Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/n0fnP9GXaFRJPhy5vbQyPQlsx1o.roa
File: n0fnP9GXaFRJPhy5vbQyPQlsx1o.roa (raw, json)
Hash identifier: miBa72UXa7BSH2oPhnZ56lT+ncKxjPO6Ow6UUI4sQts=
Subject key identifier: 9F:47:E7:3F:D1:97:68:54:49:3E:1C:B9:BD:B4:32:3D:09:6C:C7:5A
Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Certificate serial: 01987FDFA5FEF0BFACFEAAC8DDAC9534001C
Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/n0fnP9GXaFRJPhy5vbQyPQlsx1o.roa
Signing time: Wed 06 Aug 2025 14:53:40 +0000
ROA not before: Wed 06 Aug 2025 14:53:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42708
IP address blocks: 37.252.8.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 05:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:df:a5:fe:f0:bf:ac:fe:aa:c8:dd:ac:95:34:00:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Validity
Not Before: Aug 6 14:53:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f47e73fd1976854493e1cb9bdb4323d096cc75a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:08:b2:fe:1a:c4:92:89:ba:8d:67:f5:90:2d:
33:3d:45:5e:dc:a1:68:a5:20:aa:21:5e:2a:82:28:
56:d4:12:fd:4c:bb:ef:15:73:a8:8c:7e:f4:f4:a1:
be:b6:e1:cb:bf:18:d5:5b:97:ba:1f:a7:36:ea:d1:
e9:9b:65:7b:7c:38:62:22:a7:78:0b:3b:7b:a4:d1:
15:82:59:17:4e:6a:2f:ce:a2:f1:41:4c:1d:21:21:
4d:cd:82:eb:d3:65:29:8d:5e:03:d3:df:1e:14:53:
ae:a4:58:48:82:29:5b:8d:e6:4e:24:b4:9f:1a:17:
7f:b2:54:5d:96:95:77:1a:a5:ed:14:96:e0:f5:00:
57:b7:38:47:e9:32:40:4a:94:ad:86:54:a2:42:85:
6f:d2:4f:d8:e0:7f:06:e0:2b:7d:53:f1:26:44:de:
74:dc:2c:ac:b9:b5:bb:c8:3a:41:26:29:8c:83:d0:
8a:a6:14:35:61:ee:4a:b1:3e:60:81:d1:7e:2e:30:
25:6c:20:f9:3f:3b:1e:4a:4a:b3:81:03:a2:6c:65:
f0:14:9d:7b:2d:b5:b8:3f:b3:dd:db:8a:8b:2b:a5:
e0:46:d7:be:74:d8:5a:ec:7c:2d:a1:5c:89:8b:af:
72:dd:b1:41:81:87:3e:22:98:8c:5c:e4:78:43:4e:
c1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:47:E7:3F:D1:97:68:54:49:3E:1C:B9:BD:B4:32:3D:09:6C:C7:5A
X509v3 Authority Key Identifier:
keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/n0fnP9GXaFRJPhy5vbQyPQlsx1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.8.0/23
Signature Algorithm: sha256WithRSAEncryption
14:5b:dc:fd:d5:e0:c0:95:3d:7d:31:a1:e0:ee:09:20:fe:45:
f7:c6:05:ee:d9:b3:f5:c3:cb:cc:eb:ae:82:23:c5:e8:2b:55:
37:f7:f2:26:47:04:b8:8c:d3:50:fa:ba:56:1b:ab:44:94:2a:
a4:d5:e3:68:a8:e0:fe:b1:cf:20:12:c1:16:81:1a:59:c9:f7:
3d:25:40:fb:f2:c8:b0:fd:6c:4b:32:74:f2:3f:c8:07:aa:0a:
90:66:86:b6:f3:4a:48:31:c0:1d:7b:29:7c:c2:61:85:96:52:
39:9d:a2:b3:44:87:65:5c:48:8e:27:d7:23:24:16:87:10:0a:
ac:df:6a:32:e8:bf:85:d1:83:1c:b4:43:e6:5c:c1:6d:7e:6e:
0d:d2:de:ea:52:90:20:d1:8b:b1:bf:e9:21:60:2f:4f:d6:c2:
d1:47:0e:6e:4d:84:cf:ba:a0:08:17:03:3a:d8:f0:1f:eb:da:
41:c5:88:53:04:29:c2:5d:43:9f:42:1e:00:bc:56:fe:4b:62:
10:8f:61:c4:02:e7:bb:1c:22:3b:25:88:09:c6:8c:2a:4e:a8:
91:85:7c:32:c2:c8:a5:ca:c3:8b:2e:8a:8f:10:94:31:5e:6a:
bf:22:f9:b7:f2:a4:9a:ff:3b:f7:b6:3b:64:68:45:95:a2:eb:
ea:d9:f7:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 12:49:21 2025 by rpki-client