Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/41NUtPFxhObk-wVR35VCAMgd6ew.roa
File: 41NUtPFxhObk-wVR35VCAMgd6ew.roa (raw, json)
Hash identifier: PcHsWPaT2JkObS4lJVIC3b2jPWyUUdnpeoaDp23b2r0=
Subject key identifier: E3:53:54:B4:F1:71:84:E6:E4:FB:05:51:DF:95:42:00:C8:1D:E9:EC
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01990E74C005A12B3C28EE795C1AF00D59AE
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/41NUtPFxhObk-wVR35VCAMgd6ew.roa
Signing time: Wed 03 Sep 2025 07:22:36 +0000
ROA not before: Wed 03 Sep 2025 07:22:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396356
IP address blocks: 194.146.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Sep 2025 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0e:74:c0:05:a1:2b:3c:28:ee:79:5c:1a:f0:0d:59:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Sep 3 07:22:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e35354b4f17184e6e4fb0551df954200c81de9ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b0:48:1e:f4:3e:40:f2:2f:d9:d5:00:4e:f6:
30:df:d0:f3:40:1b:02:a8:1b:52:a5:20:bc:67:e6:
05:e7:eb:19:64:b2:7a:95:7f:d2:f3:36:3a:2b:c1:
9f:6d:d6:e2:c3:11:00:e4:40:d8:c7:cf:72:97:1f:
b5:bd:9f:bf:39:ac:32:a0:da:88:ea:67:fc:1f:ca:
3b:1b:60:4d:11:56:83:86:cb:35:07:e7:92:e4:1c:
8b:02:b1:6e:f5:97:4a:c8:16:80:9e:79:58:13:cd:
b3:1e:8c:68:4d:a9:7d:c3:46:4e:05:0d:60:ef:76:
8a:c5:e3:e3:73:01:80:e1:33:98:8e:f3:71:f9:85:
92:4c:8b:42:2a:5c:e2:ff:85:59:62:7e:c7:eb:75:
07:ce:11:73:91:60:12:f3:6b:17:91:66:ba:38:a9:
a6:fa:61:15:67:c4:33:50:42:50:17:20:97:d3:57:
55:ab:23:ba:f6:71:70:46:54:96:96:41:4a:77:0c:
ec:e7:10:17:5c:ea:18:ce:6f:de:b5:a9:0e:c1:e4:
03:3d:40:75:82:03:f0:13:f7:45:56:03:16:b3:be:
3e:6a:62:b0:4b:b4:c6:46:9d:76:42:40:9b:60:c0:
2e:30:f8:39:bf:db:2b:8b:98:38:38:71:c5:d2:cd:
44:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:53:54:B4:F1:71:84:E6:E4:FB:05:51:DF:95:42:00:C8:1D:E9:EC
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/41NUtPFxhObk-wVR35VCAMgd6ew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.93.0/24
Signature Algorithm: sha256WithRSAEncryption
95:7e:1b:9a:80:6f:f3:ba:ca:0c:21:f6:3c:0b:6b:e0:2c:83:
f0:8a:ab:0b:1c:db:67:a5:82:3c:ef:68:fd:4e:41:e3:61:c2:
51:8f:8d:60:d2:bc:b4:4f:e0:ca:87:81:eb:5b:3f:30:4f:36:
00:66:8e:d4:65:11:4b:90:65:8b:55:84:43:20:aa:f8:22:48:
af:ff:73:ce:0d:98:55:46:d5:fb:33:46:df:79:b6:b3:a1:a5:
cd:ee:53:4a:cf:c9:2d:fb:cc:81:e8:e5:0d:b6:c9:25:ec:f4:
63:40:18:bb:d0:fb:e7:f2:18:03:2a:1d:e5:c6:35:fa:e8:b0:
9c:b6:db:4a:36:b9:de:5b:be:32:ff:3f:ad:d0:1e:0f:ba:73:
d7:67:ab:1f:ae:25:e5:88:a6:9a:f5:4d:5c:e8:6e:93:96:b5:
e1:96:ee:43:26:10:5e:c5:19:22:28:c0:4c:e5:2a:2d:c2:4d:
c6:74:e8:7f:1f:53:2a:13:5f:5d:95:36:96:b3:43:9e:23:dc:
57:40:b0:7d:1a:eb:88:20:95:f3:1c:17:91:08:b6:de:e8:69:
e4:aa:f2:3e:15:11:da:73:bd:50:4b:10:ed:13:59:4d:6e:f8:
c4:9e:fc:03:97:27:c5:49:0b:e0:4c:62:78:ec:ec:ad:14:23:
6f:f3:fd:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 08:50:08 2025 by rpki-client