Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/nb55NPYG5futkVsWZo-wVL_ldGY.roa
File: nb55NPYG5futkVsWZo-wVL_ldGY.roa (raw, json)
Hash identifier: cu4c/kzKRZLMIS781v1I0bcKBcOwOHj6UQu9CoqV18Q=
Subject key identifier: 9D:BE:79:34:F6:06:E5:FB:AD:91:5B:16:66:8F:B0:54:BF:E5:74:66
Certificate issuer: /CN=a800ba639e65dbdcc690f58a5a740641b4ff88d4
Certificate serial: 019A6D34F2815224FEA5301A382884964844
Authority key identifier: A8:00:BA:63:9E:65:DB:DC:C6:90:F5:8A:5A:74:06:41:B4:FF:88:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qAC6Y55l29zGkPWKWnQGQbT_iNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/nb55NPYG5futkVsWZo-wVL_ldGY.roa
Signing time: Mon 10 Nov 2025 09:59:37 +0000
ROA not before: Mon 10 Nov 2025 09:59:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61416
IP address blocks: 194.113.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qAC6Y55l29zGkPWKWnQGQbT_iNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:6d:34:f2:81:52:24:fe:a5:30:1a:38:28:84:96:48:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a800ba639e65dbdcc690f58a5a740641b4ff88d4
Validity
Not Before: Nov 10 09:59:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9dbe7934f606e5fbad915b16668fb054bfe57466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0e:74:05:bf:d1:94:79:da:8c:16:a9:2b:b7:
06:6b:dd:3e:cb:67:4e:97:e1:3f:1c:a0:05:5c:c1:
6e:17:1a:20:fe:9f:61:fd:6c:34:24:01:6d:61:6c:
ed:2d:9f:e5:95:1c:9f:1a:9c:15:b5:70:2c:3f:5a:
ea:6d:cf:d1:34:50:3a:5c:2d:f3:f4:f5:67:ef:a4:
70:07:8a:2b:74:97:66:7d:31:d9:66:d9:ac:ce:e7:
70:25:0f:33:2c:4c:f3:26:99:cb:39:17:ee:17:0b:
ae:cc:9d:72:97:a4:c9:19:67:16:23:db:73:48:ae:
5b:0a:44:14:b2:b0:0b:0e:97:30:b5:5b:15:86:c7:
0b:b0:c2:97:3f:f8:06:80:fb:6a:e8:38:df:4b:c5:
70:71:5f:04:39:08:cc:63:10:33:53:25:30:1a:5e:
8d:50:be:20:f5:58:a0:08:74:13:2e:51:ef:85:aa:
14:39:9c:e9:1c:72:05:3b:68:cd:39:c7:45:73:e0:
7a:e5:ce:d8:0e:c6:f4:46:13:88:78:83:75:82:1f:
d3:8c:c1:74:89:95:91:42:44:6d:88:46:1b:bf:06:
01:05:84:6a:73:16:f4:cf:90:ae:b1:8e:b2:8c:2d:
f6:ca:01:97:65:8a:31:2b:93:39:c2:21:aa:66:44:
7d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:BE:79:34:F6:06:E5:FB:AD:91:5B:16:66:8F:B0:54:BF:E5:74:66
X509v3 Authority Key Identifier:
keyid:A8:00:BA:63:9E:65:DB:DC:C6:90:F5:8A:5A:74:06:41:B4:FF:88:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAC6Y55l29zGkPWKWnQGQbT_iNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/nb55NPYG5futkVsWZo-wVL_ldGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.142.0/24
Signature Algorithm: sha256WithRSAEncryption
