Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/NTZZF4vSmOFfwF5M5O7eO7oF9Vg.roa
File: NTZZF4vSmOFfwF5M5O7eO7oF9Vg.roa (raw, json)
Hash identifier: FRVNS4KDdnoHo7IUiUNOad62U9M1nGPEQFofB/xcUyw=
Subject key identifier: 35:36:59:17:8B:D2:98:E1:5F:C0:5E:4C:E4:EE:DE:3B:BA:05:F5:58
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 019A2EF695FE4F6AD385547F47F9B858F237
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/NTZZF4vSmOFfwF5M5O7eO7oF9Vg.roa
Signing time: Wed 29 Oct 2025 07:55:03 +0000
ROA not before: Wed 29 Oct 2025 07:55:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 193.219.99.0/24 maxlen: 24
194.15.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:f6:95:fe:4f:6a:d3:85:54:7f:47:f9:b8:58:f2:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Oct 29 07:55:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=353659178bd298e15fc05e4ce4eede3bba05f558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f8:c1:3b:18:c3:52:a5:ea:c9:69:79:0c:d0:
a9:59:46:45:05:ef:1a:09:f6:a7:8b:14:38:4f:63:
7c:e0:7e:48:db:93:8b:90:dc:e7:13:a9:69:24:9e:
76:64:ac:f6:e2:ff:b8:3c:ec:55:7f:68:12:dd:7a:
63:42:5f:0d:8f:f5:eb:49:e5:1f:c5:7d:63:ce:d2:
40:4b:5e:bc:c1:ec:ff:b3:17:b5:74:dd:76:c7:25:
a7:f4:7e:8e:3a:d9:37:53:39:73:4a:23:53:69:59:
ad:5c:cc:c0:b0:de:79:20:d4:46:83:fe:f3:c6:ba:
f4:da:ee:7b:bc:05:f2:2b:ea:f7:a0:af:44:21:ba:
71:b0:71:8e:87:34:ce:b8:42:7b:87:5c:1f:6b:7b:
cb:0c:d0:04:ff:d4:df:c1:09:67:49:89:42:bd:4d:
1d:4b:10:12:3f:ac:8b:01:d2:81:48:3a:ba:3a:9e:
4f:74:77:f2:81:84:b9:34:97:a1:71:4b:ed:03:e4:
e1:d3:7b:cf:81:f3:60:6b:af:9c:2c:46:b1:53:ab:
c2:a0:8d:d5:f4:91:7e:ee:21:8f:5b:09:0c:91:48:
b0:19:06:1b:cb:fb:20:4f:28:d3:97:db:f9:aa:2e:
b6:85:cd:41:44:59:06:e6:e8:93:53:fd:ac:00:86:
ac:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:36:59:17:8B:D2:98:E1:5F:C0:5E:4C:E4:EE:DE:3B:BA:05:F5:58
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/NTZZF4vSmOFfwF5M5O7eO7oF9Vg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.219.99.0/24
194.15.33.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:67:73:a7:d2:c7:55:21:b0:2d:c2:1e:00:14:41:ac:a2:4e:
c9:0b:b8:17:d5:aa:68:d9:b2:59:c3:2a:73:42:c4:01:62:b2:
23:28:3a:47:4b:ad:a4:c1:dd:21:79:98:c4:ec:3b:d3:b9:57:
2d:5f:12:42:1b:ea:92:83:e0:f1:23:e2:ae:64:cb:e9:b4:f7:
3b:90:b6:2b:e9:3b:6f:b6:c8:b7:40:da:e4:30:63:47:6e:a8:
bd:93:12:05:c7:4d:15:fc:92:f3:ee:9d:c5:b3:ba:bf:a8:c5:
8a:e5:0f:d2:4b:d1:ba:aa:bb:a8:e1:7d:ad:f2:1d:2a:bc:37:
51:11:8b:d1:07:a2:4e:6b:fb:e0:64:84:a2:ff:ec:0d:ab:2e:
08:91:ac:07:e2:8e:c7:70:b0:2e:63:76:42:41:55:27:75:a7:
47:54:c4:78:99:4a:ec:65:f6:e1:96:b2:a3:1a:87:4e:88:ec:
87:d6:1e:e5:d5:79:7f:bc:79:fb:54:94:41:da:e0:05:4f:a6:
33:0c:63:51:b9:ed:1a:7c:fd:c2:06:8b:7d:8e:38:35:66:05:
1d:81:d4:8d:57:85:24:af:fb:ad:5d:cf:47:2c:e3:02:41:cf:
e9:c6:62:bf:b7:57:b3:8d:00:c0:bb:5b:63:ce:f4:46:a8:a7:
c0:06:36:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:13:29 2025 by rpki-client