Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/NJxwRBkvshih-xmgz1X2qxZLLGU.roa
File: NJxwRBkvshih-xmgz1X2qxZLLGU.roa (raw, json)
Hash identifier: WAXGkwJLmpUUMtECpnkhuJeq2y5mE3vQZXofWlN+lAo=
Subject key identifier: 34:9C:70:44:19:2F:B2:18:A1:FB:19:A0:CF:55:F6:AB:16:4B:2C:65
Certificate issuer: /CN=7e2cb3d0a641769c7801c481612015c2ccb3b655
Certificate serial: 01991B0EE0B1B48D8E72AA3445A4CB10820E
Authority key identifier: 7E:2C:B3:D0:A6:41:76:9C:78:01:C4:81:61:20:15:C2:CC:B3:B6:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/NJxwRBkvshih-xmgz1X2qxZLLGU.roa
Signing time: Fri 05 Sep 2025 18:06:23 +0000
ROA not before: Fri 05 Sep 2025 18:06:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213565
IP address blocks: 46.255.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1b:0e:e0:b1:b4:8d:8e:72:aa:34:45:a4:cb:10:82:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e2cb3d0a641769c7801c481612015c2ccb3b655
Validity
Not Before: Sep 5 18:06:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=349c7044192fb218a1fb19a0cf55f6ab164b2c65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:63:ca:e8:6c:80:e9:26:a5:9c:af:8f:a6:53:
16:e9:ae:c1:ef:5a:c6:08:41:5b:fc:d6:d2:36:f9:
cd:ed:c6:aa:a0:0f:cf:21:d8:21:43:0a:31:02:66:
8e:6d:d9:a0:ec:ee:e3:4d:98:1e:01:52:72:f3:56:
11:ac:68:e2:d1:3a:0b:1e:fe:70:67:56:35:58:3d:
a1:bd:20:b6:fc:82:82:ae:5c:1a:2a:06:e0:24:d7:
19:e5:a8:78:8d:84:11:80:10:b6:f4:77:46:bf:f4:
94:a5:f1:64:7f:9a:e5:52:13:39:f3:95:6c:28:7e:
e8:47:51:23:83:54:87:35:0d:da:98:37:fc:14:3c:
a5:40:d1:01:e9:12:fa:c6:0d:22:3f:ec:35:4e:69:
b3:ec:5f:8c:7c:38:dc:a9:5c:ab:b9:0b:9b:8f:d3:
5a:65:8b:b5:a2:58:da:73:e7:06:ea:1e:a0:47:03:
3a:e8:1b:30:1d:13:48:ea:b6:2c:45:05:ce:b7:60:
20:27:cf:0a:41:76:97:14:42:17:a6:13:f6:a3:12:
ed:c8:1a:ba:45:2a:44:24:b0:e0:50:1b:1a:06:37:
8a:3d:10:61:f6:99:5f:c8:37:98:f6:3a:9d:3f:e0:
bb:b3:04:77:67:52:c6:e2:4b:4e:32:c9:00:4f:38:
86:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:9C:70:44:19:2F:B2:18:A1:FB:19:A0:CF:55:F6:AB:16:4B:2C:65
X509v3 Authority Key Identifier:
keyid:7E:2C:B3:D0:A6:41:76:9C:78:01:C4:81:61:20:15:C2:CC:B3:B6:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/NJxwRBkvshih-xmgz1X2qxZLLGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.78.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:1e:07:5e:58:eb:b9:09:94:02:06:26:b0:03:cc:95:ee:a6:
8c:df:e9:42:4b:6b:15:3f:64:a8:cf:e2:a0:92:35:c2:f4:b6:
27:0c:71:af:31:64:0e:15:8d:f1:27:d8:83:fc:35:c6:f2:12:
a6:e0:db:e0:b4:8e:56:ff:2c:1f:a8:df:d7:44:fa:3a:e6:4e:
85:2d:48:40:47:29:71:2e:6e:a9:c4:10:54:e1:04:af:d3:88:
0c:27:c2:bf:f9:ed:b7:ca:4e:9e:7c:20:5e:eb:6b:ba:66:ed:
3a:b4:5e:58:bc:57:a3:8e:1d:de:17:6e:c7:36:e1:83:62:8b:
d8:00:f0:98:d6:4f:4d:0a:07:41:6f:85:d3:ce:8d:19:8b:04:
ae:da:75:99:aa:27:29:d8:f2:a2:be:d9:79:63:a9:c7:10:54:
be:e3:8b:c0:b7:3c:8a:36:77:27:ac:1e:76:93:6c:70:0c:b9:
28:18:d4:63:b6:d3:04:25:d3:67:43:f8:6e:74:d0:c2:bb:15:
df:8f:e8:70:36:57:bb:4c:2d:b8:0d:69:01:f0:c7:fb:5c:e2:
74:50:61:2c:55:2e:63:b0:02:32:82:fe:80:7d:b7:f5:9b:12:
c9:27:b4:fd:1d:25:41:f2:0b:1d:90:45:71:86:42:4f:b7:c4:
02:1a:c5:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 10:06:20 2025 by rpki-client