Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/1NJHOgkSNtldGHlVdb90ILGaOIU.roa
File: 1NJHOgkSNtldGHlVdb90ILGaOIU.roa (raw, json)
Hash identifier: p7r+eUtZZPVGpnqQhwYcuwE/smqM71GVZ7jWKrGSevA=
Subject key identifier: D4:D2:47:3A:09:12:36:D9:5D:18:79:55:75:BF:74:20:B1:9A:38:85
Certificate issuer: /CN=e0e3976d9ecb8309a8181fbd025ca52fef161999
Certificate serial: 019A48EE3962ABC5434E351599C78008BB91
Authority key identifier: E0:E3:97:6D:9E:CB:83:09:A8:18:1F:BD:02:5C:A5:2F:EF:16:19:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OOXbZ7LgwmoGB-9AlylL-8WGZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/1NJHOgkSNtldGHlVdb90ILGaOIU.roa
Signing time: Mon 03 Nov 2025 08:56:03 +0000
ROA not before: Mon 03 Nov 2025 08:56:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 195.210.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4OOXbZ7LgwmoGB-9AlylL-8WGZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 15:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:48:ee:39:62:ab:c5:43:4e:35:15:99:c7:80:08:bb:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0e3976d9ecb8309a8181fbd025ca52fef161999
Validity
Not Before: Nov 3 08:56:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4d2473a091236d95d18795575bf7420b19a3885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:80:c3:f5:cc:86:eb:74:83:ad:11:8e:fd:4b:
fe:e7:64:f5:8f:67:83:87:64:34:ba:3f:66:6b:b8:
9d:ed:9c:60:83:6d:98:62:fa:24:4f:66:3d:c6:bd:
ce:bd:fa:e2:2c:08:86:71:a9:5e:73:f5:a2:44:fa:
5b:0a:da:81:11:ea:6e:f3:8c:27:e6:21:c3:36:c5:
56:1d:2b:2b:e1:8d:d9:45:b2:10:e0:2e:88:39:a7:
98:ba:4b:5a:5a:8d:61:05:5f:d9:e2:cc:01:c5:3f:
04:93:c5:2d:92:b0:56:2f:ef:3e:73:a9:48:a6:c9:
57:3b:a0:7d:9f:07:20:4c:05:c8:58:37:85:d1:a4:
37:5d:1b:18:f3:cc:9f:b1:ba:dc:41:ff:55:0a:5f:
b1:5a:b0:9a:3d:d8:e1:23:b6:2c:1b:f3:af:0f:0b:
97:6b:10:05:9a:8d:9d:e2:a5:07:50:48:7b:64:09:
8d:c5:4d:e4:fe:e5:4b:78:b2:b9:11:36:28:6c:d6:
48:8f:e2:b3:2d:83:c4:4d:2b:bf:50:6a:a6:bf:1f:
d1:ec:95:53:e1:f6:b1:19:cc:5f:23:14:54:c2:29:
a3:17:e5:4d:eb:7d:fe:a2:dc:0e:73:1a:2f:14:54:
08:d4:da:41:71:cc:2d:bb:a8:67:67:b6:5c:7c:55:
60:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D2:47:3A:09:12:36:D9:5D:18:79:55:75:BF:74:20:B1:9A:38:85
X509v3 Authority Key Identifier:
keyid:E0:E3:97:6D:9E:CB:83:09:A8:18:1F:BD:02:5C:A5:2F:EF:16:19:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OOXbZ7LgwmoGB-9AlylL-8WGZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/1NJHOgkSNtldGHlVdb90ILGaOIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.210.50.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:3d:5c:eb:0d:50:c1:51:17:b4:a9:ef:50:de:0c:a8:67:c0:
cf:0c:cc:e6:24:d1:03:76:52:cc:a4:d9:60:2a:ec:ff:3d:e8:
39:04:c4:ae:bd:7b:6e:af:dd:88:0b:21:e3:5f:52:22:75:0d:
83:bc:58:6a:b0:e8:18:c0:d9:63:b7:8e:d6:1f:73:ae:67:88:
fb:a6:44:90:78:14:a5:b4:c4:eb:9b:00:16:ee:c1:2a:cd:de:
8c:b8:24:d1:37:43:ab:19:05:ac:70:f9:8c:fc:fe:62:1b:5c:
13:bc:68:f0:88:b4:3c:6d:cd:ce:06:dc:66:06:94:7f:86:4c:
c2:de:8e:87:97:e1:55:47:3b:11:92:bd:64:76:b2:c3:a2:b3:
ac:b2:5b:90:db:54:46:e8:6c:3b:32:66:91:22:e1:d5:66:e7:
d8:00:39:4b:83:d6:d0:60:09:4c:41:6e:a9:39:50:b9:71:43:
0c:e3:10:af:12:5b:ad:52:7c:82:c6:2d:12:53:23:0e:74:dd:
b7:e0:9a:56:37:ae:ce:f4:6a:68:a5:06:ce:17:c2:a9:91:fb:
30:dd:ba:69:ea:b2:0c:f7:31:5a:8d:30:35:17:77:b0:11:69:
6b:ae:3d:3c:6b:91:74:86:84:73:53:42:d9:61:33:e3:0d:a3:
24:2d:3c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 21:51:00 2025 by rpki-client