Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/NOfNYnjfkQKY2utl6yjdUephoAg.roa
File: NOfNYnjfkQKY2utl6yjdUephoAg.roa (raw, json)
Hash identifier: 1ebe64NQinhJF6YqbAfLaVsjp7zKs9i8wk0SADx81V4=
Subject key identifier: 34:E7:CD:62:78:DF:91:02:98:DA:EB:65:EB:28:DD:51:EA:61:A0:08
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 019995DBEF43BC7C0A238948337D882CD79E
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/NOfNYnjfkQKY2utl6yjdUephoAg.roa
Signing time: Mon 29 Sep 2025 14:24:02 +0000
ROA not before: Mon 29 Sep 2025 14:24:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 154049
IP address blocks: 185.92.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:95:db:ef:43:bc:7c:0a:23:89:48:33:7d:88:2c:d7:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Sep 29 14:24:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=34e7cd6278df910298daeb65eb28dd51ea61a008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:76:7b:cc:4b:e6:48:ba:01:c0:56:38:06:7e:
aa:25:f3:d1:3a:20:d9:55:c2:a2:b6:3d:ef:2b:e5:
80:6c:a5:17:a6:e6:93:26:b6:d4:5c:66:f5:48:e8:
a0:72:2c:f3:ef:b5:34:95:c7:b7:cf:38:3a:70:5c:
07:3b:f0:5c:d0:73:6d:33:23:a7:cc:7e:ee:e0:28:
f4:0d:86:1c:e7:8f:24:ec:3f:28:1e:36:32:28:0e:
6f:19:05:c1:0f:f2:46:ab:fe:39:01:ad:ff:38:45:
37:06:81:a4:18:ad:e4:de:3d:c7:21:09:df:70:49:
a2:33:d8:05:cd:10:a8:b5:30:43:ef:74:eb:14:03:
61:ce:b0:6b:f4:e8:72:2c:c3:96:86:7a:0b:65:ee:
49:54:94:df:4b:0f:28:ee:cf:98:57:05:13:2d:80:
f4:ce:6c:78:03:ff:ad:3a:c9:7a:52:67:5d:76:43:
b4:6b:8f:3c:64:36:83:7f:8a:58:a1:d3:4f:da:a8:
bf:40:f4:1f:5a:b4:37:36:5f:ea:43:34:5d:81:6c:
6d:83:61:bc:2f:11:ed:87:fe:53:b0:f9:f9:43:05:
3a:93:15:b5:5a:7c:51:bb:ea:ee:7f:31:72:0f:10:
14:57:01:8b:68:05:07:28:86:ca:9d:e7:be:16:45:
be:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:E7:CD:62:78:DF:91:02:98:DA:EB:65:EB:28:DD:51:EA:61:A0:08
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/NOfNYnjfkQKY2utl6yjdUephoAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.47.0/24
Signature Algorithm: sha256WithRSAEncryption
52:23:81:50:fa:be:2c:a1:a1:5f:ff:a5:dc:59:c9:7a:78:d0:
13:92:15:33:9e:3b:cc:d5:99:97:64:1b:30:1c:83:10:16:31:
38:49:1f:62:61:b5:1e:84:e1:52:3e:48:82:7e:c6:ad:9d:6d:
ab:5d:28:22:fe:ed:40:c1:8c:a9:a3:2d:9c:bd:14:5d:7a:87:
79:e9:b3:58:6a:15:6f:a2:9b:77:36:c1:7f:1b:0e:2d:22:2b:
98:16:23:0a:44:2c:f9:43:e4:8d:2c:a2:f8:97:4a:e2:68:e5:
d4:ec:22:de:7d:5e:f0:2a:a9:01:fe:a8:10:6c:8f:de:80:65:
47:f8:7f:8e:69:3d:44:21:93:0b:85:e5:44:fa:f8:40:5c:ee:
4f:14:56:c4:8e:eb:42:73:47:bb:42:60:42:89:ab:f1:6d:43:
10:26:f2:2e:17:3b:d9:51:e2:34:ce:e8:f4:01:98:0a:e8:8e:
00:46:d6:a0:7d:87:07:c3:54:f6:12:09:f4:ad:9f:a0:1d:e7:
22:57:92:6b:af:32:8e:0e:46:31:bc:49:be:e3:e3:98:9f:b7:
49:a1:35:06:0a:44:a5:20:90:04:8a:49:a7:48:b0:ad:05:2c:
95:82:60:de:e9:44:30:b2:6a:c5:7e:55:14:ca:55:2b:2d:fc:
60:4f:52:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 06:22:36 2025 by rpki-client