Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/NjUsN_LdeGQK3Mrw9jk5yZ9XQc4.roa
File: NjUsN_LdeGQK3Mrw9jk5yZ9XQc4.roa (raw, json)
Hash identifier: lewK8USqDYZNa7izSnIPvxOYg8crLlWZPbCwGgwM490=
Subject key identifier: 36:35:2C:37:F2:DD:78:64:0A:DC:CA:F0:F6:39:39:C9:9F:57:41:CE
Certificate issuer: /CN=c9470ae418eeddd6b39dae9e7a177a19c7799c41
Certificate serial: 0197A61C48E47C122587C9D28132E819B924
Authority key identifier: C9:47:0A:E4:18:EE:DD:D6:B3:9D:AE:9E:7A:17:7A:19:C7:79:9C:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/NjUsN_LdeGQK3Mrw9jk5yZ9XQc4.roa
Signing time: Wed 25 Jun 2025 08:02:40 +0000
ROA not before: Wed 25 Jun 2025 08:02:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.36.216.0/22 maxlen: 24
194.247.26.0/23 maxlen: 24
2001:67c:2024::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 15:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a6:1c:48:e4:7c:12:25:87:c9:d2:81:32:e8:19:b9:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9470ae418eeddd6b39dae9e7a177a19c7799c41
Validity
Not Before: Jun 25 08:02:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=36352c37f2dd78640adccaf0f63939c99f5741ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:45:38:a8:47:98:33:54:61:10:85:75:ec:99:
98:44:c1:d3:9f:e3:9d:a0:da:2b:da:eb:4c:82:e0:
20:d8:90:68:0b:95:a4:e9:1b:d1:32:3e:5f:9c:c1:
9c:7a:9c:ca:05:a9:21:c2:3d:cc:fa:82:76:9a:83:
b4:cd:b7:db:6c:0a:2c:ee:ca:d6:cf:c6:f3:87:12:
c7:7c:8f:ef:80:46:42:cf:32:ea:46:7c:df:eb:b6:
00:1d:13:5f:18:4a:fc:ac:f4:11:19:1a:73:7e:21:
c4:73:6d:97:80:a3:3f:56:1a:ca:f4:75:fd:77:ef:
1b:2f:02:d2:7d:06:25:fc:0d:e9:11:19:85:32:b2:
eb:0a:04:58:0f:7c:d4:23:06:b2:31:df:75:b9:ec:
35:cb:8a:7f:2e:0c:d1:91:de:12:75:9f:f6:26:b8:
cd:5a:b2:f0:e8:b5:fa:52:61:49:5d:fd:0e:7c:d1:
be:c7:76:95:aa:06:7b:11:12:01:67:b7:05:18:de:
96:55:d0:fa:71:b1:69:af:20:d2:6c:9d:a9:9c:fb:
04:e7:f7:26:f2:29:34:b3:ef:d9:c5:59:4b:d1:dc:
27:7d:c7:4b:15:97:f7:05:d0:fb:83:25:b5:61:e0:
ba:83:2c:a4:51:49:16:b2:11:2d:58:c9:82:75:28:
b3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:35:2C:37:F2:DD:78:64:0A:DC:CA:F0:F6:39:39:C9:9F:57:41:CE
X509v3 Authority Key Identifier:
keyid:C9:47:0A:E4:18:EE:DD:D6:B3:9D:AE:9E:7A:17:7A:19:C7:79:9C:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/NjUsN_LdeGQK3Mrw9jk5yZ9XQc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.216.0/22
194.247.26.0/23
IPv6:
2001:67c:2024::/48
Signature Algorithm: sha256WithRSAEncryption
30:ef:c8:83:63:6f:e1:6f:5d:21:c5:19:88:5d:b0:fb:65:0b:
