Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/nPeZE7NjK8v1X9W6OWWQV8CL9dk.roa
File: nPeZE7NjK8v1X9W6OWWQV8CL9dk.roa (raw, json)
Hash identifier: i5DQUMA7TTXDg8w9uPAc9gbe3ID2PYonRIJFljEMgcM=
Subject key identifier: 9C:F7:99:13:B3:63:2B:CB:F5:5F:D5:BA:39:65:90:57:C0:8B:F5:D9
Certificate issuer: /CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Certificate serial: 01995C082CC4D19C8E82E9E43BD6859CB589
Authority key identifier: DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/nPeZE7NjK8v1X9W6OWWQV8CL9dk.roa
Signing time: Thu 18 Sep 2025 08:54:23 +0000
ROA not before: Thu 18 Sep 2025 08:54:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62240
IP address blocks: 213.232.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 08:54:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5c:08:2c:c4:d1:9c:8e:82:e9:e4:3b:d6:85:9c:b5:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Validity
Not Before: Sep 18 08:54:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9cf79913b3632bcbf55fd5ba39659057c08bf5d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b1:47:05:46:bd:fe:c2:13:c0:e2:82:29:ed:
37:59:77:d8:ce:0f:9e:67:b8:67:97:e2:bc:a6:bd:
77:2f:ff:cf:31:fd:1b:4e:2c:57:1c:13:ed:44:12:
6e:91:f1:55:f4:d7:03:ed:12:bd:6a:2c:ac:b2:7a:
c8:95:08:1c:7d:29:c2:00:d8:30:35:60:76:9e:1b:
af:aa:0c:fe:65:2a:eb:2b:4e:d4:a1:fc:d6:e0:3a:
aa:c0:46:3a:65:7b:53:1e:ad:5c:4e:59:df:e9:01:
70:a3:80:5d:75:85:8c:b7:ab:47:cf:17:f2:5a:3b:
55:d0:aa:76:37:ec:1e:1e:bd:a1:8e:bd:82:ec:18:
05:93:ac:12:67:38:3c:74:72:2d:2e:ae:0d:ec:28:
57:11:04:79:3b:0c:c1:3b:38:a0:cf:dc:76:cf:51:
a7:34:11:02:37:a4:69:4e:6e:e4:e7:c7:b2:a2:a2:
0e:e4:52:ae:8b:ae:a0:2b:78:7c:2a:cd:93:27:02:
36:4f:63:dc:a4:c7:96:ee:42:cb:47:e4:4d:d4:fd:
16:21:ec:4f:d3:91:bf:0d:5b:2d:b5:f7:30:a9:99:
0a:64:bb:7a:eb:cf:61:fb:63:1a:b3:6e:e7:1f:33:
8c:07:b3:c0:c3:b3:4a:95:09:38:aa:4b:2f:9d:d7:
9f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F7:99:13:B3:63:2B:CB:F5:5F:D5:BA:39:65:90:57:C0:8B:F5:D9
X509v3 Authority Key Identifier:
keyid:DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/nPeZE7NjK8v1X9W6OWWQV8CL9dk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.232.236.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:68:a6:af:0f:e3:52:c5:64:4b:a0:27:af:43:d4:74:2b:e3:
83:82:e2:e4:9a:8f:43:03:5e:ee:cd:ec:df:7e:6c:b8:2c:79:
ad:66:09:e9:b6:09:6c:c0:df:75:bd:72:1c:10:df:93:7d:43:
e8:db:8a:6e:e2:89:a7:3d:66:be:35:fc:43:12:27:7a:e7:30:
ed:9a:50:3b:ec:56:2f:7e:56:3c:81:b9:b7:cc:06:d7:9d:0c:
fd:b8:98:66:e4:a8:12:cd:40:78:cd:53:e7:2a:f2:cc:01:7e:
82:94:64:0f:56:70:96:3c:20:2e:1f:90:10:d7:7a:3d:2a:8a:
83:50:65:8f:95:a4:ec:a3:d5:16:7c:98:dd:8d:64:c9:2b:6d:
49:7c:0b:9f:e2:7d:9d:b2:39:fd:01:7a:b9:b0:c8:62:a1:fa:
da:71:a9:a8:da:b6:b1:b2:6c:78:2b:ec:3a:c5:9c:90:90:09:
72:1a:68:a8:e5:22:17:11:20:fc:04:6f:36:28:bd:cb:a3:5f:
13:af:14:21:a7:2a:47:04:5d:79:6a:d0:30:bd:fd:37:ba:b5:
ca:3a:24:1c:81:d7:81:a8:2c:bb:b7:e9:2f:5b:9b:91:3f:53:
07:c5:65:9d:a7:6d:7a:6e:b7:2f:04:ac:11:b8:f5:5d:84:0e:
c3:3f:73:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 15:21:47 2025 by rpki-client