Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/nTmWyWfxdK6FEnMEqKTonWVgx-s.roa
File: nTmWyWfxdK6FEnMEqKTonWVgx-s.roa (raw, json)
Hash identifier: kNMww9mDRMmLeJ1UEcc0K2OPCnszyAiJh/zNs/9BETQ=
Subject key identifier: 9D:39:96:C9:67:F1:74:AE:85:12:73:04:A8:A4:E8:9D:65:60:C7:EB
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019874D8EC84042A875E07882960FC99C5D3
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/nTmWyWfxdK6FEnMEqKTonWVgx-s.roa
Signing time: Mon 04 Aug 2025 11:30:29 +0000
ROA not before: Mon 04 Aug 2025 11:30:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30058
IP address blocks: 87.121.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:d8:ec:84:04:2a:87:5e:07:88:29:60:fc:99:c5:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 4 11:30:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d3996c967f174ae85127304a8a4e89d6560c7eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e1:cc:88:34:87:c5:65:c7:d0:74:21:59:ff:
b9:1c:7a:aa:e9:86:f2:39:47:e5:d0:08:7d:5b:a2:
53:4e:b9:38:cb:d7:34:66:d2:c2:1c:8e:5f:5e:04:
4a:fa:89:a8:36:ac:0c:f9:cd:91:de:42:bd:88:ca:
16:20:c0:47:f7:92:21:b9:b4:20:d5:59:db:83:96:
bb:f3:91:5b:ea:48:72:de:91:c6:53:d7:45:5d:4f:
b1:d6:59:1c:3f:c8:8f:78:d2:eb:75:07:5b:18:54:
ce:52:ce:5e:a7:95:c1:0d:e4:bf:b8:69:c1:41:6f:
a7:bb:95:3d:3c:db:8a:09:b8:a9:5b:52:09:9f:d2:
77:3c:3c:1d:37:b4:0f:bf:bd:81:1b:36:39:58:fb:
91:b4:55:77:8c:9a:1a:e3:27:13:12:be:a7:d1:a3:
d2:2a:e1:34:71:1c:5f:cc:17:11:8f:19:f5:2b:cb:
b9:b3:88:34:92:cc:f1:35:e7:53:ba:ba:28:db:a5:
a4:06:1e:63:cd:dd:71:53:83:b9:fb:34:d2:19:55:
4d:db:44:70:3f:c7:dc:e5:3b:1f:6f:07:47:b2:ec:
d5:00:cd:3b:3f:17:c6:dc:f4:ca:20:08:ea:e1:6f:
dd:8f:2b:2c:e1:06:a0:fd:79:b4:5d:1e:3e:41:19:
1f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:39:96:C9:67:F1:74:AE:85:12:73:04:A8:A4:E8:9D:65:60:C7:EB
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/nTmWyWfxdK6FEnMEqKTonWVgx-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.220.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:0c:6f:8e:8d:88:02:7a:eb:c1:cc:0f:ab:3d:57:38:b1:f0:
49:00:5b:08:3f:b9:f5:72:95:66:9f:23:cc:8e:d2:7c:44:f4:
15:18:fa:35:bc:d4:89:a1:54:15:7a:0c:9a:f9:b2:10:ee:25:
4c:35:c1:42:cb:fe:c6:f5:75:87:27:1f:a4:a0:ce:b3:c2:a8:
25:45:ae:63:06:c4:34:03:a5:55:13:6e:c9:b2:97:c0:19:af:
79:d0:01:0e:92:99:df:7f:a2:25:4a:1d:70:30:27:0e:7f:86:
5d:b8:ef:18:ba:f3:49:c4:7a:41:42:11:32:4e:39:7b:d2:db:
6b:ca:f4:f7:9c:9b:98:07:ff:ed:3f:bc:58:e2:39:f7:4e:bc:
c9:bc:4c:32:a8:cb:de:a6:29:50:1f:ac:18:87:4e:e9:61:b6:
cf:42:20:e9:6a:ac:c4:73:3e:fd:75:a7:f1:8a:58:6c:75:3c:
10:38:3d:c6:4a:ae:dc:7a:11:f7:0f:3d:d3:de:db:65:77:f5:
42:22:d1:70:a2:a4:92:49:e3:5f:ce:d3:8e:56:87:01:c0:ae:
e6:5d:d5:90:fd:9e:2f:9f:cb:ee:0c:fe:59:d0:31:f4:bd:09:
0b:37:42:ce:16:09:4a:b0:c3:4f:22:f6:2d:91:ed:ea:43:0f:
c7:ef:58:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:02:33 2025 by rpki-client