Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/NWM-QMKJ0u448M7PhfejyPiiGlI.roa
File: NWM-QMKJ0u448M7PhfejyPiiGlI.roa (raw, json)
Hash identifier: P0SccBJo9ZBNsrvhKBQ2D2i8ZLP+Mwv8XbcFl3BvEKQ=
Subject key identifier: 35:63:3E:40:C2:89:D2:EE:38:F0:CE:CF:85:F7:A3:C8:F8:A2:1A:52
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01985675B1000B1F5329BAC6B9AE06E580F1
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/NWM-QMKJ0u448M7PhfejyPiiGlI.roa
Signing time: Tue 29 Jul 2025 13:53:30 +0000
ROA not before: Tue 29 Jul 2025 13:53:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213438
IP address blocks: 37.60.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:75:b1:00:0b:1f:53:29:ba:c6:b9:ae:06:e5:80:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 29 13:53:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35633e40c289d2ee38f0cecf85f7a3c8f8a21a52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ea:bd:1a:9a:96:c3:12:1e:65:5b:a8:b9:16:
4a:fa:88:c7:3f:00:93:71:39:63:61:64:f1:3b:46:
ce:96:16:77:3f:03:06:82:74:75:aa:e4:17:25:51:
97:4a:21:48:0a:ed:73:cc:48:59:4a:a1:d4:0a:b5:
b4:75:c8:20:af:9e:96:f9:de:f7:0f:6a:72:2a:0e:
e4:52:77:3f:33:57:aa:f1:ad:29:72:7a:73:83:12:
82:03:9b:d2:f4:0d:fa:6d:ef:ae:c5:20:5e:c7:dd:
b2:88:8a:56:81:3f:83:ae:08:ee:0f:5c:41:e5:4b:
6b:a4:5f:a6:47:fd:c5:7c:27:5c:d6:03:e9:a4:8c:
b0:46:e4:bb:f9:51:72:34:b4:98:70:5e:a1:f7:57:
0a:d0:46:a9:12:2e:51:83:b0:72:6e:da:16:c3:6e:
f5:dc:c2:20:c7:92:1c:f2:14:2e:b2:a5:7a:ef:d7:
6d:b2:74:eb:7f:fb:3f:c4:d9:0a:f7:0f:32:ec:71:
68:ee:49:81:26:48:9b:9d:68:12:9e:ea:5b:1a:20:
dc:52:4e:29:dd:f8:51:05:b6:0f:18:a3:5b:75:cb:
24:13:a6:e1:64:a7:9b:d4:64:a8:f7:e0:7b:1a:e5:
59:76:ca:09:d9:e8:fd:f7:e7:72:30:b8:e9:05:8b:
db:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:63:3E:40:C2:89:D2:EE:38:F0:CE:CF:85:F7:A3:C8:F8:A2:1A:52
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/NWM-QMKJ0u448M7PhfejyPiiGlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.60.141.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:70:5e:40:f6:b3:55:a6:0d:20:bb:05:44:0f:4e:75:dc:7c:
4b:8a:34:5e:62:73:1f:a5:f1:61:28:8a:c4:56:bf:57:a4:a4:
70:10:3f:b0:8a:b8:cb:29:1a:a0:1e:73:e3:be:c4:ad:02:0c:
24:38:aa:e4:29:68:3c:3c:b9:00:79:47:89:8b:16:29:52:f4:
f4:2a:45:5c:3a:24:98:37:84:40:9d:42:89:b8:96:24:fd:f0:
64:f5:06:a2:39:3d:f4:4d:aa:7d:5a:39:2f:a8:12:25:7b:95:
c4:52:10:38:ab:0b:21:2d:3e:6a:e0:42:a8:78:62:f2:5e:5c:
51:9d:9f:7b:1b:81:91:d1:82:82:cc:92:1c:d7:05:22:ca:5b:
60:86:26:e5:22:6d:3f:89:40:26:3b:74:ee:64:57:44:18:d1:
6b:6f:cb:1d:12:e1:bc:50:af:54:96:dd:af:b6:ec:ad:7b:f3:
2f:9a:b4:21:d5:92:8f:cf:07:3a:9f:b7:18:d9:32:6a:01:bc:
99:3a:22:61:c4:b2:11:4f:ab:8c:47:7a:87:f6:d7:ae:b8:e2:
2c:b2:16:c8:34:2c:93:1f:78:e2:77:95:49:52:02:4c:ea:44:
e8:17:26:9b:69:c0:7d:75:58:ee:c7:a3:3b:71:8c:d3:13:b5:
6a:31:31:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:16:47 2025 by rpki-client