69:a1:1d:c8:18:25:dd:c0:c9:a5:97:12:12:0f:
c6:e3:b9:44:e0:87:1b:0d:1e:f9:33:27:df:d5:c5:
c0:2f:6e:28:c5:2a:2e:12:ed:93:7a:aa:b9:ed:a5:
08:ff:5d:d7:d7:98:64:1c:88:72:d4:b0:f5:c7:d6:
e7:db:f6:3b:ca:b1:1a:02:ba:91:72:4d:a0:1f:20:
30:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:0E:BC:A7:83:33:01:39:07:A5:99:F1:11:02:70:9A:C5:BF:1C:47
X509v3 Authority Key Identifier:
keyid:9F:76:6F:BF:E6:D9:57:10:00:21:38:0B:B0:55:5E:0A:3B:A6:D8:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3Zvv-bZVxAAITgLsFVeCjum2OM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/eaf286-ae94-4c46-a0a7-4dfd24607dbb/1/nw68p4MzATkHpZnxEQJwmsW_HEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/eaf286-ae94-4c46-a0a7-4dfd24607dbb/1/n3Zvv-bZVxAAITgLsFVeCjum2OM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.86.0/23
Signature Algorithm: sha256WithRSAEncryption
56:f7:8f:c1:4b:ae:0d:b8:b9:18:c3:1a:f0:55:a4:34:0f:03:
4b:f3:f0:94:b8:79:58:72:99:fd:8d:0e:3a:4d:e0:32:d3:f8:
f7:45:dd:aa:99:ea:3d:57:ff:3f:15:0c:eb:2d:e8:61:45:50:
25:1f:bd:08:d7:34:64:f0:e6:70:4a:2f:73:59:e5:c0:8b:e8:
28:78:e9:a2:c5:b5:35:e0:70:74:43:9e:04:2a:55:bc:fc:fe:
13:cd:db:e0:71:d1:69:20:ec:49:8f:30:0c:26:34:51:b5:13:
79:f7:76:59:94:ca:f6:f7:97:1d:8d:a6:73:5d:80:b0:98:15:
99:9d:71:35:96:29:79:d3:58:a8:c1:65:09:67:d3:1f:d3:32:
a4:e2:51:ff:9f:48:b5:9a:52:6c:fa:ec:62:fb:99:8d:5c:28:
09:18:09:91:08:41:24:26:10:5b:03:5c:ce:40:0e:8e:30:37:
2b:da:a7:17:3b:0e:f3:4f:6f:ce:48:03:db:71:17:75:32:76:
0c:90:22:b8:3c:02:ce:5a:42:2b:1d:e4:97:45:f1:cd:ef:4b:
34:05:24:51:52:d0:67:77:61:2c:1a:db:29:2b:97:4c:be:6a:
c7:77:85:8c:b3:f8:ed:4d:b8:63:af:74:14:12:63:d6:a0:a0:
be:e6:7a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 01:08:25 2025 by rpki-client