Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/NSBMSdSMSkDZPZPATZRaYBRZGko.roa
File: NSBMSdSMSkDZPZPATZRaYBRZGko.roa (raw, json)
Hash identifier: VafNKr4t7DSBVL6FM/c3Z2g09Dsix32ClTmM9E5fADQ=
Subject key identifier: 35:20:4C:49:D4:8C:4A:40:D9:3D:93:C0:4D:94:5A:60:14:59:1A:4A
Certificate issuer: /CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625
Certificate serial: 0199C58FC7BC83FA4D67D5D5DA0D3F4AE4A7
Authority key identifier: 8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/NSBMSdSMSkDZPZPATZRaYBRZGko.roa
Signing time: Wed 08 Oct 2025 20:42:38 +0000
ROA not before: Wed 08 Oct 2025 20:42:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201814
IP address blocks: 91.200.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c5:8f:c7:bc:83:fa:4d:67:d5:d5:da:0d:3f:4a:e4:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625
Validity
Not Before: Oct 8 20:42:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35204c49d48c4a40d93d93c04d945a6014591a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:90:33:81:fd:76:d6:23:69:66:58:b6:f2:ca:
b3:b4:5a:51:62:9c:7f:74:b8:93:e3:51:e9:b0:88:
77:a0:67:f9:69:f0:07:62:32:af:eb:24:39:60:37:
f4:a1:63:15:b2:2e:c8:46:04:3b:cc:20:8b:4d:60:
03:91:f3:39:dc:55:0c:05:6b:b7:b9:7b:eb:82:9d:
ff:bc:c6:78:93:bf:82:18:31:8c:ed:33:28:03:6c:
b1:80:0e:8c:57:bf:4c:84:eb:dd:fc:34:ea:47:f3:
71:ce:62:d4:4d:48:62:7b:f1:08:55:32:cb:56:94:
84:c5:76:95:6d:c8:9d:20:9a:d2:eb:2f:ef:90:e7:
a1:f3:bc:8f:fa:d1:28:e6:4e:68:46:5d:af:bb:13:
94:52:4b:7a:2f:e7:63:fd:d1:41:8a:2e:3b:a0:f3:
a7:a3:18:6b:fb:13:5e:db:12:1c:66:fc:0e:31:12:
5b:8e:98:d9:94:e8:f9:1d:66:d4:1a:5c:f4:3b:93:
d0:b2:9d:13:e1:67:5c:8f:b6:ba:43:25:3a:85:3e:
f5:78:92:6b:02:53:5f:6c:45:5b:92:6a:c9:7d:11:
4c:40:b2:92:47:9f:cd:6d:54:94:77:23:32:76:e9:
72:61:fb:2c:74:a1:64:a6:0b:c9:cf:c5:ba:d4:19:
c0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:20:4C:49:D4:8C:4A:40:D9:3D:93:C0:4D:94:5A:60:14:59:1A:4A
X509v3 Authority Key Identifier:
keyid:8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/NSBMSdSMSkDZPZPATZRaYBRZGko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.59.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:55:51:3d:ab:f9:85:13:9f:35:7a:c6:8a:23:b4:08:15:c3:
0b:80:09:42:91:d1:e7:14:c5:80:ce:ed:e2:c1:25:13:f3:aa:
da:78:ae:70:4f:61:fa:42:87:12:eb:5b:52:81:c4:c1:aa:17:
17:e5:78:2f:d0:5d:53:25:a2:31:f7:2d:0e:3e:9f:36:63:d4:
ba:ae:5f:d4:c0:e1:0e:6c:db:ea:24:57:0f:14:13:aa:fe:15:
43:af:21:d0:fe:e6:13:58:c6:4c:dd:7b:08:e7:8d:33:7d:ac:
78:66:6c:ff:e5:f9:bf:da:46:a5:41:53:11:43:5a:e8:a6:e4:
73:7e:c6:78:26:10:5a:11:02:04:ad:e2:58:1b:1f:d7:5e:94:
73:0d:6b:a6:4a:55:d6:87:b6:66:8b:7c:79:77:b9:61:de:82:
c2:c0:ed:da:a4:27:bd:d2:02:c2:b8:db:6a:c9:b5:10:28:3a:
c3:fc:0b:5d:4e:60:ef:77:55:5a:c6:38:1e:b3:c8:d5:4a:b8:
56:c2:e6:8d:9e:0b:6f:46:35:9a:cc:72:6d:79:4b:24:66:08:
2a:56:55:ee:9e:96:03:6e:44:32:f1:82:4a:79:50:48:d1:40:
6a:62:1f:f3:23:19:ae:c0:0b:99:f6:7d:06:54:7c:32:c9:98:
3f:3a:37:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 09:46:23 2025 by rpki-client