Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/NbAB9N4JZr_SRzjLewV-ILFMGWk.roa
File: NbAB9N4JZr_SRzjLewV-ILFMGWk.roa (raw, json)
Hash identifier: 02wVIkpve7WpvyvyLd5xUnqi0o7YKgv+NyTQXHhSBzM=
Subject key identifier: 35:B0:01:F4:DE:09:66:BF:D2:47:38:CB:7B:05:7E:20:B1:4C:19:69
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019A06CFF568A732DD259728E9D51CFA5B47
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/NbAB9N4JZr_SRzjLewV-ILFMGWk.roa
Signing time: Tue 21 Oct 2025 12:48:03 +0000
ROA not before: Tue 21 Oct 2025 12:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133153
IP address blocks: 193.254.244.0/24 maxlen: 24
193.254.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:06:cf:f5:68:a7:32:dd:25:97:28:e9:d5:1c:fa:5b:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 21 12:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35b001f4de0966bfd24738cb7b057e20b14c1969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8d:a4:75:06:0a:f1:8c:bd:9f:7b:53:4e:16:
c2:bd:ad:5e:b8:89:2a:67:dd:20:6f:75:ed:09:63:
4a:17:5b:e8:38:6c:91:ec:b3:d6:54:7b:7d:7d:cb:
95:b8:b0:cb:59:56:89:51:6b:f8:50:82:45:06:12:
f8:ca:9e:d3:93:53:3c:47:50:42:7e:f9:0e:04:9d:
8a:23:3e:30:c9:b8:fe:b0:0e:f8:8b:cd:1d:18:b0:
b4:4a:3e:f2:e1:2d:dd:4a:fd:05:6d:68:63:c3:b0:
9c:cd:af:2e:40:e0:d8:17:60:2b:2a:c5:6a:98:6b:
8e:ac:06:3c:4d:ec:65:84:4c:55:bc:67:3f:8d:86:
4f:c0:fd:b9:bf:a1:ab:0e:4e:9c:f5:16:d9:11:d4:
0c:06:57:fd:b3:55:ae:bf:af:49:1f:f9:96:9f:c7:
7f:e7:33:f0:6d:7f:ef:8c:ec:08:22:86:66:49:3f:
5c:79:3c:ce:e8:21:6a:83:10:40:c5:67:19:84:4e:
8a:82:f0:6f:3d:13:5c:ce:4d:51:8a:db:c9:14:5f:
1f:71:a1:33:56:05:5c:2f:ed:a6:f2:83:79:eb:b8:
f3:50:62:5b:33:7d:7c:fa:6e:4a:59:a2:b8:8f:8a:
82:de:aa:6d:97:f4:d2:b3:9f:8a:3f:4b:c3:90:7f:
9b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B0:01:F4:DE:09:66:BF:D2:47:38:CB:7B:05:7E:20:B1:4C:19:69
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/NbAB9N4JZr_SRzjLewV-ILFMGWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.254.244.0/23
Signature Algorithm: sha256WithRSAEncryption
43:ce:b8:50:1f:4c:42:ef:f5:6a:db:73:f6:99:77:83:ab:a0:
91:6f:1c:94:48:68:fc:41:90:21:81:ef:1e:dd:28:02:a4:26:
35:d8:01:13:4f:4a:44:fd:50:76:fe:35:57:59:8a:db:2a:98:
53:b3:04:a9:b7:35:35:3b:a9:72:e2:97:4f:47:a0:df:d9:f5:
ac:c1:7f:3f:24:75:3d:86:65:e0:26:38:f1:98:95:90:85:fc:
a4:00:98:46:b1:a1:c4:d9:3c:b0:20:66:ec:39:74:fb:49:b0:
04:fb:8e:ef:99:3e:30:d7:d2:3b:e6:c6:5f:01:90:48:3b:cd:
73:7e:1c:82:de:24:46:4d:73:74:f2:f3:03:26:78:a4:63:c6:
f0:86:4c:21:14:c8:ae:b8:ec:34:bd:8b:24:b4:2c:8c:52:21:
43:83:a9:a0:70:a1:9c:44:db:f0:98:0d:7f:2c:20:d5:62:8b:
58:0b:80:53:eb:91:fc:08:20:18:2c:32:15:67:e8:a0:16:aa:
6c:26:71:88:80:6a:2a:3f:98:f2:64:37:e3:75:92:24:c4:39:
71:d3:5b:82:34:ba:90:a5:b4:00:22:e1:02:27:c6:b5:0d:df:
50:7f:65:5c:2a:ee:d0:3b:8a:52:60:4e:3b:cf:ee:91:e6:14:
14:bd:c3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 05:21:48 2025 by rpki-client