Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/9fhOOLWzaKKnUgNesblBRXup_NE.roa
File: 9fhOOLWzaKKnUgNesblBRXup_NE.roa (raw, json)
Hash identifier: TIicytJIGRARKhFkXUtm3rRLHNbDX7lgNERyWMF3Dfw=
Subject key identifier: F5:F8:4E:38:B5:B3:68:A2:A7:52:03:5E:B1:B9:41:45:7B:A9:FC:D1
Certificate issuer: /CN=24ba4f52ac1be0755d34bc5483c061bdf293447e
Certificate serial: 01998FE041A967097DB3A149CE9F4C268F2D
Authority key identifier: 24:BA:4F:52:AC:1B:E0:75:5D:34:BC:54:83:C0:61:BD:F2:93:44:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/9fhOOLWzaKKnUgNesblBRXup_NE.roa
Signing time: Sun 28 Sep 2025 10:31:02 +0000
ROA not before: Sun 28 Sep 2025 10:31:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 194.42.47.64/26 maxlen: 26
194.93.123.0/26 maxlen: 26
2001:7f8:162::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 04:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:8f:e0:41:a9:67:09:7d:b3:a1:49:ce:9f:4c:26:8f:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24ba4f52ac1be0755d34bc5483c061bdf293447e
Validity
Not Before: Sep 28 10:31:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5f84e38b5b368a2a752035eb1b941457ba9fcd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5e:97:32:b6:97:10:dd:9b:61:d8:74:ea:1d:
99:f3:49:d3:a5:e9:bb:aa:44:dc:b8:7a:ea:e3:d1:
fb:32:84:4c:e7:c5:7c:c8:75:0d:54:27:76:1d:a1:
b1:b7:70:b4:8e:1f:87:93:fb:80:03:59:a8:02:9f:
7e:a6:04:2a:33:7e:40:8c:80:05:f7:86:53:18:c9:
59:55:1d:76:5b:87:81:4e:c0:ff:ef:ca:91:77:62:
49:78:39:bd:83:b8:24:57:2e:49:f2:ef:07:5d:1f:
bd:18:ca:de:bb:53:48:90:9a:88:ba:e9:62:1d:52:
b7:3f:4b:9f:5e:3a:b6:e3:bb:a3:05:ee:b1:38:18:
e6:c5:49:15:7f:25:83:a2:79:b6:65:73:b9:22:98:
00:ad:d6:05:7b:01:66:06:52:fc:c6:7f:ca:82:cd:
1a:3c:20:5c:c0:8d:b9:c4:7c:62:51:17:35:31:e7:
b9:3b:b5:af:1b:5d:f8:11:58:7c:6b:fd:14:9c:04:
a7:07:9b:6f:d8:14:61:e6:68:a3:cc:30:33:f1:81:
69:16:5c:44:87:8b:9c:1f:a5:1c:3a:f6:53:23:8e:
dd:a8:73:cf:31:35:ed:de:0b:ae:72:94:bb:90:a1:
16:3b:ae:7e:c3:2d:6b:f3:71:47:64:10:32:b6:3f:
d5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F8:4E:38:B5:B3:68:A2:A7:52:03:5E:B1:B9:41:45:7B:A9:FC:D1
X509v3 Authority Key Identifier:
keyid:24:BA:4F:52:AC:1B:E0:75:5D:34:BC:54:83:C0:61:BD:F2:93:44:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/9fhOOLWzaKKnUgNesblBRXup_NE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.42.47.64/26
194.93.123.0/26
IPv6:
2001:7f8:162::/48
Signature Algorithm: sha256WithRSAEncryption
49:60:19:3e:ba:03:be:87:fd:44:e6:75:32:ff:bf:e4:7b:7e:
97:eb:58:29:ab:b7:5a:67:1d:6b:a8:38:7f:36:a5:cb:f7:cc:
7d:0d:51:a2:ec:57:89:94:44:c6:25:39:b3:9a:17:21:6d:c9:
23:b2:23:20:b2:db:63:bc:5f:88:c9:a3:11:ca:01:86:aa:4e:
38:a8:c1:6f:aa:4a:58:9a:63:8d:bc:e5:c6:07:29:26:89:36:
ae:0c:a2:25:fb:e1:e2:02:4a:d2:1c:b3:e0:a0:41:23:f0:14:
e8:e5:32:a7:42:6d:c9:16:c2:5a:bf:b6:2e:18:3d:14:a6:2c:
5d:e4:92:67:23:22:8d:91:18:40:cc:14:fd:58:f4:52:b4:d2:
0c:b6:d0:a3:d1:98:d0:1b:03:f5:ba:26:65:e2:dc:e3:cc:88:
38:e2:d5:40:a9:93:fb:fd:59:21:52:11:ab:4c:f0:e5:9e:58:
d6:db:a7:80:11:70:99:58:11:47:aa:27:3e:05:04:0f:4f:0d:
71:4f:d4:0f:d6:f5:f0:2e:39:0c:c3:ba:7c:43:d5:64:ec:d1:
3b:cf:3d:e3:d6:8f:fd:be:3f:56:a9:86:ed:3f:b9:0d:42:3c:
71:25:44:ee:b0:83:7d:c1:1d:a0:85:dd:cd:c1:a0:35:b5:53:
9f:76:d4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 14:01:46 2025 by rpki-client