54:95:5c:08:5a:99:2f:7e:2b:5c:4b:06:57:db:b4:ad:26:5f:
59:cb:4c:e1:78:cb:b9:2a:ff:18:dc:10:7d:7f:08:95:65:78:
92:ff:73:2c:c5:d8:46:ff:aa:ac:3b:3b:45:df:00:b3:4c:81:
86:24:5c:34:9f:49:d8:b6:99:5c:09:89:61:54:6c:d6:0a:a6:
dd:b8:80:2e:38:06:43:b4:87:02:72:b2:ca:a6:2c:b7:bc:48:
43:0b:09:b2:f7:ff:7f:5e:12:99:a7:b7:7f:da:ea:8c:16:66:
63:ab:5e:1c:65:b2:3f:73:0b:35:7a:a2:a1:ef:0b:3f:de:a3:
13:04:fa:d6:10:88:2d:d9:f9:0f:2b:8d:67:b2:d6:ab:49:e0:
76:e0:c7:93:eb:36:41:05:c0:86:37:f2:ea:3b:8b:73:63:24:
0c:fb:d5:f7:47:67:83:0a:9c:40:75:8c:80:32:d4:eb:33:87:
ab:fc:70:e6:51:c8:72:4d:f8:e1:c0:85:91:45:db:c3:7b:66:
c8:25:8b:42:41:cd:99:b4:40:74:89:9b:ef:bb:ca:cf:71:c7:
7e:46:c8:7b:d3:a5:bb:2b:0c:e0:bd:8a:8b:fc:9b:cc:fd:02:
70:3b:3e:28:00:89:29:79:b4:f6:78:13:4a:9b:3c:71:a5:da:
bd:08:01:ce
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZptNPKBUiT+pTAaOCiElkhEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MDBiYTYzOWU2NWRiZGNjNjkwZjU4YTVhNzQwNjQxYjRm
Zjg4ZDQwHhcNMjUxMTEwMDk1OTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZGJlNzkzNGY2MDZlNWZiYWQ5MTViMTY2NjhmYjA1NGJmZTU3NDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQ50Bb/RlHnajBapK7cGa90+y2dO
l+E/HKAFXMFuFxog/p9h/Ww0JAFtYWztLZ/llRyfGpwVtXAsP1rqbc/RNFA6XC3z
9PVn76RwB4ordJdmfTHZZtmszudwJQ8zLEzzJpnLORfuFwuuzJ1yl6TJGWcWI9tz
SK5bCkQUsrALDpcwtVsVhscLsMKXP/gGgPtq6DjfS8VwcV8EOQjMYxAzUyUwGl6N
UL4g9VigCHQTLlHvhaoUOZzpHHIFO2jNOcdFc+B65c7YDsb0RhOIeIN1gh/TjMF0
iZWRQkRtiEYbvwYBBYRqcxb0z5CusY6yjC32ygGXZYoxK5M5wiGqZkR9EwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ2+eTT2BuX7rZFbFmaPsFS/5XRmMB8GA1UdIwQY
MBaAFKgAumOeZdvcxpD1ilp0BkG0/4jUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUFDNlk1NWwyOXpHa1BXS1duUUdRYlRfaU5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9iNjM1MTctM2YxZS00NTFlLTg4NTAt
OGRiMGVmYjU2MjBhLzEvbmI1NU5QWUc1ZnV0a1ZzV1pvLXdWTF9sZEdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9iNjM1MTctM2YxZS00NTFlLTg4NTAtOGRiMGVmYjU2MjBh
LzEvcUFDNlk1NWwyOXpHa1BXS1duUUdRYlRfaU5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwnGOMA0G
CSqGSIb3DQEBCwUAA4IBAQBUlVwIWpkvfitcSwZX27StJl9Zy0zheMu5Kv8Y3BB9
fwiVZXiS/3MsxdhG/6qsOztF3wCzTIGGJFw0n0nYtplcCYlhVGzWCqbduIAuOAZD
tIcCcrLKpiy3vEhDCwmy9/9/XhKZp7d/2uqMFmZjq14cZbI/cws1eqKh7ws/3qMT
BPrWEIgt2fkPK41nstarSeB24MeT6zZBBcCGN/LqO4tzYyQM+9X3R2eDCpxAdYyA
MtTrM4er/HDmUchyTfjhwIWRRdvDe2bIJYtCQc2ZtEB0iZvvu8rPccd+Rsh706W7
KwzgvYqL/JvM/QJwOz4oAIkpebT2eBNKmzxxpdq9CAHO
-----END CERTIFICATE-----
Generated at Tue Nov 11 16:55:49 2025 by rpki-client