Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/nDjykDgCRY5PJeZrLhezjP3d1sg.roa
File: nDjykDgCRY5PJeZrLhezjP3d1sg.roa (raw, json)
Hash identifier: f6z3v4pV6tnSGxv48rgOnvHwC9qgyyjVMA6AIzAEA7k=
Subject key identifier: 9C:38:F2:90:38:02:45:8E:4F:25:E6:6B:2E:17:B3:8C:FD:DD:D6:C8
Certificate issuer: /CN=a4f6d657c0fa21828d313507354dec1481580ed6
Certificate serial: 0199154CE248778D534481520EDDBC1BC0B3
Authority key identifier: A4:F6:D6:57:C0:FA:21:82:8D:31:35:07:35:4D:EC:14:81:58:0E:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/nDjykDgCRY5PJeZrLhezjP3d1sg.roa
Signing time: Thu 04 Sep 2025 15:16:24 +0000
ROA not before: Thu 04 Sep 2025 15:16:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25255
IP address blocks: 151.5.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 09:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:15:4c:e2:48:77:8d:53:44:81:52:0e:dd:bc:1b:c0:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f6d657c0fa21828d313507354dec1481580ed6
Validity
Not Before: Sep 4 15:16:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c38f2903802458e4f25e66b2e17b38cfdddd6c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:20:b7:39:7c:4f:ac:4d:d8:0f:0a:55:d2:fb:
75:44:87:e9:ed:a8:94:8d:ce:0a:02:c1:be:e4:e9:
81:6b:02:5d:0c:a8:3a:2c:2c:74:6a:28:e4:e5:1e:
b6:26:e3:ae:2e:b5:e6:2b:15:03:a9:c6:c6:b4:1c:
5b:c1:58:39:5c:41:91:8d:f2:8f:bb:98:e2:9e:46:
be:d6:30:16:9a:af:23:e9:13:63:01:7b:45:d2:88:
aa:20:99:3d:51:8b:c2:c2:59:ca:ee:0a:8c:4f:f1:
1e:4f:a6:f9:fa:f9:e7:75:15:7d:50:04:c4:b3:2b:
f4:f5:d5:d3:11:d5:c4:4b:c3:d7:65:56:fa:3b:28:
c2:d5:b8:91:b3:89:06:bd:23:3d:bb:6d:b7:7e:f4:
25:b0:6e:17:4d:eb:98:9c:64:98:ad:9c:60:99:75:
f9:2c:9a:1b:cf:92:99:01:80:c3:b2:02:ae:e2:78:
df:71:ba:17:c4:f2:6d:cb:e8:f8:93:7d:6d:2c:68:
95:59:b7:6b:02:24:a0:cc:9d:07:e4:e1:e4:e6:59:
03:83:3e:ed:5c:1c:4a:32:88:a2:49:b1:72:d0:27:
e9:50:61:af:5e:db:2b:52:4b:4c:f5:d4:fb:4c:77:
8b:c7:bb:64:13:c5:9a:3f:68:90:ea:69:71:76:db:
88:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:38:F2:90:38:02:45:8E:4F:25:E6:6B:2E:17:B3:8C:FD:DD:D6:C8
X509v3 Authority Key Identifier:
keyid:A4:F6:D6:57:C0:FA:21:82:8D:31:35:07:35:4D:EC:14:81:58:0E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/nDjykDgCRY5PJeZrLhezjP3d1sg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.5.92.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:1e:5d:9c:4d:80:1d:0b:0e:db:c8:d9:b7:81:24:91:1f:05:
ec:92:d3:d7:d2:04:eb:cf:3f:46:2d:10:d2:46:db:a7:0f:1d:
fa:de:d4:90:7b:b8:25:ce:c3:36:46:93:55:17:e6:a4:8a:54:
05:c1:4e:52:a0:1a:02:62:24:1a:b8:83:96:bf:2f:5b:41:43:
df:2a:60:e3:0e:5f:b1:68:98:4f:c5:e7:24:c7:2f:de:97:f4:
88:74:ff:6d:f4:cc:3e:91:34:a2:1b:27:f9:f5:6c:82:77:98:
45:c4:ba:c5:87:a7:af:d6:83:35:b3:ad:c4:96:65:01:11:96:
a9:50:cf:1a:62:ab:4d:e8:8b:16:fd:d1:6d:23:81:84:ba:d4:
c2:63:2e:26:29:2d:79:58:71:3a:91:65:80:1c:71:e7:9d:92:
dd:b5:d5:4f:92:f8:02:81:2b:cf:90:fa:f9:64:c8:ea:d8:7f:
63:90:27:6b:09:e1:0d:88:65:11:b1:2e:0a:c8:51:09:d5:5f:
24:93:bb:16:bc:70:07:18:88:25:ef:0b:c5:ea:28:b3:db:73:
ba:f5:78:ad:03:c8:4f:43:64:ac:6f:ca:b6:6b:7e:80:e6:2c:
a2:86:0b:aa:53:b3:80:cf:70:83:99:7a:1c:a2:de:0a:3f:70:
44:33:3b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 13:45:17 2025 by rpki-client