Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/NjeNoaMkokSwdxi651vJsIPZGPI.roa
File: NjeNoaMkokSwdxi651vJsIPZGPI.roa (raw, json)
Hash identifier: WuO4Ddldp2DFr/NBzaE03YGgYfOWTLEgomsbtANaXbM=
Subject key identifier: 36:37:8D:A1:A3:24:A2:44:B0:77:18:BA:E7:5B:C9:B0:83:D9:18:F2
Certificate issuer: /CN=bd60edf96266b7c0d43836c854ab472cb74db034
Certificate serial: 01985078B79D34726B465AD89B5C6E9E7B11
Authority key identifier: BD:60:ED:F9:62:66:B7:C0:D4:38:36:C8:54:AB:47:2C:B7:4D:B0:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWDt-WJmt8DUODbIVKtHLLdNsDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/NjeNoaMkokSwdxi651vJsIPZGPI.roa
Signing time: Mon 28 Jul 2025 09:59:05 +0000
ROA not before: Mon 28 Jul 2025 09:59:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39249
IP address blocks: 195.214.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vWDt-WJmt8DUODbIVKtHLLdNsDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 00:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:50:78:b7:9d:34:72:6b:46:5a:d8:9b:5c:6e:9e:7b:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd60edf96266b7c0d43836c854ab472cb74db034
Validity
Not Before: Jul 28 09:59:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=36378da1a324a244b07718bae75bc9b083d918f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:87:84:d7:78:7e:f4:d4:15:e5:5c:45:b6:63:
31:e4:e3:89:b8:0a:45:d6:93:da:24:0a:17:df:17:
41:88:e0:c3:62:45:fa:b3:1b:72:d9:34:6d:a0:25:
11:fc:cd:0c:73:f5:12:2b:a9:cc:71:26:89:b7:cd:
4d:cf:2b:b7:64:e7:3b:fc:19:97:e2:d8:ba:be:cc:
bc:7a:75:1c:d9:a6:33:bf:82:c5:6c:7a:56:b4:f5:
32:e9:3d:f7:08:1a:6c:ea:4d:4e:6f:d7:10:d9:02:
02:a5:ac:13:74:32:ca:3a:15:c0:87:00:bf:73:c9:
ea:6c:ef:7f:94:29:54:fc:8d:7c:0e:8d:d9:b8:e3:
bf:00:b8:b8:93:67:72:1d:7f:77:d3:f0:9f:0b:f2:
47:6b:1a:11:0a:e7:3c:88:cf:76:93:ab:c1:35:b4:
a8:cc:81:f5:3b:af:be:ef:5c:3f:16:64:07:f7:cf:
af:50:09:35:f3:2b:cc:d8:ab:6b:ca:1e:08:30:85:
29:75:d2:45:dc:0d:dd:c4:72:df:17:83:dc:50:3f:
4e:68:59:fb:97:fc:fd:76:86:a1:94:b8:f7:c7:e6:
86:f0:32:18:70:48:5e:72:77:f3:eb:b2:78:48:3d:
46:c2:98:48:77:d7:02:cf:10:90:4a:61:54:5c:74:
5f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:37:8D:A1:A3:24:A2:44:B0:77:18:BA:E7:5B:C9:B0:83:D9:18:F2
X509v3 Authority Key Identifier:
keyid:BD:60:ED:F9:62:66:B7:C0:D4:38:36:C8:54:AB:47:2C:B7:4D:B0:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWDt-WJmt8DUODbIVKtHLLdNsDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/NjeNoaMkokSwdxi651vJsIPZGPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.214.212.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:7d:e7:f2:d7:81:da:66:70:00:39:bd:66:59:cb:dd:67:a4:
43:af:eb:a3:5b:0c:8e:14:4b:2c:a2:d8:29:f1:5a:7e:06:01:
9f:21:ca:01:79:a6:ae:5e:9a:ed:7a:a4:2b:4f:da:8d:e9:f0:
1d:5e:b0:64:c8:31:d1:e0:94:f8:cf:53:41:8c:1a:28:d1:6e:
f9:f2:5b:4c:95:0d:15:c6:a0:c4:37:e7:d8:b2:9c:8a:43:cb:
9f:56:44:6a:ec:2b:ad:97:19:cf:26:a9:ff:94:d9:e4:d4:55:
9f:f3:cd:27:e3:f5:d1:19:2c:35:9b:84:f5:88:51:d8:ea:ed:
1d:b0:1d:5b:c5:30:7a:60:12:64:f4:81:b3:d5:ab:2d:5f:da:
9b:49:6e:03:f9:a3:27:f2:63:e3:a9:04:d4:d4:2b:bd:26:78:
fd:49:00:fa:07:5f:81:3c:7b:b1:a4:f4:19:20:35:04:cb:e1:
68:d2:1f:97:0a:68:3f:b7:7b:75:f4:26:bb:4a:48:3b:da:dc:
ee:c0:f9:fc:dd:d6:3b:ef:50:a0:94:ea:9c:65:b4:81:5e:d5:
55:6a:bc:57:49:0c:05:7a:ad:e7:ae:69:f5:45:37:4a:93:5c:
8a:3d:d0:ca:f5:8f:96:e4:3e:7e:f9:69:33:64:fc:27:ca:15:
da:0c:1d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:06:59 2025 by rpki-client