Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/npcPO3smneW6IqNnIB_y9M8olUk.roa
File: npcPO3smneW6IqNnIB_y9M8olUk.roa (raw, json)
Hash identifier: fpA8KnYuPaEUPVjAiV4rv1ySRu6eFn2uRIXWZrMPyUY=
Subject key identifier: 9E:97:0F:3B:7B:26:9D:E5:BA:22:A3:67:20:1F:F2:F4:CF:28:95:49
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019953B1F5F9367F710EB6DB5890A0E2C8C4
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/npcPO3smneW6IqNnIB_y9M8olUk.roa
Signing time: Tue 16 Sep 2025 18:03:15 +0000
ROA not before: Tue 16 Sep 2025 18:03:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199785
IP address blocks: 37.46.16.0/24 maxlen: 24
37.46.17.0/24 maxlen: 24
37.46.18.0/24 maxlen: 24
37.46.19.0/24 maxlen: 24
64.188.99.0/24 maxlen: 24
77.239.106.0/24 maxlen: 24
144.31.194.0/23 maxlen: 24
150.241.113.0/24 maxlen: 24
150.241.114.0/24 maxlen: 24
150.241.115.0/24 maxlen: 24
150.241.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Sep 2025 21:24:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:53:b1:f5:f9:36:7f:71:0e:b6:db:58:90:a0:e2:c8:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 16 18:03:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e970f3b7b269de5ba22a367201ff2f4cf289549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:63:b5:bc:1b:38:4b:8e:58:55:22:f5:b5:49:
72:83:a3:22:19:15:db:65:b8:f2:9a:20:27:91:b9:
7d:77:31:1d:f2:b3:93:5d:94:f0:99:39:97:63:5f:
a7:90:82:12:bc:35:b2:79:a0:63:38:42:0e:8b:cf:
4f:12:49:73:63:94:57:f6:52:6d:bc:82:5a:3e:cb:
2e:b8:b8:38:1d:f9:d8:57:67:36:ff:9a:da:29:09:
cb:aa:6f:e2:f8:9d:47:c0:a4:5a:a5:6c:8c:03:07:
ba:c8:58:2f:24:49:4e:14:bf:60:9b:54:5c:71:b8:
d7:5f:0d:15:34:fc:08:0b:1b:aa:71:50:fe:c9:18:
ed:38:27:42:14:65:84:ba:23:60:ed:f1:3c:c5:d1:
2d:7a:a0:9f:e3:c8:e1:18:0d:18:fe:d3:39:31:04:
26:f8:00:d4:86:cd:2e:d1:9d:d1:92:8e:4f:97:c6:
fc:d6:39:44:96:72:ce:4a:85:b6:82:a5:74:33:9f:
34:83:37:67:93:2f:0c:ce:de:4a:94:88:92:97:e0:
6a:82:aa:bc:70:8d:eb:aa:e8:ff:c8:8a:98:93:10:
8b:a8:a2:b3:fb:d4:8e:19:ad:93:9f:f1:00:b0:72:
fc:2f:34:ea:34:58:2e:27:30:a8:9b:c9:6b:a4:21:
cb:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:97:0F:3B:7B:26:9D:E5:BA:22:A3:67:20:1F:F2:F4:CF:28:95:49
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/npcPO3smneW6IqNnIB_y9M8olUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.16.0/22
64.188.99.0/24
77.239.106.0/24
144.31.194.0/23
150.241.113.0-150.241.116.255
Signature Algorithm: sha256WithRSAEncryption
39:e5:8c:2f:e4:de:39:3d:f7:44:bc:4f:5c:ef:24:81:fd:8b:
e1:70:15:33:59:08:12:de:cf:65:ff:7d:c9:79:9a:d1:b8:3d:
ea:17:0f:fa:70:0c:d2:3e:bb:53:fd:d5:74:32:45:e1:fb:7e:
dc:30:fe:d1:02:74:d7:c9:e9:4a:25:7f:88:59:7c:c8:4b:ac:
3c:e6:d6:1b:31:6b:db:b7:a9:6f:1c:b2:c9:1b:80:7d:25:92:
5b:cf:b4:44:5e:fe:16:ff:76:5e:7e:7d:0c:7c:16:62:16:b4:
13:49:0a:ca:57:21:06:df:5c:8c:18:84:8d:21:9b:fb:af:08:
7a:33:17:66:bc:53:6c:32:b1:af:66:d8:72:fd:d8:a1:83:2f:
07:45:a1:b8:65:bf:47:6d:f0:be:ad:21:95:08:f4:53:c5:68:
6c:88:4e:2d:80:ab:22:1a:7a:4e:ed:7b:68:cc:e7:36:ec:9b:
47:c1:11:24:b0:2c:ea:1f:87:9a:49:14:45:cb:34:7a:61:ef:
a6:79:d7:68:e8:19:4f:f5:f8:4d:c0:5d:6c:bf:03:10:be:cb:
c2:27:ca:32:6c:c3:62:50:d7:b3:e5:cb:72:b3:96:42:df:77:
62:c3:7d:77:eb:78:82:91:a3:ae:98:05:b9:42:00:56:10:72:
cb:38:ad:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 02:49:13 2025 by rpki-client