Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/NjDn2QDxfqkxw8mzk9Zm1EYVUs0.roa
File: NjDn2QDxfqkxw8mzk9Zm1EYVUs0.roa (raw, json)
Hash identifier: ZkZYeAGG8Nq+LOCr6THMVK70U7O58hM3ITC3Y/o2mjY=
Subject key identifier: 36:30:E7:D9:00:F1:7E:A9:31:C3:C9:B3:93:D6:66:D4:46:15:52:CD
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 01997AAE3E6B75A7F67CE339549F0E9AB0A4
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/NjDn2QDxfqkxw8mzk9Zm1EYVUs0.roa
Signing time: Wed 24 Sep 2025 07:44:23 +0000
ROA not before: Wed 24 Sep 2025 07:44:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 92.53.184.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.mft
rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:7a:ae:3e:6b:75:a7:f6:7c:e3:39:54:9f:0e:9a:b0:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: Sep 24 07:44:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3630e7d900f17ea931c3c9b393d666d4461552cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ac:13:d5:3b:33:1d:70:85:9f:fd:be:fd:d5:
e1:f6:37:84:2f:cb:c6:96:45:ca:5a:dd:ca:b9:78:
c4:ef:00:23:aa:99:50:d8:29:97:8e:c0:3e:99:1f:
9f:01:43:bb:30:78:71:97:32:7f:af:38:0d:60:3b:
db:33:93:0d:2a:79:8f:0e:19:64:53:3b:f0:da:e5:
9f:e8:8f:de:67:44:f4:6c:8e:bf:ee:cc:47:15:0c:
6b:ae:8b:28:cd:31:8c:5e:e8:35:13:e8:d7:a6:a0:
af:2b:4f:97:de:b2:4c:e6:73:81:14:a6:d6:6e:24:
9a:e1:1c:6b:b8:53:81:b5:64:68:4e:ce:fe:f9:ec:
ce:fe:5b:70:50:c2:4e:be:59:63:87:46:86:53:04:
8c:5e:62:90:cf:ed:40:9f:8b:d9:a9:da:06:9a:01:
93:67:c7:78:4d:35:31:f9:00:7c:bf:49:7d:38:26:
ec:2d:93:9d:0b:99:10:8f:fc:80:16:70:ab:55:f5:
51:32:28:8d:9f:ef:8f:42:f4:b3:2d:12:c1:06:df:
62:00:80:45:ca:cd:40:99:41:a5:00:a6:71:97:12:
6b:ae:6e:bc:a4:17:ef:0f:97:8a:4f:29:76:63:82:
d4:16:2e:bc:2a:1f:0f:0c:fe:1a:15:6e:a5:58:56:
57:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:30:E7:D9:00:F1:7E:A9:31:C3:C9:B3:93:D6:66:D4:46:15:52:CD
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/NjDn2QDxfqkxw8mzk9Zm1EYVUs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.53.184.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:9d:82:87:61:68:44:f2:8b:29:ad:5c:14:06:7a:b8:71:9f:
e1:90:78:42:e1:24:76:d8:0c:57:3c:66:96:ca:28:66:6b:2c:
87:54:c0:21:83:bc:e8:c9:fa:2b:83:a5:c7:cb:d8:c6:88:53:
77:91:f3:2d:4d:d1:10:fd:97:d6:94:6a:fa:9b:a3:b2:fa:e1:
98:d4:37:a5:01:6d:f1:85:1e:08:2a:0e:f1:19:99:19:64:61:
37:1e:c3:01:d9:b2:2f:ba:bd:ee:80:45:98:24:0e:21:83:19:
c8:f5:0d:19:16:57:53:6b:91:26:b2:e5:30:2e:b9:90:d7:80:
3a:50:fd:dc:42:9e:01:56:94:ee:af:fa:44:d9:00:12:4c:1d:
f4:db:3a:5f:5d:1c:48:97:2d:b9:f7:b7:f8:94:1d:4c:09:ea:
ee:35:95:7d:88:f6:84:21:e3:37:9e:08:32:02:ba:63:54:bd:
41:9a:77:14:66:0d:0c:7f:2b:a2:7d:41:49:17:97:af:d0:4e:
43:53:16:65:a1:22:c4:33:b5:34:ec:01:8a:66:cd:c9:fc:d8:
9a:6e:8a:14:d4:0e:47:3b:4e:76:2a:aa:42:6d:80:f2:f3:16:
e1:28:64:83:e1:5c:c0:0d:c6:1c:a4:f0:89:e2:db:80:37:89:
67:dd:70:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:34:22 2025 by rpki-client