Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/nv5NXC0iSgOFubAs0kRpHi5dONQ.roa
File: nv5NXC0iSgOFubAs0kRpHi5dONQ.roa (raw, json)
Hash identifier: 8CHCvQtpT4uuc2prqbNwS7XX6gimw81CfcWs1XTVJdQ=
Subject key identifier: 9E:FE:4D:5C:2D:22:4A:03:85:B9:B0:2C:D2:44:69:1E:2E:5D:38:D4
Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Certificate serial: 019A5E0EC6D8E63D04CEBC5184A2DD0E74EB
Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/nv5NXC0iSgOFubAs0kRpHi5dONQ.roa
Signing time: Fri 07 Nov 2025 11:23:37 +0000
ROA not before: Fri 07 Nov 2025 11:23:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41957
IP address blocks: 195.245.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5e:0e:c6:d8:e6:3d:04:ce:bc:51:84:a2:dd:0e:74:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Validity
Not Before: Nov 7 11:23:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9efe4d5c2d224a0385b9b02cd244691e2e5d38d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4b:9a:7d:7f:50:a6:66:49:eb:34:05:8e:c3:
5c:62:72:9f:ed:ff:b3:f6:bd:52:bc:af:17:b5:92:
79:8c:f3:e6:3a:37:d2:72:7c:73:69:a2:d3:cd:3f:
a9:c7:b3:56:a8:63:a1:85:ec:1b:b4:a5:72:b0:70:
dc:bf:54:8e:44:fb:6d:29:5c:cc:a1:c3:23:db:e4:
58:3e:1d:e4:92:6e:1e:1f:1e:4f:3f:15:85:d7:8b:
27:1d:f7:48:6d:2d:c4:5a:6e:e5:2f:d5:ef:f7:e6:
9a:56:5d:ad:2d:b3:11:2a:da:a7:e5:07:03:95:3b:
e4:d1:82:af:38:85:79:63:25:3a:4a:40:c3:b6:e3:
e8:d5:a5:66:32:19:18:9e:f2:1e:4a:93:78:1f:b4:
27:3f:5c:e3:51:68:6c:55:33:0a:56:2e:13:70:1a:
34:03:37:f4:07:fc:c3:0a:8d:e8:5e:66:41:6f:9b:
b4:be:de:22:e6:ec:15:bd:07:05:7b:6a:67:90:82:
8b:62:68:20:4c:86:25:db:05:f9:78:68:12:bb:59:
b7:f8:b0:f0:46:a6:cd:26:49:f5:da:7b:8c:c6:dd:
48:e1:0a:af:77:b8:7f:3e:a9:f9:cd:61:5d:45:0c:
59:21:1e:63:0a:30:0b:c3:54:b1:e5:e3:c6:46:39:
d0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:FE:4D:5C:2D:22:4A:03:85:B9:B0:2C:D2:44:69:1E:2E:5D:38:D4
X509v3 Authority Key Identifier:
keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/nv5NXC0iSgOFubAs0kRpHi5dONQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.245.238.0/24
Signature Algorithm: sha256WithRSAEncryption
60:a8:09:e6:ad:3a:d3:f1:26:fe:9c:a8:32:75:0a:b8:11:c4:
98:67:2f:f2:33:c8:cb:4d:28:cd:64:cf:4c:4d:fc:be:c1:ca:
81:a5:5f:ca:a1:b1:48:b2:dd:1d:31:11:ac:4c:f6:e8:28:11:
56:6d:b1:d6:13:bc:47:2c:00:e0:19:cb:5b:2b:39:89:78:6b:
ac:39:9c:01:3c:fc:21:1b:e7:85:69:e2:4b:58:7e:98:bb:19:
29:f0:e8:70:f5:59:7a:f3:6a:73:78:2f:d9:69:4a:c0:77:69:
8c:35:e9:e8:92:ee:31:09:19:72:dc:25:22:d8:0f:5e:9b:c4:
3b:14:4d:09:0e:2f:d8:b7:a8:83:3d:cb:2e:5b:13:7a:5e:83:
fe:a5:15:4f:63:5d:c8:54:3e:6a:1a:5e:0d:c2:e6:73:2d:4c:
ee:9a:df:1b:b7:dc:ae:bb:2b:cf:d1:16:12:92:d5:70:6d:b9:
90:07:fd:ac:c1:db:36:8c:81:a1:43:17:4c:e3:1b:95:21:bb:
6c:e7:92:b2:db:58:ed:1d:0f:52:a9:13:a0:d9:5b:df:65:e8:
d1:bd:e6:58:5c:d9:fa:7a:a8:9a:4c:8c:8e:b5:8b:3e:da:d0:
ae:e3:bf:48:d1:0f:b9:e4:44:5f:92:1d:11:80:62:87:6f:38:
d3:ea:67:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:16:15 2025 by rpki-client