Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/nnRaPTdWT0I5mCAIv3uUnoBDHog.roa
File: nnRaPTdWT0I5mCAIv3uUnoBDHog.roa (raw, json)
Hash identifier: WHO0LN3x988yfZy6sulNPi/HXNoZ+/jemZUpVJlOqso=
Subject key identifier: 9E:74:5A:3D:37:56:4F:42:39:98:20:08:BF:7B:94:9E:80:43:1E:88
Certificate issuer: /CN=b6f3db35659133315d2fcf93058dce350a4cb17a
Certificate serial: 0198984C79C5B8AD26C8B3AF5EDDE28A48CF
Authority key identifier: B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/nnRaPTdWT0I5mCAIv3uUnoBDHog.roa
Signing time: Mon 11 Aug 2025 08:43:25 +0000
ROA not before: Mon 11 Aug 2025 08:43:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51500
IP address blocks: 185.17.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:98:4c:79:c5:b8:ad:26:c8:b3:af:5e:dd:e2:8a:48:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6f3db35659133315d2fcf93058dce350a4cb17a
Validity
Not Before: Aug 11 08:43:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e745a3d37564f4239982008bf7b949e80431e88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:01:5d:77:34:91:95:9d:b0:87:ff:3f:78:52:
1c:86:fa:58:09:9d:90:86:fb:82:98:18:e3:07:ff:
6b:f9:44:17:3f:d7:23:88:63:cb:52:ae:d7:a5:20:
cb:e5:ac:23:f3:f2:7a:aa:06:4d:c1:c7:cf:e5:ec:
9a:ac:3d:88:5d:df:40:6e:97:cd:89:52:ac:0d:7d:
6d:8b:b0:30:1a:2c:2d:2e:d5:cd:56:2c:55:63:91:
25:63:f5:04:16:72:0c:9c:95:ad:63:b2:d5:27:0c:
e9:48:79:d5:8b:10:24:cd:de:ef:92:17:7a:e2:0c:
b9:96:b0:f0:64:96:40:d4:d9:85:ea:59:32:59:b8:
6a:d4:cd:94:5f:da:d4:a5:9e:48:48:83:ac:d8:53:
9a:05:64:b4:22:8a:cb:b3:09:b1:83:4b:ae:28:e3:
d2:49:9c:32:4b:b7:08:53:22:33:4b:6e:d0:ab:3d:
d3:0d:d6:a9:25:53:11:a9:3b:6b:00:ab:db:a9:e3:
aa:7f:d8:70:db:c4:84:88:d9:9b:8c:27:93:34:07:
69:7a:62:ff:e7:1d:27:fe:2a:8a:09:e8:15:e8:c9:
e5:0c:94:88:3d:78:c3:fc:c5:dd:57:4d:82:59:15:
f0:ce:b6:97:7d:8a:e0:c4:8e:00:23:e2:0e:fb:79:
56:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:74:5A:3D:37:56:4F:42:39:98:20:08:BF:7B:94:9E:80:43:1E:88
X509v3 Authority Key Identifier:
keyid:B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/nnRaPTdWT0I5mCAIv3uUnoBDHog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.17.127.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:82:bd:49:50:d6:8b:35:7b:94:ae:1c:39:c7:af:ca:9f:aa:
d7:7d:62:97:94:dd:38:f2:0a:00:93:cb:ae:26:17:d5:5b:77:
91:40:bd:aa:b9:1b:07:6d:7b:a4:cd:04:d1:19:0f:e5:40:35:
