Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/nwfqZeaJhCILyvK6_Xf4krF1uRQ.roa
File: nwfqZeaJhCILyvK6_Xf4krF1uRQ.roa (raw, json)
Hash identifier: wtcB5xBorNgbONCUPuIGw4C+1h+/QcLTT9veL+/xBE4=
Subject key identifier: 9F:07:EA:65:E6:89:84:22:0B:CA:F2:BA:FD:77:F8:92:B1:75:B9:14
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019A133441FBB45DA324561657370D681FE6
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/nwfqZeaJhCILyvK6_Xf4krF1uRQ.roa
Signing time: Thu 23 Oct 2025 22:33:03 +0000
ROA not before: Thu 23 Oct 2025 22:33:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215730
IP address blocks: 64.188.91.0/24 maxlen: 24
144.31.0.0/21 maxlen: 24
144.31.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 15:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:13:34:41:fb:b4:5d:a3:24:56:16:57:37:0d:68:1f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 23 22:33:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f07ea65e68984220bcaf2bafd77f892b175b914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9e:8c:97:f4:1b:5d:06:ec:be:9f:c3:9c:96:
d5:b7:1d:14:70:03:db:c8:e9:b1:2c:70:85:5d:3d:
4d:66:f2:5b:4c:72:96:f0:d5:bd:29:70:d6:fd:18:
d5:0e:32:e4:0c:cb:27:ae:c0:63:d1:ad:58:49:90:
10:17:9d:5b:bd:07:32:0e:46:f3:95:74:c0:a3:92:
e9:10:c5:be:a1:52:c1:9d:d3:f2:db:10:0f:75:87:
8c:19:2a:ba:1f:f5:9f:6e:5e:bf:13:bf:50:db:d5:
c6:c7:06:16:c7:dd:a8:26:37:73:36:d1:c0:ef:59:
04:dd:37:9a:81:ab:3e:10:fc:dd:6d:47:48:64:ab:
89:ba:8b:3b:07:7c:2f:ed:93:f9:9b:82:63:7b:c4:
3b:12:19:38:c2:7d:33:2d:18:15:f0:d9:82:de:b0:
1a:6e:24:b6:c1:69:e5:60:5b:21:ec:50:90:6b:52:
98:01:4d:bb:99:53:b1:ca:db:43:6e:6c:0f:71:6e:
c4:9d:b8:ea:e0:ff:c1:8e:8e:81:f9:88:c0:0c:52:
88:a9:d1:23:c7:c6:61:7b:3f:13:a7:6c:a7:96:af:
d9:56:79:30:be:a7:1c:2e:4d:d5:84:8c:6d:13:2e:
b9:d6:c9:2f:f0:95:1f:18:7c:a8:1a:d5:20:d6:64:
41:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:07:EA:65:E6:89:84:22:0B:CA:F2:BA:FD:77:F8:92:B1:75:B9:14
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/nwfqZeaJhCILyvK6_Xf4krF1uRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.188.91.0/24
144.31.0.0/21
144.31.90.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:f5:1e:9e:a2:76:94:c9:db:45:9e:bb:9e:05:73:ce:b4:4c:
32:d3:d2:91:4f:4a:11:ab:54:8e:20:44:d4:94:b5:ea:f1:33:
29:53:be:3a:6e:dc:6a:e8:96:27:3d:9e:b2:7d:98:8b:0d:f1:
db:59:eb:f8:08:87:56:58:38:96:9c:28:5b:5f:58:68:de:0e:
93:ac:33:0f:07:78:5d:84:75:5b:db:2a:f0:35:43:01:c2:41:
f2:5e:f2:59:42:07:87:e9:9b:55:92:9d:ff:68:bd:33:6b:4c:
3b:41:8d:52:06:62:97:20:eb:f2:16:65:ba:4c:c0:47:92:3f:
85:d5:6a:d1:c4:c7:59:40:25:56:b7:6a:0b:ca:e0:f5:ba:89:
ae:f2:4f:91:00:8b:c0:a1:5c:37:f8:d4:e7:fb:ff:f1:4b:ab:
5e:b2:cc:84:b4:08:9a:7b:3b:0d:5f:15:99:23:76:93:aa:8d:
17:aa:55:63:d1:c9:e5:dd:8b:62:56:3f:33:b9:b8:bb:09:a0:
bd:25:e4:2b:58:84:cc:23:08:62:08:1c:11:cd:f5:64:c9:92:
54:1d:6f:de:59:e1:f8:9c:21:55:58:47:84:c0:13:6c:e3:04:
69:6c:5d:ca:65:d9:5f:93:af:7e:af:5a:16:fd:75:4c:0c:26:
bb:29:ac:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 00:18:51 2025 by rpki-client