Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/njg2vaPfciqJR5R5nbxzG2lmchg.roa
File: njg2vaPfciqJR5R5nbxzG2lmchg.roa (raw, json)
Hash identifier: hRVFVxSb35peMjVcWnWK+AgafRYFP/BZDTvTgJv0dRc=
Subject key identifier: 9E:38:36:BD:A3:DF:72:2A:89:47:94:79:9D:BC:73:1B:69:66:72:18
Certificate issuer: /CN=15c181706f61c4b737cd7eb78f7230e34cdfc14c
Certificate serial: 01981D22A2CF2296C546BA1518C73829612D
Authority key identifier: 15:C1:81:70:6F:61:C4:B7:37:CD:7E:B7:8F:72:30:E3:4C:DF:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FcGBcG9hxLc3zX63j3Iw40zfwUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/njg2vaPfciqJR5R5nbxzG2lmchg.roa
Signing time: Fri 18 Jul 2025 10:44:25 +0000
ROA not before: Fri 18 Jul 2025 10:44:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 145.36.0.0/19 maxlen: 19
145.36.32.0/19 maxlen: 19
145.36.64.0/19 maxlen: 19
145.36.96.0/19 maxlen: 19
145.36.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FcGBcG9hxLc3zX63j3Iw40zfwUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 03:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:1d:22:a2:cf:22:96:c5:46:ba:15:18:c7:38:29:61:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15c181706f61c4b737cd7eb78f7230e34cdfc14c
Validity
Not Before: Jul 18 10:44:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e3836bda3df722a894794799dbc731b69667218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:71:29:2a:bc:b4:20:ae:7e:72:80:ff:f3:51:
bd:ac:65:4f:a5:37:84:21:08:d7:1f:71:75:00:48:
1a:90:75:13:35:c9:7c:94:d6:d8:44:9a:d2:ae:5f:
ff:96:e5:3e:ad:5a:2c:8e:d1:d0:f1:0e:22:cf:21:
16:21:64:90:eb:00:25:e7:63:4b:d5:9f:26:3c:14:
7f:cc:ad:ce:c1:e2:b4:34:19:33:39:30:97:b9:9d:
87:f8:2e:53:51:a1:b0:7e:c1:40:f5:cc:ad:d6:b9:
f1:96:f8:35:ba:0d:3f:06:e7:c2:ce:4b:2c:09:2b:
25:2a:7c:2d:4a:e3:84:4b:e0:e3:e8:ab:74:c1:6a:
36:c2:70:38:5a:1f:1b:25:a1:9a:67:ed:4e:ad:b3:
a9:08:da:1b:85:ec:ac:3b:9a:09:63:63:5e:66:4e:
07:40:a0:48:52:af:82:53:1d:fe:2c:ce:b3:b2:11:
ff:8e:df:bc:a3:b0:0b:a4:4d:1b:ae:b4:4f:3c:7b:
34:d3:65:02:fb:8d:8c:b0:bc:24:14:9b:03:9e:c7:
e6:81:fd:c1:4a:41:31:19:f3:65:d0:7e:67:ca:3c:
f3:2b:94:eb:0b:3a:e5:9b:a8:aa:d2:a5:45:3b:88:
20:eb:88:ce:c8:8b:11:c7:5e:e8:a6:29:c7:71:0f:
8c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:38:36:BD:A3:DF:72:2A:89:47:94:79:9D:BC:73:1B:69:66:72:18
X509v3 Authority Key Identifier:
keyid:15:C1:81:70:6F:61:C4:B7:37:CD:7E:B7:8F:72:30:E3:4C:DF:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcGBcG9hxLc3zX63j3Iw40zfwUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/njg2vaPfciqJR5R5nbxzG2lmchg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.36.0.0/16
Signature Algorithm: sha256WithRSAEncryption
93:1e:6d:90:7e:1f:e8:67:96:26:5c:7b:90:03:e9:b0:3e:98:
b6:b2:5d:fd:d7:88:7b:64:3b:8d:cc:29:1a:8a:84:a1:2f:15:
54:e1:2a:a9:22:7f:4d:bd:34:3a:35:43:2c:fd:7a:46:f3:15:
34:05:70:a4:07:0f:76:7b:57:36:47:29:e2:2c:e4:8a:43:f1:
dc:e9:45:fc:17:2a:8d:71:3c:b0:89:f1:af:0a:62:13:ff:96:
8e:f4:6f:e2:16:b4:1f:6c:2a:dd:ef:b6:41:a1:67:8e:6e:3e:
ea:6c:62:36:e4:fa:7a:f1:f2:04:cc:ea:82:b4:9c:84:d8:6a:
9d:0c:75:7e:1b:9f:d6:46:22:45:be:ea:4e:6f:1d:01:4d:04:
47:8e:dc:4e:0c:03:72:c5:8f:f4:4f:f7:9a:49:3b:bd:3d:a8:
5c:91:7d:30:0a:a5:65:67:bf:c3:2d:7f:91:74:2a:0b:f8:6b:
67:65:70:95:a6:f4:1f:2f:4c:7c:7f:9e:71:8a:2b:b5:b9:48:
0e:7c:8d:e8:fd:cf:8d:e0:87:cb:cf:f0:ae:f7:60:f8:23:10:
bf:b2:e4:b4:27:fc:3d:e4:4e:86:2a:12:d2:6b:95:67:e0:0c:
88:72:3d:0e:38:2b:5b:00:b9:d5:05:95:85:8c:61:3e:65:9e:
c1:34:b2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:38:28 2025 by rpki-client