Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/NqMfKTDrbsPrNxCXiRIwQ8DU7Mc.roa
File: NqMfKTDrbsPrNxCXiRIwQ8DU7Mc.roa (raw, json)
Hash identifier: GGBjuq8lEOTVnRsXwnhvhM0oZ3JZj3EYuSAWIn9Qv1U=
Subject key identifier: 36:A3:1F:29:30:EB:6E:C3:EB:37:10:97:89:12:30:43:C0:D4:EC:C7
Certificate issuer: /CN=256452a3420f4f18dfa3a14d26b3348fdfcf3d3b
Certificate serial: 019A392B7E7F2CB266B8E6CEB590F978791C
Authority key identifier: 25:64:52:A3:42:0F:4F:18:DF:A3:A1:4D:26:B3:34:8F:DF:CF:3D:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JWRSo0IPTxjfo6FNJrM0j9_PPTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/NqMfKTDrbsPrNxCXiRIwQ8DU7Mc.roa
Signing time: Fri 31 Oct 2025 07:29:02 +0000
ROA not before: Fri 31 Oct 2025 07:29:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201290
IP address blocks: 193.24.38.0/23 maxlen: 23
193.24.38.0/24 maxlen: 24
193.24.39.0/24 maxlen: 24
2a0f:1bc4::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JWRSo0IPTxjfo6FNJrM0j9_PPTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:39:2b:7e:7f:2c:b2:66:b8:e6:ce:b5:90:f9:78:79:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=256452a3420f4f18dfa3a14d26b3348fdfcf3d3b
Validity
Not Before: Oct 31 07:29:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=36a31f2930eb6ec3eb37109789123043c0d4ecc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0a:ae:0b:2f:3d:b4:6e:09:b1:45:92:23:e8:
52:ac:d3:f6:86:d4:00:89:67:c6:cc:e5:ee:0c:45:
f0:6f:5f:5e:08:a0:5e:67:df:25:1e:28:e5:fd:61:
a6:61:c1:a5:53:30:05:1a:f0:96:ac:f1:d4:77:d0:
18:ad:8a:91:cc:c2:f6:81:91:37:69:39:c6:a1:13:
2e:7e:8d:d7:11:58:bb:75:eb:d3:a1:3b:44:9c:dc:
a5:ea:a7:0b:49:58:a6:bf:66:55:d5:84:af:8c:49:
e7:23:69:ea:49:50:da:d6:69:57:ee:e7:16:48:4c:
dd:6a:93:af:71:8b:bf:f7:53:13:0d:b9:f5:53:7d:
65:a1:c3:d8:fb:8a:9e:8f:d2:c6:44:78:ad:46:fc:
2c:fe:dc:8b:c5:63:47:08:7f:00:d5:5f:36:35:3a:
94:cd:c8:42:8f:d0:eb:25:77:b1:6e:8f:2f:4f:5b:
31:25:f2:c1:5e:7b:8d:7c:db:16:3a:54:27:d2:cd:
ce:c3:aa:b0:93:a6:b9:4f:ee:bf:29:99:f3:8b:7a:
d5:e2:7b:bd:4c:29:55:83:5e:8e:86:97:8c:41:0a:
b2:ea:3a:57:94:eb:10:ed:88:aa:6b:c8:8f:76:60:
99:bb:73:d5:14:f1:eb:b3:62:c5:41:60:93:bf:e9:
cb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A3:1F:29:30:EB:6E:C3:EB:37:10:97:89:12:30:43:C0:D4:EC:C7
X509v3 Authority Key Identifier:
keyid:25:64:52:A3:42:0F:4F:18:DF:A3:A1:4D:26:B3:34:8F:DF:CF:3D:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWRSo0IPTxjfo6FNJrM0j9_PPTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/NqMfKTDrbsPrNxCXiRIwQ8DU7Mc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.24.38.0/23
IPv6:
2a0f:1bc4::/32
Signature Algorithm: sha256WithRSAEncryption
8f:cf:9d:ec:10:21:3f:de:25:26:24:56:87:c8:5e:dd:01:91:
03:71:e6:80:80:68:74:1d:17:ab:7b:67:bd:0b:04:d4:ef:8f:
f6:86:74:16:bd:60:45:bb:44:74:53:03:f5:1e:f4:2f:17:60:
75:6f:c8:fa:87:05:59:b1:57:da:b5:bb:43:15:7a:bc:8f:aa:
3c:45:64:bc:eb:b5:7d:76:53:50:7e:d2:c4:13:7d:30:d9:3b:
82:13:9b:0e:82:f6:73:2d:23:30:a6:e3:02:04:77:d3:90:0f:
f1:80:58:cd:70:d3:37:87:70:4c:27:4e:39:1a:a1:24:94:b8:
ee:6e:20:3c:40:31:16:5a:44:f4:3e:78:b5:81:ea:a6:a7:ef:
e1:34:c0:f3:f6:8b:14:13:3f:82:8f:4d:82:a3:57:f3:35:9e:
f2:56:7f:ed:c0:92:c2:c7:03:69:7b:e4:cb:2d:23:6a:77:4d:
a0:95:58:4f:45:aa:65:99:19:3c:54:71:27:58:58:4d:93:ef:
39:e8:d5:d8:6b:0d:a8:a6:a8:81:37:19:66:f9:f8:ff:ee:31:
b3:32:87:71:74:5b:14:cd:6e:61:70:06:4e:8d:0e:87:78:3f:
5b:66:f7:09:37:c3:c8:e4:0c:f9:85:b8:2c:e0:81:70:de:30:
91:d9:25:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:07:43 2025 by rpki-client