Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/n0jITiq3eAMkfkb1GO6IP-f3OOs.roa
File: n0jITiq3eAMkfkb1GO6IP-f3OOs.roa (raw, json)
Hash identifier: o4t7kI5PakVgSgIgfwcMPUlsnifnApux1LxknXSYC+4=
Subject key identifier: 9F:48:C8:4E:2A:B7:78:03:24:7E:46:F5:18:EE:88:3F:E7:F7:38:EB
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 01985A16EFA1817C8AFBED7C8A68AE4B15AF
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/n0jITiq3eAMkfkb1GO6IP-f3OOs.roa
Signing time: Wed 30 Jul 2025 06:48:29 +0000
ROA not before: Wed 30 Jul 2025 06:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215712
IP address blocks: 85.254.127.0/24 maxlen: 24
159.148.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 08:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5a:16:ef:a1:81:7c:8a:fb:ed:7c:8a:68:ae:4b:15:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jul 30 06:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f48c84e2ab77803247e46f518ee883fe7f738eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:88:21:16:88:9d:c5:46:3c:c1:66:90:75:da:
ae:87:19:99:7c:dc:bc:a3:11:b2:be:1b:9b:3f:1d:
42:95:7e:6f:57:8c:3c:7d:2a:21:3a:e0:84:c5:1f:
bf:81:89:66:a6:d9:20:3b:58:d5:8e:16:bf:e4:14:
fd:4e:cf:c8:cd:26:2e:55:68:fe:f4:96:1a:73:f5:
5e:af:46:fc:92:4c:bd:23:32:1d:15:ba:d4:1f:77:
f4:48:2d:9d:38:5a:72:10:08:d7:74:be:d5:df:7e:
4a:a7:88:10:bc:6a:c2:b0:ec:ad:d0:b2:d0:1c:4c:
b7:95:5e:d5:5d:de:0d:d9:1c:72:71:85:47:3b:4c:
2b:28:0e:71:76:eb:16:2b:40:59:2e:aa:08:a4:fa:
3c:2a:21:d3:76:e0:50:e1:74:7d:54:fa:80:39:24:
ff:70:7b:fe:73:9f:04:3a:25:07:23:4a:bd:d4:5e:
3f:5a:ef:d7:a1:1e:7e:75:d4:56:9d:03:bc:00:f2:
38:2d:77:3f:d7:2a:cb:d7:99:0b:81:2f:b6:9f:23:
6a:c1:ed:e5:31:57:60:32:fd:40:f6:8e:d5:33:2b:
78:7c:50:fd:76:ac:ab:7f:a8:4d:68:01:89:26:8c:
52:25:b2:80:57:b1:98:39:27:f2:56:84:bb:eb:0c:
7b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:48:C8:4E:2A:B7:78:03:24:7E:46:F5:18:EE:88:3F:E7:F7:38:EB
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/n0jITiq3eAMkfkb1GO6IP-f3OOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.254.127.0/24
159.148.88.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:62:3e:62:59:90:73:cb:b0:b5:08:c3:8b:d9:b1:86:db:fe:
c1:62:51:0c:8e:a3:b0:fd:b2:64:47:cb:39:07:c9:c4:d8:70:
d1:90:42:a3:99:85:79:b1:92:90:67:30:69:a1:93:7a:5f:07:
96:15:a3:86:9f:51:f9:18:22:0e:2c:d4:74:de:4f:a7:5d:66:
8d:45:99:00:5b:22:a4:7a:dd:af:af:bf:93:9b:8b:67:a0:ba:
47:13:0e:94:f9:a2:bc:ce:b5:c3:ca:c5:28:95:0b:fd:b5:ba:
f2:00:3a:35:8b:7a:21:90:2a:d3:8d:00:e0:51:fc:81:51:76:
16:e3:e6:31:87:43:41:a9:17:36:57:a2:b6:6c:3c:bf:65:c9:
ea:a4:be:7a:9e:5e:65:5d:0c:40:a8:54:c9:11:af:d8:7d:5c:
8f:ba:40:e9:5a:80:8a:84:03:bf:e4:1e:f8:94:b8:c1:58:0b:
a7:f6:50:54:6d:be:ee:6a:7c:a7:a4:7c:c0:f2:4b:18:1f:7f:
a3:f8:5c:7a:3a:4c:c5:06:5f:fb:a2:aa:ae:dd:c1:20:8f:41:
28:41:a8:c8:b4:50:25:81:fd:94:b8:d3:44:91:7f:45:51:f8:
57:d2:8f:8d:93:0e:96:0d:3d:7c:b7:70:c8:42:73:5b:d5:17:
e2:c0:c2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:15:36 2025 by rpki-client