Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/nGf4clyvxPYwBrU296G7mY4eUbI.roa
File: nGf4clyvxPYwBrU296G7mY4eUbI.roa (raw, json)
Hash identifier: i1AhtCfSry1O6et9gsNXcvF6wI6iGZL471NkpojK1iM=
Subject key identifier: 9C:67:F8:72:5C:AF:C4:F6:30:06:B5:36:F7:A1:BB:99:8E:1E:51:B2
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 0197BF1E97EA69182DAC8F3987811C5A24F5
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/nGf4clyvxPYwBrU296G7mY4eUbI.roa
Signing time: Mon 30 Jun 2025 04:35:42 +0000
ROA not before: Mon 30 Jun 2025 04:35:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 178.22.26.0/24 maxlen: 24
188.95.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bf:1e:97:ea:69:18:2d:ac:8f:39:87:81:1c:5a:24:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jun 30 04:35:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c67f8725cafc4f63006b536f7a1bb998e1e51b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a1:22:e5:91:56:99:82:bc:e3:af:83:a3:10:
ac:ba:ed:9a:1b:78:38:fb:70:0b:9d:f6:6b:71:1c:
c1:fe:d6:ef:53:cf:72:f1:cf:a6:27:f3:d6:07:b3:
45:b5:56:55:77:ab:8d:9e:a3:65:0e:13:45:e2:3d:
64:42:51:d6:6b:c6:4c:a8:0f:59:f8:93:92:c1:82:
4b:54:2e:d5:15:44:55:8d:c2:f7:4e:73:a9:cf:35:
09:cf:30:12:dd:6a:41:35:73:90:d3:5c:08:87:e6:
ef:71:96:ce:4c:60:48:71:37:46:74:6e:ce:89:04:
df:49:d1:fe:b2:26:7c:4e:22:96:ce:85:88:f4:3e:
21:3e:c8:c1:c5:88:0a:6e:da:a9:ac:fe:62:1b:8a:
8b:9c:e6:e0:c9:1a:92:0e:f5:f8:50:a5:17:46:96:
1e:52:de:ac:ed:b5:4f:c3:dc:68:da:df:df:e7:26:
b2:b6:cc:d6:d1:6f:28:6d:23:e2:52:15:18:37:26:
5c:86:2e:a6:13:51:0a:4f:d7:fb:8c:d4:6d:83:8d:
6c:7a:3f:06:05:50:b6:8d:ec:cc:7b:88:f4:e8:52:
7d:d0:3a:9a:79:9a:6e:ad:34:2a:ed:ba:66:18:54:
6d:83:7b:b6:46:f5:70:83:0b:ea:c0:58:93:da:e5:
a7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:67:F8:72:5C:AF:C4:F6:30:06:B5:36:F7:A1:BB:99:8E:1E:51:B2
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/nGf4clyvxPYwBrU296G7mY4eUbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.22.26.0/24
188.95.70.0/24
Signature Algorithm: sha256WithRSAEncryption
52:76:9f:20:41:b3:8b:2f:53:1a:8a:1a:dd:c6:c9:44:76:59:
ca:43:a0:6a:94:6a:8b:ba:97:e0:34:54:a0:91:e9:2d:21:2f:
46:f3:29:21:80:96:26:65:2a:ef:2e:a9:f4:31:71:be:04:53:
c8:66:5c:a1:c4:93:a0:fb:45:8e:91:ba:6d:ff:48:e4:01:37:
19:fa:1f:0c:f1:17:d4:7e:22:9b:a8:69:94:4a:bf:39:2d:b3:
6e:28:7a:db:68:2f:b5:1d:cd:15:ed:e6:77:2d:1b:94:fb:63:
42:36:82:ad:cc:58:f0:e2:8f:d9:80:c1:e7:32:46:77:cf:47:
d7:a3:00:53:48:b8:45:5e:ed:80:fe:e3:8b:d5:96:f8:48:a7:
72:46:9c:52:31:6d:45:8c:7a:cf:21:48:6c:77:6f:b2:4d:f4:
67:ac:5a:3d:79:a8:8e:d4:d0:e7:a8:b8:9c:f8:59:30:18:42:
77:44:3e:f4:ec:6f:77:dd:53:a9:e4:74:df:77:58:5c:9f:ad:
a9:4a:d3:c0:e7:a2:63:1d:67:c0:27:b4:62:b9:78:ed:69:a0:
ca:31:6b:c3:90:4f:7d:93:65:6f:78:ef:67:90:e7:e3:47:d2:
eb:c0:3e:ee:57:06:3b:d8:7f:38:35:90:f2:84:a5:e2:4f:d8:
12:7b:07:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 21:26:37 2025 by rpki-client