Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/NyZ3Dofc_Rv7ap76WDtCTKEXKj4.roa
File: NyZ3Dofc_Rv7ap76WDtCTKEXKj4.roa (raw, json)
Hash identifier: 3TqJB5Q7QyDWlaShmD68OJqAT+J+aYaPFIrNd+LhhvU=
Subject key identifier: 37:26:77:0E:87:DC:FD:1B:FB:6A:9E:FA:58:3B:42:4C:A1:17:2A:3E
Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Certificate serial: 01987FDFA8086A86649F4DE41FCAD6C30449
Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/NyZ3Dofc_Rv7ap76WDtCTKEXKj4.roa
Signing time: Wed 06 Aug 2025 14:53:40 +0000
ROA not before: Wed 06 Aug 2025 14:53:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59627
IP address blocks: 37.252.2.0/24 maxlen: 24
37.252.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:df:a8:08:6a:86:64:9f:4d:e4:1f:ca:d6:c3:04:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Validity
Not Before: Aug 6 14:53:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3726770e87dcfd1bfb6a9efa583b424ca1172a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:57:37:34:d2:2e:a9:37:88:0f:d5:95:a0:6b:
ad:3c:07:3d:29:9c:be:72:25:db:27:1a:a2:72:f0:
ac:46:8c:f5:a3:90:08:f8:d4:f8:5f:80:ce:7e:d5:
8f:c6:dd:6d:f2:0e:21:41:4f:b0:c9:e7:ee:7a:60:
5a:82:3b:50:65:db:f3:65:a8:b5:66:54:4c:70:4e:
ce:f2:8b:a0:29:82:ce:39:0e:ad:9d:78:4a:67:9f:
cf:d0:ba:89:7a:7c:b0:fb:92:00:16:aa:0c:32:dc:
bd:b4:09:77:b5:6d:72:27:f2:d0:38:93:d2:a2:72:
41:2f:0c:6f:7b:b7:8b:fc:c4:cf:bb:f5:76:07:f8:
b4:0a:28:54:d6:11:6c:2b:ef:63:f4:d6:36:4f:74:
ef:19:0c:93:d5:36:61:57:e1:d9:08:07:3c:60:13:
7e:6f:35:64:f5:95:0a:c7:75:8b:11:87:5a:54:14:
8e:40:ae:62:13:54:ab:af:d9:36:55:23:59:55:7e:
d7:d0:92:91:79:43:b7:9d:24:b5:1f:31:c9:d3:99:
a5:e4:92:75:9c:ee:8d:e9:15:d7:e1:4a:67:a4:38:
b4:55:16:d2:0f:60:f3:6b:2d:2e:a7:c4:04:a8:5a:
5c:45:48:93:3d:54:8d:2b:60:85:ad:9f:63:d4:25:
0d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:26:77:0E:87:DC:FD:1B:FB:6A:9E:FA:58:3B:42:4C:A1:17:2A:3E
X509v3 Authority Key Identifier:
keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/NyZ3Dofc_Rv7ap76WDtCTKEXKj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.2.0/24
37.252.12.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:2f:10:0c:53:69:9d:d9:35:6d:2c:e6:f3:c1:68:7d:a7:c7:
56:eb:7a:6b:ad:c7:4a:85:a7:7d:a8:11:40:6d:3d:90:3d:37:
b5:fb:2b:6e:75:67:84:6b:10:5f:16:38:a8:e4:82:4e:d8:86:
27:8a:3c:c8:e0:5b:ff:19:75:c6:92:c3:36:f0:97:14:6f:7e:
7f:42:e3:98:a3:02:7c:f3:c0:c8:23:ee:31:33:da:46:61:42:
af:66:ee:a5:08:bd:4b:e0:e4:1b:4e:47:d7:d8:f2:f6:9a:a7:
91:5f:a3:e0:3b:b4:d9:0d:bc:58:22:34:33:6d:40:34:99:37:
e2:eb:96:e6:47:1a:04:80:42:d0:ff:01:ec:95:0a:ae:f2:c2:
28:ce:da:9c:fa:2e:46:d0:ca:46:aa:fc:cf:05:79:95:8b:ca:
a3:5d:46:21:a9:63:6d:86:d1:11:12:1c:74:0a:75:31:4f:a3:
a9:2d:3f:2f:59:3c:26:42:3a:ee:d5:ab:70:9e:34:c5:d2:80:
c1:eb:39:12:69:17:3d:3d:17:33:19:e5:d1:75:b5:8d:42:44:
e7:90:90:bf:65:a8:5d:b9:06:60:0f:1e:5d:ad:ff:80:75:32:
b6:90:f0:eb:c2:fa:6c:f4:3e:11:d4:64:cf:a1:d9:32:1a:3f:
d3:b8:84:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:06:55 2025 by rpki-client