Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/Nbw4t5MC6gHkh4rPXeeWfUQIVkw.roa
File: Nbw4t5MC6gHkh4rPXeeWfUQIVkw.roa (raw, json)
Hash identifier: GCKq7nx6vmgGBar49yig7d/ID2EW6TSR2OyxNnCG15Q=
Subject key identifier: 35:BC:38:B7:93:02:EA:01:E4:87:8A:CF:5D:E7:96:7D:44:08:56:4C
Certificate issuer: /CN=6cc23670f9789c02d83ba7c2e7e4c6e9ede52f7a
Certificate serial: 0196F774E35BC256920C10539A9C3F6FF9CC
Authority key identifier: 6C:C2:36:70:F9:78:9C:02:D8:3B:A7:C2:E7:E4:C6:E9:ED:E5:2F:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMI2cPl4nALYO6fC5-TG6e3lL3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/Nbw4t5MC6gHkh4rPXeeWfUQIVkw.roa
Signing time: Thu 22 May 2025 10:05:54 +0000
ROA not before: Thu 22 May 2025 10:05:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43200
IP address blocks: 81.26.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMI2cPl4nALYO6fC5-TG6e3lL3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f7:74:e3:5b:c2:56:92:0c:10:53:9a:9c:3f:6f:f9:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc23670f9789c02d83ba7c2e7e4c6e9ede52f7a
Validity
Not Before: May 22 10:05:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35bc38b79302ea01e4878acf5de7967d4408564c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1c:ad:53:2a:69:f3:56:d5:3f:b1:ad:24:37:
be:e2:10:9a:f1:ae:93:d5:70:43:cc:c1:47:63:bb:
ee:99:f0:23:cc:9b:e1:a0:f4:3f:fb:38:cf:fd:e9:
94:57:bd:da:da:09:88:17:26:df:83:70:46:c5:e8:
bd:ed:f0:18:34:08:dd:ac:9e:50:3e:18:2e:3d:89:
d6:0f:81:0e:94:b8:19:a9:35:40:3a:4f:1d:3a:05:
ba:34:34:84:5e:e0:52:72:a2:3d:55:1b:e6:cc:a7:
e5:c1:32:f8:a1:4d:a3:8c:2f:3c:10:30:16:ef:54:
0c:db:e0:9e:ae:ea:f5:03:96:e2:f2:b3:97:8f:01:
06:a5:68:35:30:9e:3c:32:dc:a2:95:2f:2a:0e:da:
9c:a1:9f:ba:cf:56:e8:25:30:81:64:33:45:49:8b:
9c:4e:99:c3:58:09:18:f2:86:3a:41:ad:a7:34:5b:
70:a9:e2:93:e0:f0:f6:9c:35:ab:0d:dc:da:36:61:
55:dd:c4:64:32:05:8c:c9:c2:bd:af:6f:95:8c:a0:
7f:72:bd:fa:07:a4:7c:db:14:46:c2:25:4b:07:df:
bb:0d:fc:e7:bc:71:e2:df:ab:aa:2b:3e:2a:cf:dd:
70:b9:93:86:71:6e:bb:a7:0b:49:99:9f:84:e0:16:
16:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:BC:38:B7:93:02:EA:01:E4:87:8A:CF:5D:E7:96:7D:44:08:56:4C
X509v3 Authority Key Identifier:
keyid:6C:C2:36:70:F9:78:9C:02:D8:3B:A7:C2:E7:E4:C6:E9:ED:E5:2F:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMI2cPl4nALYO6fC5-TG6e3lL3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/Nbw4t5MC6gHkh4rPXeeWfUQIVkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.26.32.0/19
Signature Algorithm: sha256WithRSAEncryption
a5:c1:bd:05:0e:54:07:06:87:89:26:39:16:5a:d1:81:33:2d:
9a:e9:9f:62:ad:f6:93:b3:ca:47:d5:0e:6d:d3:36:9b:71:b0:
bd:4a:41:e2:52:95:c4:8d:3f:31:d6:ef:e1:eb:1d:92:08:c6:
3b:14:79:5c:54:17:e4:c1:64:ea:3b:84:d7:29:e8:51:f5:38:
db:ce:45:3a:a6:62:d1:b3:2f:4d:fa:b5:58:ab:c3:1c:a2:3a:
81:90:59:56:3b:06:da:ef:7f:10:f5:3e:2b:90:63:12:92:0d:
c5:8c:86:14:c6:54:7a:04:ec:60:20:0d:13:2e:ea:1d:cb:b9:
4d:73:67:f2:d9:f5:b4:3d:12:53:9a:f2:5d:39:f6:88:5d:70:
25:20:bd:7a:78:f8:a8:68:00:98:47:f2:ac:1d:67:5e:2b:f0:
2a:1f:27:89:7e:bd:fc:52:21:52:50:c7:64:29:0b:1e:0c:d6:
54:15:bf:ee:02:67:6f:07:1c:78:4e:d9:85:82:d7:e6:04:6c:
1c:a4:f7:4e:f1:ea:96:91:c6:93:1f:aa:34:d1:27:2f:65:b3:
95:5f:ee:24:b1:bb:9b:aa:d8:17:22:9d:aa:c8:71:42:89:42:
8f:ed:90:a3:72:54:45:1b:cf:d4:d4:fa:64:ba:48:4c:d2:38:
44:4e:e2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:30:35 2025 by rpki-client