Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/nqnUS3SDho47rAwsw6o6hc-rYn8.roa
File: nqnUS3SDho47rAwsw6o6hc-rYn8.roa (raw, json)
Hash identifier: jQFg5NTXioeBx15r75HgA+cMqIdj8XZk/ZkpIZcH6YI=
Subject key identifier: 9E:A9:D4:4B:74:83:86:8E:3B:AC:0C:2C:C3:AA:3A:85:CF:AB:62:7F
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01992E491848F48527D4BAEDCC048A2A220A
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/nqnUS3SDho47rAwsw6o6hc-rYn8.roa
Signing time: Tue 09 Sep 2025 11:42:46 +0000
ROA not before: Tue 09 Sep 2025 11:42:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62240
IP address blocks: 163.5.71.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 12:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:49:18:48:f4:85:27:d4:ba:ed:cc:04:8a:2a:22:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 9 11:42:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ea9d44b7483868e3bac0c2cc3aa3a85cfab627f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:dd:ba:67:e4:ee:2d:d8:d4:97:42:38:fb:99:
42:40:5e:1d:a8:d7:cb:30:06:1f:ab:8e:c1:38:69:
c0:75:16:1f:84:11:f4:97:9f:09:6c:3d:96:80:7b:
b0:57:55:8f:a6:02:17:e0:9e:be:51:ff:6a:36:ab:
73:24:45:18:ef:ae:60:1f:5d:f6:2b:f2:c1:d6:27:
6a:16:23:9e:02:bd:6d:c2:46:b9:e3:82:c2:4e:48:
94:67:39:a8:bb:37:bd:71:d5:91:31:09:5f:e7:49:
45:2f:be:13:22:fc:81:2a:12:67:13:14:43:19:ad:
a9:76:a8:74:09:dd:9e:d1:9e:21:2a:64:69:fd:f0:
e7:9a:59:a1:83:62:4c:b7:c8:f1:f0:67:40:ff:9a:
d0:c1:8b:4b:37:43:53:1d:f3:ab:d5:6e:ea:13:68:
26:ba:88:86:03:f3:82:6a:02:03:fa:b6:d4:54:61:
fb:4f:c2:5b:a3:0a:a2:7b:86:b0:6a:15:93:04:21:
64:10:d2:95:dd:dd:27:6a:89:38:83:ed:98:98:fb:
ac:01:c3:05:53:af:72:46:88:7e:b2:e7:2a:b5:ca:
cf:e4:f8:06:9a:94:c2:18:97:9b:5c:d3:40:c0:c0:
96:9e:01:9d:ba:75:ff:a0:21:5b:c7:38:5f:d0:68:
64:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A9:D4:4B:74:83:86:8E:3B:AC:0C:2C:C3:AA:3A:85:CF:AB:62:7F
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/nqnUS3SDho47rAwsw6o6hc-rYn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.71.0/24
163.5.125.0/24
Signature Algorithm: sha256WithRSAEncryption
94:78:2d:b4:a2:6d:0f:40:40:00:fa:d7:b3:3b:a3:a0:39:0a:
22:62:79:10:af:51:ff:81:d9:2e:43:cd:2c:46:47:4a:79:b5:
33:8f:dd:f0:04:b4:3b:64:46:ef:90:83:7d:7b:1c:5e:17:4f:
e1:dd:e0:67:35:5f:21:5f:f4:2a:a2:3b:7b:b1:de:22:0f:b2:
1a:a8:d0:7c:73:3b:c8:51:a6:00:74:87:fe:aa:4b:72:18:3f:
ae:be:e7:2c:0a:0d:e1:e4:67:17:b0:41:06:a7:39:c9:a3:22:
82:63:45:67:86:c5:28:d5:02:2f:97:2b:d2:c1:f9:5d:3e:20:
ea:44:4f:96:5e:b3:d8:05:a2:50:c4:b7:55:6a:62:36:e7:33:
c2:4b:ab:5f:33:0d:e1:d7:d2:96:8b:47:c0:4d:94:25:17:d2:
33:4b:15:66:1f:49:3a:d9:de:b1:30:f5:28:d4:bc:c2:ea:bf:
58:1a:e7:00:d9:35:a1:8c:34:fb:7e:f0:a8:dd:2e:0b:46:c5:
2c:07:ef:18:af:4a:7a:57:05:57:c0:71:c7:d1:0b:aa:d0:ed:
22:4b:e4:54:26:8b:8d:a1:e6:ef:5d:20:fb:a9:9c:f8:8f:9b:
4b:ff:b2:06:81:57:8d:6d:6b:1f:c2:08:53:86:0c:d5:80:67:
02:47:4a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 15:21:47 2025 by rpki-client