Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/nsMUpYJUmKjCVWCxid0cbuzTzZw.roa
File: nsMUpYJUmKjCVWCxid0cbuzTzZw.roa (raw, json)
Hash identifier: FEv6X45pgppY2d5V8cAE7teEJNJCVmO5qOmeqCJTHkc=
Subject key identifier: 9E:C3:14:A5:82:54:98:A8:C2:55:60:B1:89:DD:1C:6E:EC:D3:CD:9C
Certificate issuer: /CN=62d190b238d97af7900bdcbd02304b782ffcaf2a
Certificate serial: 019A16FBF8AB20442C76D4F80EF9078F8460
Authority key identifier: 62:D1:90:B2:38:D9:7A:F7:90:0B:DC:BD:02:30:4B:78:2F:FC:AF:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/nsMUpYJUmKjCVWCxid0cbuzTzZw.roa
Signing time: Fri 24 Oct 2025 16:10:03 +0000
ROA not before: Fri 24 Oct 2025 16:10:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209635
IP address blocks: 84.45.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:16:fb:f8:ab:20:44:2c:76:d4:f8:0e:f9:07:8f:84:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d190b238d97af7900bdcbd02304b782ffcaf2a
Validity
Not Before: Oct 24 16:10:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ec314a5825498a8c25560b189dd1c6eecd3cd9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:75:9d:b2:bf:0a:1e:77:06:63:c9:7a:54:d8:
b2:cb:e1:c4:e5:2a:e3:7c:63:3a:fd:e8:41:c3:c4:
1a:72:62:a0:52:f3:74:5a:de:9f:4d:56:fe:2e:0a:
8d:c8:b4:8b:58:03:11:fa:34:3d:6a:08:85:69:ab:
e3:12:1b:62:6f:1e:00:f9:b6:bb:58:dd:d9:45:67:
44:a9:f3:54:4f:79:4d:73:a1:04:8f:7f:64:ca:08:
5a:cc:84:8c:ed:1a:41:a8:f0:87:06:e2:f0:70:d6:
f8:16:cf:2a:84:2c:3c:2a:7e:4d:8d:ad:cb:3f:fa:
ea:59:c9:ab:1f:9a:66:d6:19:f2:d3:c0:3b:b7:d0:
80:c9:2c:91:6a:52:72:ab:ab:22:7f:d9:31:44:1e:
d7:be:6b:85:4f:d0:62:b9:8f:25:b8:9c:d6:85:4a:
c3:94:49:68:45:52:a1:82:23:7f:92:d6:27:b3:3c:
e6:59:1f:3b:b6:2e:a8:3f:ef:dc:e0:9a:fd:d9:e1:
3c:f0:d5:03:0d:a2:4d:e0:c5:24:6f:5f:92:a0:7d:
3f:2c:dd:d0:1e:cb:ce:ec:ba:95:f9:07:e8:69:50:
aa:9e:1c:e5:96:60:9f:d3:06:15:1b:0d:d2:5d:14:
8b:60:f9:9f:90:48:b2:d4:05:20:bb:b0:16:35:36:
d4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C3:14:A5:82:54:98:A8:C2:55:60:B1:89:DD:1C:6E:EC:D3:CD:9C
X509v3 Authority Key Identifier:
keyid:62:D1:90:B2:38:D9:7A:F7:90:0B:DC:BD:02:30:4B:78:2F:FC:AF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/nsMUpYJUmKjCVWCxid0cbuzTzZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.45.31.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:b8:cc:26:02:64:82:95:7a:a5:88:5e:fb:3e:91:40:dc:e3:
ec:f4:f1:cc:26:ea:96:62:0e:23:31:4e:fd:72:b2:58:b4:76:
90:de:55:99:13:00:42:83:23:a5:29:89:89:5e:73:f7:29:24:
e4:ec:a3:be:19:79:4a:14:88:fe:a1:32:b7:a7:dc:70:92:68:
c7:79:70:26:2e:09:ac:7d:5c:e2:88:dc:f7:f5:72:48:d3:7a:
ce:db:95:14:61:81:3d:77:b0:5c:65:1b:01:ca:42:78:6c:24:
70:ec:fe:8f:2f:98:be:59:dd:ed:0c:4a:23:2d:a7:37:e6:77:
f3:26:8f:20:0f:6f:87:70:82:31:9b:d5:06:ff:2e:e6:e5:0c:
44:a6:a1:75:21:87:06:1b:71:d3:c7:f4:1f:7d:36:a6:35:55:
94:b2:a6:70:77:ff:6e:d4:0b:67:76:e0:fe:08:12:41:14:d3:
92:ba:98:68:ce:17:86:bb:cb:cd:9e:82:9c:67:c1:08:71:49:
57:15:d5:63:2f:d1:e8:64:fe:c8:5b:1e:4c:f7:0d:35:0a:b0:
d5:6a:aa:90:98:1d:80:74:d3:21:3f:0d:2c:86:6e:e5:47:8e:
2b:fd:06:7b:7d:c6:d3:55:ba:6f:bc:95:ed:a9:bf:2c:e7:e4:
cf:db:e3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:04:40 2025 by rpki-client