Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c8d4bc-f2f1-4ee5-940e-9fc85d02e71a/1/NjG7UftPha6G7qBinySuoW20NO8.roa
File: NjG7UftPha6G7qBinySuoW20NO8.roa (raw, json)
Hash identifier: R5m9h3tvZkXvsunZXBGggcub279WCQw0iYlNo/aPjLE=
Subject key identifier: 36:31:BB:51:FB:4F:85:AE:86:EE:A0:62:9F:24:AE:A1:6D:B4:34:EF
Certificate issuer: /CN=6279f0a59fc8c6fd785953701ae72b56de5011ac
Certificate serial: 01983C296F346C367E8E1F83ABD7FCA12D9E
Authority key identifier: 62:79:F0:A5:9F:C8:C6:FD:78:59:53:70:1A:E7:2B:56:DE:50:11:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YnnwpZ_Ixv14WVNwGucrVt5QEaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c8d4bc-f2f1-4ee5-940e-9fc85d02e71a/1/NjG7UftPha6G7qBinySuoW20NO8.roa
Signing time: Thu 24 Jul 2025 11:20:04 +0000
ROA not before: Thu 24 Jul 2025 11:20:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206470
IP address blocks: 31.3.210.0/24 maxlen: 24
2a13:e340::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c8d4bc-f2f1-4ee5-940e-9fc85d02e71a/1/YnnwpZ_Ixv14WVNwGucrVt5QEaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/c8d4bc-f2f1-4ee5-940e-9fc85d02e71a/1/YnnwpZ_Ixv14WVNwGucrVt5QEaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YnnwpZ_Ixv14WVNwGucrVt5QEaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3c:29:6f:34:6c:36:7e:8e:1f:83:ab:d7:fc:a1:2d:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6279f0a59fc8c6fd785953701ae72b56de5011ac
Validity
Not Before: Jul 24 11:20:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3631bb51fb4f85ae86eea0629f24aea16db434ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a6:70:3a:0b:8f:f2:85:b3:4f:a9:81:36:5b:
0c:52:c8:de:12:66:0c:85:49:e3:28:36:c4:4d:11:
2b:6f:67:a2:b9:6a:d7:ee:19:a1:da:85:d9:53:06:
d1:35:3b:c6:72:f0:01:20:a1:cf:b0:1e:60:ab:2f:
41:ea:19:68:e5:73:09:42:e7:ed:e0:8f:b7:00:f1:
aa:a9:2e:e9:ce:1b:22:3e:fc:e0:fc:a0:b0:f5:fa:
fe:c9:76:9b:d1:3d:e4:50:aa:aa:77:2b:bc:60:df:
08:f9:09:6a:24:2c:e5:d0:4c:ac:78:e8:65:98:62:
ee:9a:38:e1:66:2c:c8:53:94:3a:3d:d3:11:9a:03:
de:f7:15:dc:6a:1e:ae:09:c2:8f:95:ef:21:b5:64:
38:8a:f1:da:ca:9e:65:82:8d:74:76:c4:76:38:08:
97:fe:47:a3:99:e8:92:79:55:48:92:c1:0a:cd:ba:
f2:36:66:c3:3e:5e:ed:42:b8:3e:c5:09:6e:f4:ca:
bd:17:ed:6c:4c:74:e3:79:cf:0a:46:f7:c7:05:0b:
66:7b:22:54:54:22:54:e5:be:3f:1b:93:7e:4b:23:
d5:2a:33:0c:95:1f:47:f1:7b:9d:a2:f5:61:ea:4f:
09:6b:cd:3f:09:92:af:41:43:70:a1:6c:1a:e3:21:
41:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:31:BB:51:FB:4F:85:AE:86:EE:A0:62:9F:24:AE:A1:6D:B4:34:EF
X509v3 Authority Key Identifier:
keyid:62:79:F0:A5:9F:C8:C6:FD:78:59:53:70:1A:E7:2B:56:DE:50:11:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnnwpZ_Ixv14WVNwGucrVt5QEaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c8d4bc-f2f1-4ee5-940e-9fc85d02e71a/1/NjG7UftPha6G7qBinySuoW20NO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c8d4bc-f2f1-4ee5-940e-9fc85d02e71a/1/YnnwpZ_Ixv14WVNwGucrVt5QEaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.210.0/24
