Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nAAfnI4OW8qqzo1QEA-JC8tU1PU.roa
File: nAAfnI4OW8qqzo1QEA-JC8tU1PU.roa (raw, json)
Hash identifier: a98VmxFADVe2ncBPi3jQlKf6eV+3F1L6DiN/x0G3qn8=
Subject key identifier: 9C:00:1F:9C:8E:0E:5B:CA:AA:CE:8D:50:10:0F:89:0B:CB:54:D4:F5
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01993993DC9CF3A926D7DC02E064816D3D35
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nAAfnI4OW8qqzo1QEA-JC8tU1PU.roa
Signing time: Thu 11 Sep 2025 16:20:15 +0000
ROA not before: Thu 11 Sep 2025 16:20:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213737
IP address blocks: 45.9.28.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
45.132.182.0/24 maxlen: 24
77.83.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Sep 2025 11:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:39:93:dc:9c:f3:a9:26:d7:dc:02:e0:64:81:6d:3d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Sep 11 16:20:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c001f9c8e0e5bcaaace8d50100f890bcb54d4f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5e:ed:29:ba:33:83:a3:d8:0e:09:50:c7:f4:
48:70:a8:17:9d:a4:7e:54:af:df:2c:52:c9:52:35:
50:df:32:5a:27:73:0e:56:ad:22:b2:35:eb:35:1a:
63:9a:f1:b2:77:c7:6b:50:1b:b0:18:93:30:9e:a0:
61:b0:5e:f9:b4:2c:23:f4:42:e9:86:e0:91:99:5d:
51:72:f2:ff:6b:a0:fb:2a:fb:cb:fe:c4:b4:4d:8a:
b6:e3:29:49:e2:04:a4:23:c9:83:65:0e:aa:98:cf:
a8:ab:64:bd:32:cb:54:36:ca:40:21:29:24:c0:c9:
31:6d:a4:5d:ee:7f:76:34:a4:97:a5:15:67:fe:a0:
08:9e:a6:8c:98:23:35:ac:e9:35:56:c5:c6:30:83:
a9:e5:ce:be:11:40:3f:02:86:f5:9b:9c:71:57:96:
0c:ac:12:b3:81:21:51:15:b5:4d:3f:7d:b9:06:ba:
ab:e6:ab:2d:3b:57:18:b4:0d:0b:e8:74:b6:8b:66:
52:90:54:78:4a:c2:eb:3d:ce:5f:ff:0e:89:55:74:
ca:53:d1:f5:ac:52:1d:bb:6b:a5:d8:2a:1d:e4:04:
c6:63:05:e4:8f:2c:76:a5:a7:15:c0:23:39:50:20:
98:45:d7:27:8e:0d:42:57:ac:30:32:c6:74:24:cf:
49:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:00:1F:9C:8E:0E:5B:CA:AA:CE:8D:50:10:0F:89:0B:CB:54:D4:F5
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nAAfnI4OW8qqzo1QEA-JC8tU1PU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.28.0/24
45.88.138.0/24
45.132.182.0/24
77.83.38.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:21:49:45:8b:2f:fd:a0:a0:f8:69:e6:12:f5:cb:21:39:bf:
4f:4c:41:8a:63:30:6e:8d:59:27:48:ef:38:93:80:62:e7:e0:
d1:7f:52:17:9f:b4:05:c4:62:a8:b7:7a:cf:25:62:90:f5:cb:
cd:77:71:99:41:d4:7d:fc:dd:63:06:e3:a4:cf:9c:f2:f5:54:
cf:b7:34:30:0a:9e:5e:68:fe:fd:3f:d4:cb:0f:a6:4c:5b:21:
ce:72:33:1d:ff:02:a7:73:c5:ab:7b:1a:1e:2f:24:d5:2f:32:
62:50:af:b4:e4:c9:fd:2a:91:18:68:06:2e:63:20:39:8e:8c:
35:c3:e2:69:1b:23:4a:e1:de:30:50:d4:10:45:06:5a:63:92:
a0:85:6b:c9:67:d7:b4:ad:7f:58:df:52:92:ba:13:32:10:76:
dd:40:77:cc:eb:81:df:b8:0f:b5:fd:02:b7:70:a3:ee:7b:cd:
74:e2:87:ff:64:ae:59:72:e1:f3:75:a4:92:29:81:98:a8:11:
01:9a:4a:3a:a6:11:c6:ed:f9:86:17:a7:b3:7f:54:e7:97:e2:
1d:fc:5d:5b:0d:f3:56:5e:cc:b6:63:2f:67:79:be:db:f3:c4:
78:02:10:bb:7b:17:58:cf:4b:1c:42:e3:7c:89:42:fe:d6:e2:
7c:24:16:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 14 16:07:18 2025 by rpki-client