Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/NAMBInXKPKPqtrO6XK9P-eL20I4.roa
File: NAMBInXKPKPqtrO6XK9P-eL20I4.roa (raw, json)
Hash identifier: 4fJ+hFJ7pPmJDSjC/D+GIbCN1lrR9IBTNn+OYrdB5vE=
Subject key identifier: 34:03:01:22:75:CA:3C:A3:EA:B6:B3:BA:5C:AF:4F:F9:E2:F6:D0:8E
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 019A0CE8EE60C9F82F9E5B7C915A38F00C66
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/NAMBInXKPKPqtrO6XK9P-eL20I4.roa
Signing time: Wed 22 Oct 2025 17:13:03 +0000
ROA not before: Wed 22 Oct 2025 17:13:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 45.149.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0c:e8:ee:60:c9:f8:2f:9e:5b:7c:91:5a:38:f0:0c:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Oct 22 17:13:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3403012275ca3ca3eab6b3ba5caf4ff9e2f6d08e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fb:b9:3a:e2:b8:93:b6:e5:e3:29:ca:ad:d0:
51:0d:a1:ba:ea:ff:e1:61:c0:6b:ed:7d:b3:41:a5:
21:51:f3:40:bc:9c:43:cd:45:62:cc:97:43:39:7a:
94:09:4c:8c:45:02:f0:cc:7a:cb:23:4a:7f:92:72:
c6:e5:e0:d9:41:01:4a:c2:e5:22:09:64:c3:f1:4f:
fb:fe:33:2c:74:3a:73:48:78:65:80:c7:ee:fe:b9:
09:2c:79:2e:1f:c9:27:ae:71:1f:40:95:d0:73:8c:
e9:e5:5d:4f:1f:56:83:db:39:88:fb:24:df:dc:7b:
61:3b:40:09:87:da:52:ae:5a:01:8a:f0:ee:f6:f6:
cc:f5:f2:72:5e:16:0f:99:a2:64:ba:6e:00:a9:4d:
b3:05:9f:bf:30:49:75:a6:f1:3b:0f:e3:47:ff:cb:
e8:f3:ae:94:c0:18:5e:a2:9d:d3:67:a1:8f:32:83:
09:18:9c:dd:8e:95:1e:cd:9e:b0:1c:86:51:62:af:
72:e1:6d:da:82:7f:b3:e9:ab:d2:cd:d7:19:2c:0a:
38:f7:b8:4f:23:1b:d3:6c:07:67:70:86:2a:0a:88:
4c:3d:cc:45:07:f3:dd:14:2f:2a:5c:73:93:a8:d1:
a0:78:5c:5c:71:46:54:e0:c1:fb:17:d1:72:b5:ec:
d7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:03:01:22:75:CA:3C:A3:EA:B6:B3:BA:5C:AF:4F:F9:E2:F6:D0:8E
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/NAMBInXKPKPqtrO6XK9P-eL20I4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.94.0/24
Signature Algorithm: sha256WithRSAEncryption
61:cd:b9:fd:0b:f9:7c:44:6c:92:52:73:7b:7d:13:a4:38:af:
f8:a4:c1:e7:82:c6:f9:a6:0d:32:d3:21:97:40:85:65:1e:ec:
32:10:6b:d5:87:22:c3:18:5c:f1:b6:b1:3f:90:7b:f3:2f:7a:
a5:7a:d3:69:d2:78:1c:e7:30:85:09:6b:e2:ec:c0:04:56:21:
a1:1e:f5:94:0e:d5:9a:45:c4:45:73:69:8d:1d:3c:f9:79:dc:
df:d6:55:cb:71:b2:65:0a:fa:b1:53:0e:7c:c9:37:be:fc:9d:
5d:63:d0:25:fe:b9:ac:69:c0:80:b6:5f:8c:dc:f5:14:7c:41:
e0:e4:94:72:4a:88:fd:ca:cc:27:d8:d4:4e:16:8c:aa:0c:9f:
5a:e6:b5:fc:7b:80:7d:4d:63:b6:c8:53:bc:b6:7d:67:18:7a:
5a:c8:d0:0e:00:34:19:63:51:06:59:b1:9e:0d:a5:66:c3:db:
e6:0f:7f:7f:68:80:cc:b6:b7:ec:14:d5:64:06:ac:55:13:2c:
4f:8f:fb:2a:ea:29:cb:bb:31:66:4e:4e:2b:ca:2e:0b:56:f8:
fd:9e:3c:f8:a2:85:02:2a:2f:01:01:8b:e2:52:d1:1b:1e:96:
4f:f4:ca:d1:57:31:b6:b9:4e:b0:96:bc:fd:33:36:da:0d:7a:
2e:e2:dc:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 07:03:01 2025 by rpki-client