Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/nv2sWsReuDqjbbgU3JKBZoxr2-Q.roa
File: nv2sWsReuDqjbbgU3JKBZoxr2-Q.roa (raw, json)
Hash identifier: zWnvxgzXP/IKK0889x3RFyNlj3kERukZMLtV2w01Cbg=
Subject key identifier: 9E:FD:AC:5A:C4:5E:B8:3A:A3:6D:B8:14:DC:92:81:66:8C:6B:DB:E4
Certificate issuer: /CN=ed457f969c0fec35b926d0f72a47dd44b8b300f5
Certificate serial: 0197EEF515D802BB618F643C019A9650C668
Authority key identifier: ED:45:7F:96:9C:0F:EC:35:B9:26:D0:F7:2A:47:DD:44:B8:B3:00:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7UV_lpwP7DW5JtD3KkfdRLizAPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/nv2sWsReuDqjbbgU3JKBZoxr2-Q.roa
Signing time: Wed 09 Jul 2025 11:32:08 +0000
ROA not before: Wed 09 Jul 2025 11:32:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34798
IP address blocks: 193.19.120.0/23 maxlen: 32
193.22.104.0/23 maxlen: 32
2a0f:c640::/48 maxlen: 128
2a0f:c640:1::/48 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/7UV_lpwP7DW5JtD3KkfdRLizAPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/7UV_lpwP7DW5JtD3KkfdRLizAPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7UV_lpwP7DW5JtD3KkfdRLizAPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ee:f5:15:d8:02:bb:61:8f:64:3c:01:9a:96:50:c6:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed457f969c0fec35b926d0f72a47dd44b8b300f5
Validity
Not Before: Jul 9 11:32:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9efdac5ac45eb83aa36db814dc9281668c6bdbe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a2:3f:97:56:e3:6c:6f:5c:14:53:6f:9e:f9:
8f:bb:fc:32:1c:47:a7:a0:7e:c4:67:79:84:7b:f6:
5c:ee:ae:2c:86:31:d1:db:e3:85:7c:45:23:ba:22:
5d:2a:78:fe:e1:2e:bc:db:8f:e9:1b:b1:fb:43:07:
03:a0:b6:b1:c5:48:13:5d:47:f6:c8:c8:7a:cd:f9:
d2:be:d6:07:9f:2c:27:b1:54:53:66:c0:6d:15:dd:
f1:09:29:51:26:ed:f0:5a:bc:00:4e:ba:52:27:3c:
94:05:59:cb:90:00:34:21:a3:5f:69:ee:e0:d3:b0:
22:39:51:08:70:c2:ed:e1:a3:80:e7:d3:81:e8:e7:
f2:67:c1:a7:eb:9f:b2:98:b2:f5:fa:4a:8e:aa:4d:
c9:e7:13:40:fd:5f:fe:b6:31:db:2d:44:d7:e0:7d:
38:a1:35:43:f8:72:57:df:0a:04:ff:5c:ac:38:34:
6d:c5:40:04:99:3b:61:bf:2b:e2:68:42:4d:0a:f3:
d5:33:bd:c5:43:e8:c8:73:a0:f7:ff:00:00:8b:3f:
b0:39:0c:98:0d:32:77:d8:1b:76:02:06:4f:ef:11:
06:e4:dd:29:14:ea:53:c6:40:a0:30:92:39:b9:0d:
30:68:87:c5:f9:f1:d7:eb:b0:d2:3a:e3:40:7d:ef:
53:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:FD:AC:5A:C4:5E:B8:3A:A3:6D:B8:14:DC:92:81:66:8C:6B:DB:E4
X509v3 Authority Key Identifier:
keyid:ED:45:7F:96:9C:0F:EC:35:B9:26:D0:F7:2A:47:DD:44:B8:B3:00:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UV_lpwP7DW5JtD3KkfdRLizAPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/nv2sWsReuDqjbbgU3JKBZoxr2-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/7UV_lpwP7DW5JtD3KkfdRLizAPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.19.120.0/23
193.22.104.0/23
IPv6:
2a0f:c640::/47
Signature Algorithm: sha256WithRSAEncryption
10:a9:c6:8d:2e:90:b6:07:d8:4e:21:2f:ff:4b:e9:93:6a:32:
26:cf:fc:48:30:41:54:03:33:cc:20:2c:e0:d1:6d:1b:7e:cd:
1f:40:f5:8d:9d:ce:10:97:f2:74:36:6c:c6:91:af:b6:f3:ba:
a1:e4:e6:f1:b0:eb:11:df:bb:1b:8f:b5:4e:75:66:e7:cf:aa:
df:00:49:30:dc:2d:83:6e:5b:57:da:63:90:b0:41:f5:61:95:
aa:93:81:d3:e8:b6:09:30:8f:71:d2:6f:6f:a5:43:70:fe:eb:
1c:af:ff:b5:e0:41:96:f3:e3:d6:fe:2c:d9:bc:d3:e8:58:1e:
63:58:f3:45:32:c7:38:65:a9:e4:18:53:cd:c0:ea:69:4e:82:
5b:be:9f:61:8f:9c:30:c9:b0:62:75:c1:7d:2e:13:cf:36:79:
0e:41:e7:81:14:9b:86:f5:39:77:15:31:cd:3c:22:ae:6b:a7:
79:90:3c:7c:2f:81:b9:97:fa:54:94:dd:56:01:c6:7b:06:38:
b8:2b:55:af:07:c8:64:4a:6c:14:ac:ac:ba:f8:c1:3d:3b:ea:
12:1a:b3:30:7d:28:5d:8a:2a:de:65:53:93:7d:47:88:20:10:
e7:a0:7d:17:6d:24:ba:8a:1c:e0:ef:ea:94:72:a5:92:8e:a3:
47:26:e2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:12:21 2025 by rpki-client