Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/njLjgeQ0uFXD3GoQgpxIGpOItOU.roa
File: njLjgeQ0uFXD3GoQgpxIGpOItOU.roa (raw, json)
Hash identifier: SL5Tx/ccbFlpT7rOMkpOBUpCnf72ayQttme74djPUEc=
Subject key identifier: 9E:32:E3:81:E4:34:B8:55:C3:DC:6A:10:82:9C:48:1A:93:88:B4:E5
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 019A29BCFF333F51A8FC05290CEA5755F791
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/njLjgeQ0uFXD3GoQgpxIGpOItOU.roa
Signing time: Tue 28 Oct 2025 07:34:03 +0000
ROA not before: Tue 28 Oct 2025 07:34:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 194.143.221.0/24 maxlen: 24
213.220.7.0/24 maxlen: 24
213.220.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Nov 2025 19:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:bc:ff:33:3f:51:a8:fc:05:29:0c:ea:57:55:f7:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Oct 28 07:34:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e32e381e434b855c3dc6a10829c481a9388b4e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:32:1b:e9:85:18:02:54:1e:9a:2c:91:8e:9f:
f9:c1:8b:60:6c:d3:43:4d:b4:f8:38:5a:b0:0e:82:
8b:87:94:c1:24:3b:02:bd:0d:b8:57:6d:af:64:27:
41:7b:1e:02:b2:3b:7b:9e:a0:7a:19:ab:45:c1:0d:
c8:b9:87:68:bb:2e:08:d3:73:33:8f:35:86:f8:08:
69:1e:4a:e2:16:f7:ef:e6:86:25:00:89:16:ef:43:
76:27:1f:a2:fd:b0:5c:d7:2d:dc:13:0f:10:4a:45:
a6:56:d3:c1:80:4d:48:e1:cb:c8:d3:fc:c3:73:00:
2e:9c:8f:12:50:8a:87:ef:52:db:24:2c:dd:e6:6d:
76:f9:eb:d2:5a:56:1f:49:41:b0:ab:7e:97:d5:0c:
c1:41:30:81:5d:0b:2c:7e:74:83:83:f7:0b:40:81:
64:c4:ce:be:c4:b5:7d:99:e9:88:5c:d1:5b:b7:08:
9b:4d:ca:88:41:2a:97:69:90:38:4f:fd:91:8a:a9:
51:fa:e9:1d:90:0a:31:fc:20:bf:af:c1:a0:a5:67:
56:0e:81:95:4b:5e:d1:7b:b2:04:86:14:92:87:d3:
09:b2:35:1c:74:9e:b4:13:56:b3:f0:d3:0a:88:2c:
62:29:56:f2:1b:c8:d1:08:f5:4c:b2:4f:d3:0a:70:
fb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:32:E3:81:E4:34:B8:55:C3:DC:6A:10:82:9C:48:1A:93:88:B4:E5
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/njLjgeQ0uFXD3GoQgpxIGpOItOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.143.221.0/24
213.220.7.0/24
213.220.13.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:76:99:41:82:4a:03:97:79:9e:1c:f0:7b:61:1b:15:06:54:
a3:3c:90:15:35:c7:ac:4b:fe:65:de:8b:01:5d:38:14:df:15:
f3:14:2b:00:76:e7:1d:60:b6:04:8d:b6:f7:c3:bb:07:24:e2:
3b:de:0f:38:ad:ea:a1:4f:9b:c2:a1:36:28:b7:3a:a1:d3:53:
48:28:58:ba:07:1a:17:63:5f:87:59:5c:a7:d3:45:82:a5:bc:
67:b5:a2:d0:f0:be:d4:5e:09:7b:ab:29:73:b3:97:65:ba:b8:
a1:e0:93:8d:5e:38:2f:95:94:a4:15:0e:f2:5b:90:7d:05:13:
6d:36:a7:b2:38:1e:bf:4d:1e:06:d2:ea:7c:ca:14:43:e7:a3:
42:31:57:25:5f:ef:c3:9c:e4:06:08:d8:01:ee:94:35:3a:4d:
26:9b:68:be:16:f8:b2:46:4e:d2:f4:6e:ca:ba:4d:d0:38:d5:
5b:6a:f6:e3:c7:3d:78:27:25:eb:35:86:9c:4b:c4:13:ec:b9:
2e:76:60:83:8c:8f:d4:ba:83:0d:a0:40:50:3d:52:52:05:82:
3e:b0:05:11:54:1c:a0:e8:a7:7d:d6:a9:07:9b:8b:1f:ca:82:
94:23:d9:52:fa:58:c1:c8:64:66:7f:d4:fa:0b:7a:66:49:e7:
3e:c1:b7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 00:41:31 2025 by rpki-client