Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ncFYrClcgNvPFglYMsK6edrmwx4.roa
File: ncFYrClcgNvPFglYMsK6edrmwx4.roa (raw, json)
Hash identifier: rY7oFOnNYTVNUMt6dZvP9ZqQazBWarAil/M4g3gVAtY=
Subject key identifier: 9D:C1:58:AC:29:5C:80:DB:CF:16:09:58:32:C2:BA:79:DA:E6:C3:1E
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01990415B82AF6FA9480A390E2463D2CF37E
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ncFYrClcgNvPFglYMsK6edrmwx4.roa
Signing time: Mon 01 Sep 2025 07:02:36 +0000
ROA not before: Mon 01 Sep 2025 07:02:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 178.253.210.0/24 maxlen: 24
185.47.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:04:15:b8:2a:f6:fa:94:80:a3:90:e2:46:3d:2c:f3:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Sep 1 07:02:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9dc158ac295c80dbcf16095832c2ba79dae6c31e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:38:b9:61:ed:0d:28:8a:81:6c:d9:e9:7c:56:
cc:26:d9:0b:18:1c:c7:7e:d3:4f:bc:40:40:9c:8d:
44:68:c1:20:eb:58:29:cf:9c:42:e0:74:b6:8d:52:
de:4e:26:51:09:8c:b3:d8:ef:9d:59:ae:cf:a4:48:
55:10:a8:ed:df:a4:8a:c0:67:04:46:44:40:84:a7:
1a:96:62:6e:22:28:04:18:59:c4:6b:38:fd:4d:ef:
ed:40:dd:2c:24:e5:b7:73:66:17:09:06:35:8d:c4:
d0:0f:59:38:e7:f3:29:22:8b:9c:c6:82:66:50:65:
ff:5b:7d:ba:e6:a7:5c:dc:48:9e:5c:f3:32:73:4f:
42:51:67:00:cc:40:d2:f4:73:d1:46:00:99:64:54:
13:e4:e3:a2:4a:cc:b5:43:32:8a:ed:c8:94:c6:09:
e8:f6:51:80:6c:e2:8c:db:77:8b:80:c7:35:fe:c2:
96:44:43:c7:a0:8e:b9:0c:6d:2b:7b:66:d3:08:8a:
c7:6b:fc:cd:be:e1:84:7b:72:e5:5a:40:f0:6a:77:
3c:9d:65:ad:48:40:ea:0a:dd:03:bb:d9:8e:35:4e:
b2:54:92:54:c5:13:d5:f5:16:1c:c6:fb:7b:8f:9d:
00:92:b3:64:c3:a4:24:8e:3e:5b:76:04:7b:57:14:
24:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C1:58:AC:29:5C:80:DB:CF:16:09:58:32:C2:BA:79:DA:E6:C3:1E
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ncFYrClcgNvPFglYMsK6edrmwx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.210.0/24
185.47.91.0/24
Signature Algorithm: sha256WithRSAEncryption
99:85:17:ed:0a:4f:d3:70:cc:e7:ec:08:2f:af:d5:b1:8b:68:
33:69:2e:d4:3f:28:26:51:07:c0:fc:85:e9:a5:fe:ae:9c:bf:
d6:bf:3c:46:c0:d3:c4:60:dc:49:f9:02:2d:41:55:49:85:ec:
a4:0b:48:08:e8:8c:23:78:9b:a2:2c:6a:06:77:9f:28:1c:5a:
c0:3f:fa:a4:e9:78:93:78:08:e8:7f:7e:06:d7:05:fb:cc:a9:
87:b1:e0:6a:ac:2c:4e:3e:53:5e:7b:36:f0:7a:35:ea:bc:8d:
7d:0f:58:3a:32:84:65:cf:ca:97:3f:b7:1a:07:b2:94:20:d4:
7c:ad:53:f6:eb:e9:a9:f2:83:84:ee:f4:28:6d:9b:5a:12:6f:
ca:93:15:b3:95:fe:2e:4f:e6:92:9b:1a:5d:b2:ca:3c:b0:0f:
01:75:a0:59:a4:3a:1c:16:a5:16:e2:15:d9:95:38:cc:73:91:
5c:7c:85:f7:2a:f0:dd:ea:03:ca:18:69:ef:8c:fd:de:2e:9e:
52:ba:36:8f:67:5c:d0:d1:91:6e:79:a8:19:2f:86:0b:7c:b2:
91:50:90:31:a0:9f:d5:3b:86:d1:a5:f0:f4:38:e1:72:6c:2b:
40:ec:a8:3d:b6:b6:19:f1:1e:23:cc:66:9a:08:a9:85:26:43:
d0:41:3d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 07:56:24 2025 by rpki-client