Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/nQdPDNod48npRblZ8tgEaDeBYVY.roa
File: nQdPDNod48npRblZ8tgEaDeBYVY.roa (raw, json)
Hash identifier: Qlh9yrkYVnDuQmOHmfsZJ2c6wmLOg4fzgVGPCvZJeY0=
Subject key identifier: 9D:07:4F:0C:DA:1D:E3:C9:E9:45:B9:59:F2:D8:04:68:37:81:61:56
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019851D0F4BA2761A5AF470C365B2D567536
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/nQdPDNod48npRblZ8tgEaDeBYVY.roa
Signing time: Mon 28 Jul 2025 16:15:05 +0000
ROA not before: Mon 28 Jul 2025 16:15:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395793
IP address blocks: 77.107.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 05:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:d0:f4:ba:27:61:a5:af:47:0c:36:5b:2d:56:75:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 28 16:15:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d074f0cda1de3c9e945b959f2d8046837816156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:20:d5:57:4b:b3:d2:f6:93:12:0e:af:7c:a8:
25:c8:a8:fc:18:f8:a8:9c:f0:65:bd:a3:ee:c4:17:
cf:a4:d4:88:21:57:97:e9:44:89:7a:02:68:af:45:
f6:b8:d0:71:69:b5:36:bd:9f:80:b3:53:05:e8:e4:
5d:21:cc:27:70:5d:79:61:0c:00:87:c1:e5:bf:66:
f5:b3:ed:60:e6:53:44:60:4b:b3:7f:29:85:db:f2:
0f:8d:15:1c:25:20:b0:4f:4d:6a:51:33:a6:6a:f6:
a9:4b:de:d4:d3:42:b3:14:f6:7c:6b:a2:a8:c1:e4:
02:36:6a:ee:f6:ff:ac:14:39:af:3e:45:5f:90:fe:
8f:86:55:8f:8c:60:cf:96:21:1c:d1:38:1d:b8:30:
1d:6e:b2:95:f9:c6:65:b3:41:d1:ce:3b:fc:51:9a:
ac:11:f1:f1:db:85:cd:fd:02:ed:4c:60:ef:78:95:
ec:63:7e:86:e3:df:fc:c6:33:ce:34:44:71:78:39:
79:39:9a:e1:d8:c5:74:99:6e:ec:b2:41:b9:9a:62:
f5:e4:8d:15:0a:55:26:a6:37:c4:02:83:2d:22:79:
68:10:23:da:a6:2e:0e:7a:12:94:b6:c2:e7:1f:32:
9f:4a:c9:0a:ae:d2:3b:95:06:67:fa:da:e1:44:c4:
40:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:07:4F:0C:DA:1D:E3:C9:E9:45:B9:59:F2:D8:04:68:37:81:61:56
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/nQdPDNod48npRblZ8tgEaDeBYVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.107.126.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:a5:a1:43:c2:9c:bc:7e:f5:34:29:1f:5f:d4:99:d0:1b:24:
cb:2c:1d:07:27:4c:9a:93:4a:a6:4b:9d:91:44:c3:81:ce:8d:
04:8e:31:e0:13:6c:a7:87:1b:29:f5:6c:43:12:c6:c7:29:54:
07:51:a6:26:7a:96:24:fa:95:7b:17:26:95:a5:a4:a6:48:3b:
8c:00:79:64:44:4b:c5:ae:9f:96:e4:f0:21:bf:6a:46:8a:32:
d5:3b:2d:cd:80:34:a2:f7:c5:83:dd:3e:49:b6:69:76:05:f5:
08:6a:d0:79:c9:32:84:2b:52:99:26:7b:d7:40:de:36:ee:74:
57:78:58:40:88:4f:2e:0f:c6:c2:42:70:86:5e:bf:72:fc:51:
bc:ae:c6:56:c6:7e:76:88:df:78:0a:28:29:da:99:3e:02:fb:
62:0b:2e:c5:ae:28:38:fd:63:9d:1f:fb:1e:79:c3:f9:43:7e:
c1:19:2b:cd:52:b1:82:0e:4f:e0:b8:30:cb:64:09:09:49:b5:
14:5d:46:d6:40:33:a4:de:28:30:1d:43:4d:04:27:43:85:d1:
67:a4:f9:31:c5:cb:05:a5:53:9c:85:50:34:73:66:88:15:ce:
6e:5c:e8:c4:db:03:f2:2a:8e:d4:8f:e8:59:ae:1b:d8:a7:29:
73:f5:5c:68
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZhR0PS6J2Glr0cMNlstVnU2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjUwNzI4MTYxNTA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDA3NGYwY2RhMWRlM2M5ZTk0NWI5NTlmMmQ4MDQ2ODM3ODE2MTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSDVV0uz0vaTEg6vfKglyKj8GPio
nPBlvaPuxBfPpNSIIVeX6USJegJor0X2uNBxabU2vZ+As1MF6ORdIcwncF15YQwA
h8Hlv2b1s+1g5lNEYEuzfymF2/IPjRUcJSCwT01qUTOmavapS97U00KzFPZ8a6Ko
weQCNmru9v+sFDmvPkVfkP6PhlWPjGDPliEc0TgduDAdbrKV+cZls0HRzjv8UZqs
EfHx24XN/QLtTGDveJXsY36G49/8xjPONERxeDl5OZrh2MV0mW7sskG5mmL15I0V
ClUmpjfEAoMtInloECPapi4OehKUtsLnHzKfSskKrtI7lQZn+trhRMRAQwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ0HTwzaHePJ6UW5WfLYBGg3gWFWMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvblFkUEROb2Q0OG5wUmJsWjh0Z0VhRGVCWVZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATWt+MA0G
CSqGSIb3DQEBCwUAA4IBAQAspaFDwpy8fvU0KR9f1JnQGyTLLB0HJ0yak0qmS52R
RMOBzo0EjjHgE2ynhxsp9WxDEsbHKVQHUaYmepYk+pV7FyaVpaSmSDuMAHlkREvF
rp+W5PAhv2pGijLVOy3NgDSi98WD3T5Jtml2BfUIatB5yTKEK1KZJnvXQN427nRX
eFhAiE8uD8bCQnCGXr9y/FG8rsZWxn52iN94Cigp2pk+AvtiCy7Frig4/WOdH/se
ecP5Q37BGSvNUrGCDk/guDDLZAkJSbUUXUbWQDOk3igwHUNNBCdDhdFnpPkxxcsF
pVOchVA0c2aIFc5uXOjE2wPyKo7Uj+hZrhvYpylz9Vxo
-----END CERTIFICATE-----
Generated at Wed Aug 6 11:16:57 2025 by rpki-client