Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/nzBMfQfy8i-WRe9l5G1wjcnq9Kk.roa
File: nzBMfQfy8i-WRe9l5G1wjcnq9Kk.roa (raw, json)
Hash identifier: WWn4JmthWeiof9mLzcJKLyZlszTU/kVgyo39ayJyzoo=
Subject key identifier: 9F:30:4C:7D:07:F2:F2:2F:96:45:EF:65:E4:6D:70:8D:C9:EA:F4:A9
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019A46608A76594181F2FE3BD2A385218D67
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/nzBMfQfy8i-WRe9l5G1wjcnq9Kk.roa
Signing time: Sun 02 Nov 2025 21:02:03 +0000
ROA not before: Sun 02 Nov 2025 21:02:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204268
IP address blocks: 5.231.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:46:60:8a:76:59:41:81:f2:fe:3b:d2:a3:85:21:8d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 2 21:02:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f304c7d07f2f22f9645ef65e46d708dc9eaf4a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:94:e9:a3:4f:58:1b:72:94:69:8a:d6:79:7a:
7c:7e:ac:c1:ee:ae:3d:5b:ac:f3:41:c6:cc:ac:02:
da:79:a5:d0:6d:ff:75:02:b8:a2:bd:ee:b1:4e:ca:
ce:bd:48:ff:28:b3:57:69:a4:d9:3c:45:4b:0d:d7:
33:e9:78:6e:9c:ea:e1:3d:16:47:ac:03:a3:72:35:
ea:65:81:58:2b:b2:84:3b:00:11:b9:29:08:24:25:
1e:98:f5:4b:0d:3b:e6:b6:3a:79:41:bb:3b:e5:07:
2f:af:a5:b0:20:f7:81:ff:b5:e8:ac:e2:b7:30:9f:
aa:f8:7f:fe:91:8a:1e:af:b6:54:45:88:4b:f1:82:
2f:b4:42:49:5d:6a:93:9a:a4:48:b6:62:fb:96:af:
12:4f:38:29:6d:65:ce:f2:65:9c:1f:1c:0a:9f:47:
c6:5e:b6:54:d2:5a:4e:90:e6:5b:06:22:08:5e:1b:
6c:67:67:05:88:f6:8d:f3:87:f4:14:03:5e:a4:14:
5b:b9:85:03:41:d0:3d:cc:92:95:f9:cd:c4:f5:41:
58:fa:65:78:9d:e9:bb:1b:2e:d2:fc:5f:d0:88:c1:
13:f0:c2:af:cf:0c:41:d0:48:1a:29:03:64:8e:7a:
9b:8c:5c:73:e5:2c:8e:47:56:70:46:40:87:9a:18:
f2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:30:4C:7D:07:F2:F2:2F:96:45:EF:65:E4:6D:70:8D:C9:EA:F4:A9
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/nzBMfQfy8i-WRe9l5G1wjcnq9Kk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.243.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:1a:cc:72:14:4b:72:75:a6:04:84:74:3e:ba:c5:c2:51:56:
f9:95:30:77:bb:2f:c9:14:00:db:a6:16:0f:56:12:4b:81:e9:
fc:e2:a2:df:d5:6b:be:e5:3f:42:de:02:d8:2a:c6:77:c9:18:
d2:62:d5:1f:41:2b:37:36:0e:97:1f:b9:0a:38:02:49:18:ea:
d1:69:e2:be:53:5e:7f:11:d7:dc:bc:2e:fc:73:3e:29:c0:1f:
0e:63:c6:32:9e:16:6c:18:8e:3d:26:ed:e8:e7:60:70:cc:c4:
be:e3:58:cb:27:f3:c8:ca:da:94:e2:5c:6d:17:f8:cf:5a:32:
8b:97:f4:31:ce:d5:da:c4:18:96:d7:b1:a8:d1:55:c7:1b:22:
0f:11:1a:a1:91:bf:8c:56:a5:3d:68:e7:d7:d5:25:91:b7:aa:
09:05:24:cc:72:7f:64:c1:8d:aa:3a:23:5a:cf:a7:86:cd:a8:
bc:dd:ba:26:57:97:18:43:44:3b:ff:94:e3:0a:54:a3:d9:2a:
bf:e4:52:98:e1:4b:fc:7f:c5:a7:c9:2d:3f:ee:1b:2c:c5:cc:
ed:a6:28:7f:33:b1:b8:92:e0:e1:08:7c:64:52:1d:a9:ca:32:
f8:f3:36:c8:4d:79:aa:66:bb:32:6e:54:ed:39:ab:38:ff:c7:
30:7c:ef:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:28:09 2025 by rpki-client