06:1f:3a:0b:32:9b:10:91:9f:31:ae:e5:a9:46:8d:6a:f7:5d:
23:61:fc:ec:11:c0:f7:30:96:6c:f3:85:18:bb:4f:c0:cd:37:
18:83:61:8f:53:53:98:28:9c:f0:b8:b3:f4:cc:63:fa:bf:c2:
34:b8:b1:74:00:c1:f9:83:9b:c6:a9:d0:23:31:94:50:78:24:
bd:d8:c0:0e:01:fe:01:ce:64:96:84:c5:b0:64:2a:a9:b3:da:
3d:bb:99:1f:0e:f8:a0:00:94:a9:f9:70:31:13:0e:ca:d4:ec:
cd:79:1a:9f:86:68:68:97:2f:40:29:36:8b:ff:89:e9:b1:cd:
91:5c:80:29:87:28:de:12:f6:0d:a7:83:fb:11:39:e2:de:e8:
a3:62:21:4d:18:3e:a8:c7:f0:6d:47:6b:e3:fe:b8:70:df:00:
63:3e:2f:7d:a8:ad:18:d6:7b:f7:65:4d:4d:38:b9:11:97:3a:
b8:dd:05:a7:c0:9a:38:38:6e:66:32:cc:17:41:43:90:bf:5d:
89:e2:d4:53
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZiYTHnFuK0myLOvXt3iikjPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2ZjNkYjM1NjU5MTMzMzE1ZDJmY2Y5MzA1OGRjZTM1MGE0
Y2IxN2EwHhcNMjUwODExMDg0MzI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTc0NWEzZDM3NTY0ZjQyMzk5ODIwMDhiZjdiOTQ5ZTgwNDMxZTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gFddzSRlZ2wh/8/eFIchvpYCZ2Q
hvuCmBjjB/9r+UQXP9cjiGPLUq7XpSDL5awj8/J6qgZNwcfP5eyarD2IXd9AbpfN
iVKsDX1ti7AwGiwtLtXNVixVY5ElY/UEFnIMnJWtY7LVJwzpSHnVixAkzd7vkhd6
4gy5lrDwZJZA1NmF6lkyWbhq1M2UX9rUpZ5ISIOs2FOaBWS0IorLswmxg0uuKOPS
SZwyS7cIUyIzS27Qqz3TDdapJVMRqTtrAKvbqeOqf9hw28SEiNmbjCeTNAdpemL/
5x0n/iqKCegV6MnlDJSIPXjD/MXdV02CWRXwzraXfYrgxI4AI+IO+3lWdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ50Wj03Vk9COZggCL97lJ6AQx6IMB8GA1UdIwQY
MBaAFLbz2zVlkTMxXS/PkwWNzjUKTLF6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHZQYk5XV1JNekZkTDgtVEJZM09OUXBNc1hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83MGJmZmUtYjRmMy00NDllLTgxZWQt
NTQ5ZWU2ZDMwZmI2LzEvbm5SYVBUZFdUMEk1bUNBSXYzdVVub0JESG9nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC83MGJmZmUtYjRmMy00NDllLTgxZWQtNTQ5ZWU2ZDMwZmI2
LzEvdHZQYk5XV1JNekZkTDgtVEJZM09OUXBNc1hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRF/MA0G
CSqGSIb3DQEBCwUAA4IBAQCKgr1JUNaLNXuUrhw5x6/Kn6rXfWKXlN048goAk8uu
JhfVW3eRQL2quRsHbXukzQTRGQ/lQDUGHzoLMpsQkZ8xruWpRo1q910jYfzsEcD3
MJZs84UYu0/AzTcYg2GPU1OYKJzwuLP0zGP6v8I0uLF0AMH5g5vGqdAjMZRQeCS9
2MAOAf4BzmSWhMWwZCqps9o9u5kfDvigAJSp+XAxEw7K1OzNeRqfhmholy9AKTaL
/4npsc2RXIAphyjeEvYNp4P7ETni3uijYiFNGD6ox/BtR2vj/rhw3wBjPi99qK0Y
1nv3ZU1NOLkRlzq43QWnwJo4OG5mMswXQUOQv12J4tRT
-----END CERTIFICATE-----
Generated at Thu Aug 21 10:24:25 2025 by rpki-client