Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/NcbkyJf0XrQlWSuaG_6rLIv8CEA.roa
File: NcbkyJf0XrQlWSuaG_6rLIv8CEA.roa (raw, json)
Hash identifier: t1bpX5VtlqYKcE80al52Eab7HsC+sX2g/k7XldXhhvc=
Subject key identifier: 35:C6:E4:C8:97:F4:5E:B4:25:59:2B:9A:1B:FE:AB:2C:8B:FC:08:40
Certificate issuer: /CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Certificate serial: 0196EC7D3494E9987B8312A0B6A6456A6AA9
Authority key identifier: 1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/NcbkyJf0XrQlWSuaG_6rLIv8CEA.roa
Signing time: Tue 20 May 2025 06:59:10 +0000
ROA not before: Tue 20 May 2025 06:59:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 18046
IP address blocks: 14.102.0.0/24 maxlen: 24
14.102.83.0/24 maxlen: 24
94.228.16.0/20 maxlen: 24
114.69.232.0/22 maxlen: 24
178.213.128.0/21 maxlen: 24
185.18.72.0/22 maxlen: 24
185.182.120.0/22 maxlen: 24
203.89.96.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ec:7d:34:94:e9:98:7b:83:12:a0:b6:a6:45:6a:6a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Validity
Not Before: May 20 06:59:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35c6e4c897f45eb425592b9a1bfeab2c8bfc0840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:05:1c:3c:d8:d4:78:cb:ea:f6:0e:e6:60:24:
d2:71:4d:2c:ac:70:13:01:a0:28:f1:09:f4:85:e5:
60:47:a6:f5:50:0d:ed:6d:c7:2e:51:77:cc:87:a4:
e9:3e:70:ed:7f:6b:2c:fb:9c:4e:7e:fd:41:09:b7:
9a:b7:8c:1c:43:9c:73:3e:e8:5e:27:09:df:ed:c1:
a0:58:ee:10:22:19:e2:b1:99:b8:2e:ba:e6:63:ec:
6c:4a:d4:70:7c:49:4d:e5:ad:8a:3a:d9:d7:19:ec:
ab:a6:85:24:e5:bd:67:e7:64:0d:99:69:1e:b9:86:
43:a2:2b:83:72:a6:c0:09:88:dc:9c:b5:cd:7f:c4:
8f:4c:61:32:14:c7:ce:5d:a5:db:38:8e:b9:c3:e5:
02:0f:c7:d6:57:9d:a9:a1:88:78:e5:6c:a5:f7:52:
ef:0f:48:b2:5a:65:b3:0a:06:37:27:40:01:9b:7d:
90:8b:00:e4:33:7f:72:66:c2:79:71:dd:99:e4:4e:
12:0e:82:2a:1f:d4:c0:b7:f2:cc:8b:ec:26:1e:42:
d0:a7:b7:fa:7a:bc:4e:2e:7c:71:cc:c6:2e:44:d1:
e1:c6:37:cc:d2:58:c1:e1:a4:95:02:f1:c4:cc:b7:
16:e8:ac:43:f2:57:14:75:0b:50:d0:c0:ec:f0:db:
62:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C6:E4:C8:97:F4:5E:B4:25:59:2B:9A:1B:FE:AB:2C:8B:FC:08:40
X509v3 Authority Key Identifier:
keyid:1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/NcbkyJf0XrQlWSuaG_6rLIv8CEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.0.0/24
14.102.83.0/24
94.228.16.0/20
114.69.232.0/22
178.213.128.0/21
185.18.72.0/22
185.182.120.0/22
203.89.96.0/23
Signature Algorithm: sha256WithRSAEncryption
74:04:bf:ca:de:c1:ab:50:1b:04:d1:9c:36:54:c1:a7:dd:ce:
1f:72:b1:ff:31:d3:9a:62:31:96:db:e4:64:b1:0d:30:c9:aa:
e2:b8:8e:e3:83:45:c9:b0:d9:98:1f:b6:a1:a6:92:47:9a:39:
4b:61:70:87:c2:04:30:ac:8e:22:2f:3e:7a:72:37:33:10:6e:
bc:cc:6b:89:2a:eb:86:6e:b9:fc:6b:49:cf:64:21:a1:07:f9:
be:b9:0e:f9:c7:60:49:b5:ce:b6:f9:fd:1f:ed:6e:3a:ca:f6:
bb:56:28:75:73:81:4a:f7:ab:e8:76:3a:a7:36:49:56:f2:35:
4e:1a:b6:bf:5c:ff:03:38:9e:87:cc:db:62:48:5e:42:2e:4e:
6d:8d:f2:8a:ee:89:80:0e:6e:e2:4f:f4:04:27:0e:a3:85:52:
9b:f3:7f:74:50:ff:0f:a4:2d:f5:12:49:ad:77:13:0b:53:7b:
c0:14:ed:4c:56:ea:6a:33:49:76:77:da:b9:ad:7d:f9:01:43:
45:63:05:4a:f3:3e:a5:7c:c1:ee:53:91:80:28:ef:ce:e3:79:
35:32:7f:8f:fe:a9:7f:47:c5:c7:00:d4:1e:96:d4:f4:cd:14:
7a:89:f2:eb:80:27:2a:7a:da:6a:bc:57:1f:46:f9:50:4f:11:
5f:47:f2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 15:54:59 2025 by rpki-client