IPv6:
2a13:e340::/29
Signature Algorithm: sha256WithRSAEncryption
90:e3:0e:db:7e:32:ad:b3:75:2f:18:a4:4e:50:59:d2:ef:3b:
af:9a:0d:21:32:82:0c:b3:56:c4:97:44:a5:f4:7f:cf:fb:12:
f1:8b:4a:18:c0:62:32:c6:21:7b:ed:88:62:3f:db:12:b3:bb:
7d:7c:b0:6b:ec:9a:86:db:39:2e:b4:be:69:4d:cb:0d:c4:87:
59:09:5f:fe:34:3e:6b:d8:5b:ac:9a:fd:47:2a:7d:0f:0f:fc:
da:ad:62:42:55:7f:fe:2c:08:c9:c5:f5:05:2c:81:7e:ce:fe:
23:de:78:3b:bf:a0:85:56:c4:a6:f8:82:66:4b:cb:ab:ef:ee:
a4:44:3e:48:2f:ee:75:91:36:c8:31:8d:e9:ef:5a:6e:66:69:
7d:1c:8e:18:5a:64:14:b9:52:c3:83:15:a6:1a:8c:07:00:07:
98:45:39:42:38:a8:00:23:ad:c7:9c:a2:73:10:ce:5a:92:92:
ab:bf:2e:2f:33:39:ab:50:51:46:48:4b:1d:b7:92:a4:6d:fd:
7f:77:6e:b5:88:d3:cb:a5:42:ea:21:9c:ca:72:57:c2:b9:85:
c6:7f:f6:3d:1a:fa:58:bb:1d:3e:65:6d:5e:36:ff:6f:13:a9:
83:eb:0f:c9:2a:ae:37:34:53:00:91:f9:4f:0c:15:30:79:cf:
56:d2:73:17
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZg8KW80bDZ+jh+Dq9f8oS2eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNzlmMGE1OWZjOGM2ZmQ3ODU5NTM3MDFhZTcyYjU2ZGU1
MDExYWMwHhcNMjUwNzI0MTEyMDA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNjMxYmI1MWZiNGY4NWFlODZlZWEwNjI5ZjI0YWVhMTZkYjQzNGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaZwOguP8oWzT6mBNlsMUsjeEmYM
hUnjKDbETRErb2eiuWrX7hmh2oXZUwbRNTvGcvABIKHPsB5gqy9B6hlo5XMJQuft
4I+3APGqqS7pzhsiPvzg/KCw9fr+yXab0T3kUKqqdyu8YN8I+QlqJCzl0EyseOhl
mGLumjjhZizIU5Q6PdMRmgPe9xXcah6uCcKPle8htWQ4ivHayp5lgo10dsR2OAiX
/kejmeiSeVVIksEKzbryNmbDPl7tQrg+xQlu9Mq9F+1sTHTjec8KRvfHBQtmeyJU
VCJU5b4/G5N+SyPVKjMMlR9H8XudovVh6k8Ja80/CZKvQUNwoWwa4yFBrQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFDYxu1H7T4Wuhu6gYp8krqFttDTvMB8GA1UdIwQY
MBaAFGJ58KWfyMb9eFlTcBrnK1beUBGsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWW5ud3BaX0l4djE0V1ZOd0d1Y3JWdDVRRWF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9jOGQ0YmMtZjJmMS00ZWU1LTk0MGUt
OWZjODVkMDJlNzFhLzEvTmpHN1VmdFBoYTZHN3FCaW55U3VvVzIwTk84LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9jOGQ0YmMtZjJmMS00ZWU1LTk0MGUtOWZjODVkMDJlNzFh
LzEvWW5ud3BaX0l4djE0V1ZOd0d1Y3JWdDVRRWF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAHwPSMA0E
AgACMAcDBQMqE+NAMA0GCSqGSIb3DQEBCwUAA4IBAQCQ4w7bfjKts3UvGKROUFnS
7zuvmg0hMoIMs1bEl0Sl9H/P+xLxi0oYwGIyxiF77YhiP9sSs7t9fLBr7JqG2zku
tL5pTcsNxIdZCV/+ND5r2Fusmv1HKn0PD/zarWJCVX/+LAjJxfUFLIF+zv4j3ng7
v6CFVsSm+IJmS8ur7+6kRD5IL+51kTbIMY3p71puZml9HI4YWmQUuVLDgxWmGowH
AAeYRTlCOKgAI63HnKJzEM5akpKrvy4vMzmrUFFGSEsdt5Kkbf1/d261iNPLpULq
IZzKclfCuYXGf/Y9GvpYux0+ZW1eNv9vE6mD6w/JKq43NFMAkflPDBUwec9W0nMX
-----END CERTIFICATE-----
Generated at Thu Aug 7 12:50:35 2025 by rpki-client