c8:91:cb:cd:4b:fc:c1:17:fb:dc:79:82:31:5c:13:78:5c:f4:
c8:59:a3:b9:8e:19:4b:cd:6c:93:5f:8a:db:49:67:74:2b:ae:
2c:f8:5c:53:62:3a:94:be:2f:61:83:00:43:67:fe:bc:68:ee:
11:8d:48:5c:26:be:36:89:f2:5c:d8:a0:39:a7:bf:66:70:dd:
e1:c6:29:3c:80:c6:23:17:73:ee:89:d4:c9:de:be:8b:94:3e:
a6:1c:5f:cc:53:32:2a:f9:e9:e1:d1:b8:ed:6b:c5:f6:b3:b1:
11:ed:8a:cf:a0:b3:4f:90:a8:8d:5b:34:b6:56:b2:ef:f8:47:
2d:5d:7b:30:40:94:43:ce:75:d1:69:ff:39:e2:c9:2d:76:55:
cf:94:6f:9f:99:40:68:a2:dd:69:af:c6:a7:e0:51:f2:34:5c:
d0:d0:bd:c5:b5:eb:79:9f:1a:c4:4b:a4:80:48:54:5a:bf:cd:
05:7f:5e:1b:70:00:bd:a0:e0:05:fa:f2:99:12:8d:9a:30:d3:
6e:0b:d2:1e:06:b1:fb:cd:6d:dc:9f:96:67:23:e8:7b:6b:76:
f7:e5:a7:19:f1:a2:24:2c:7d:81:f0:0b:48:57:3a:95:f7:ba:
cc:7e:f5:34
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZemHEjkfBIlh8nSgTLoGbkkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5NDcwYWU0MThlZWRkZDZiMzlkYWU5ZTdhMTc3YTE5Yzc3
OTljNDEwHhcNMjUwNjI1MDgwMjQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNjM1MmMzN2YyZGQ3ODY0MGFkY2NhZjBmNjM5MzljOTlmNTc0MWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkU4qEeYM1RhEIV17JmYRMHTn+Od
oNor2utMguAg2JBoC5Wk6RvRMj5fnMGcepzKBakhwj3M+oJ2moO0zbfbbAos7srW
z8bzhxLHfI/vgEZCzzLqRnzf67YAHRNfGEr8rPQRGRpzfiHEc22XgKM/VhrK9HX9
d+8bLwLSfQYl/A3pERmFMrLrCgRYD3zUIwayMd91uew1y4p/LgzRkd4SdZ/2JrjN
WrLw6LX6UmFJXf0OfNG+x3aVqgZ7ERIBZ7cFGN6WVdD6cbFpryDSbJ2pnPsE5/cm
8ik0s+/ZxVlL0dwnfcdLFZf3BdD7gyW1YeC6gyykUUkWshEtWMmCdSizLwIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFDY1LDfy3XhkCtzK8PY5OcmfV0HOMB8GA1UdIwQY
MBaAFMlHCuQY7t3Ws52unnoXehnHeZxBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVVjSzVCanUzZGF6bmE2ZWVoZDZHY2Q1bkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9jZTAyMmQtZDhkYi00NDU5LWJlMWMt
YjA5MTIxNWQ1ZTRkLzEvTmpVc05fTGRlR1FLM01ydzlqazV5WjlYUWM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9jZTAyMmQtZDhkYi00NDU5LWJlMWMtYjA5MTIxNWQ1ZTRk
LzEveVVjSzVCanUzZGF6bmE2ZWVoZDZHY2Q1bkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQCuSTYAwQB
wvcaMA8EAgACMAkDBwAgAQZ8ICQwDQYJKoZIhvcNAQELBQADggEBADDvyINjb+Fv
XSHFGYhdsPtlC8iRy81L/MEX+9x5gjFcE3hc9MhZo7mOGUvNbJNfittJZ3Qrriz4
XFNiOpS+L2GDAENn/rxo7hGNSFwmvjaJ8lzYoDmnv2Zw3eHGKTyAxiMXc+6J1Mne
vouUPqYcX8xTMir56eHRuO1rxfazsRHtis+gs0+QqI1bNLZWsu/4Ry1dezBAlEPO
ddFp/zniyS12Vc+Ub5+ZQGii3WmvxqfgUfI0XNDQvcW163mfGsRLpIBIVFq/zQV/
XhtwAL2g4AX68pkSjZow024L0h4GsfvNbdyflmcj6HtrdvflpxnxoiQsfYHwC0hX
OpX3usx+9TQ=
-----END CERTIFICATE-----
Generated at Tue Jul 1 01:31:40 2025 by rpki-client