Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/njlinsmP7gnmt4n7VDuZ0b4k0ZQ.roa
File: njlinsmP7gnmt4n7VDuZ0b4k0ZQ.roa (raw, json)
Hash identifier: 8omn75JjRFfw43kmGbnsTzRzp9iit4iIDtbQyHgj6GQ=
Subject key identifier: 9E:39:62:9E:C9:8F:EE:09:E6:B7:89:FB:54:3B:99:D1:BE:24:D1:94
Certificate issuer: /CN=e86360db81f505c5e9a9b5ad10a81c64f4a85bd2
Certificate serial: 019A30745A45DAE24CE7A67F8C91A7A5E84C
Authority key identifier: E8:63:60:DB:81:F5:05:C5:E9:A9:B5:AD:10:A8:1C:64:F4:A8:5B:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6GNg24H1BcXpqbWtEKgcZPSoW9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/njlinsmP7gnmt4n7VDuZ0b4k0ZQ.roa
Signing time: Wed 29 Oct 2025 14:52:02 +0000
ROA not before: Wed 29 Oct 2025 14:52:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202382
IP address blocks: 104.239.60.0/22 maxlen: 22
185.152.252.0/22 maxlen: 22
185.152.252.0/24 maxlen: 24
194.62.200.0/22 maxlen: 22
194.62.202.0/24 maxlen: 24
194.62.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/6GNg24H1BcXpqbWtEKgcZPSoW9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:30:74:5a:45:da:e2:4c:e7:a6:7f:8c:91:a7:a5:e8:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e86360db81f505c5e9a9b5ad10a81c64f4a85bd2
Validity
Not Before: Oct 29 14:52:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e39629ec98fee09e6b789fb543b99d1be24d194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:78:d0:52:47:4b:d3:ab:fe:d4:20:91:ca:ed:
10:92:8c:e1:bf:34:48:47:fd:77:80:a5:2e:ad:81:
03:86:be:b9:4a:7e:24:34:c3:95:b1:35:76:97:83:
c7:11:1b:e4:72:3c:89:ad:67:f7:54:3d:6a:c9:fa:
db:27:85:9e:41:ca:80:3d:fe:c9:23:3e:64:30:08:
59:ce:ce:8c:58:79:9a:f2:af:38:d0:ce:48:1e:61:
99:a8:db:9c:2c:05:d7:d0:0f:e2:8e:af:46:4d:26:
36:76:ea:60:90:81:55:e7:f0:d9:07:41:be:d1:58:
f6:4f:fd:33:29:83:f7:2b:bc:fb:dd:fd:4b:c0:4c:
c6:19:53:0a:e5:46:78:75:fa:d4:58:6f:e3:30:78:
32:b9:e2:c3:24:d5:0e:ae:83:de:2c:aa:32:aa:bb:
78:66:6f:ec:aa:62:b3:a1:cf:a9:99:fe:13:f9:ef:
1e:f6:ed:03:71:c1:2a:40:79:ed:0d:1d:4a:90:c0:
d8:86:d8:dc:9d:24:71:7e:74:c0:e5:9e:17:59:98:
27:2d:3b:88:a5:1e:27:87:2f:d1:9f:58:28:76:36:
e6:36:37:b0:58:ad:57:3c:d3:7a:60:66:b8:32:ab:
d9:d0:7d:f7:71:b5:61:9b:d7:32:9c:37:d7:18:0e:
8c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:39:62:9E:C9:8F:EE:09:E6:B7:89:FB:54:3B:99:D1:BE:24:D1:94
X509v3 Authority Key Identifier:
keyid:E8:63:60:DB:81:F5:05:C5:E9:A9:B5:AD:10:A8:1C:64:F4:A8:5B:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6GNg24H1BcXpqbWtEKgcZPSoW9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/njlinsmP7gnmt4n7VDuZ0b4k0ZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.239.60.0/22
185.152.252.0/22
194.62.200.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:9a:9a:85:c2:ac:27:da:f7:66:22:a2:4f:30:01:d0:b7:1f:
9b:4c:4d:d1:8d:77:37:53:37:c0:99:2e:06:96:5b:08:61:86:
8f:36:b5:e4:09:25:2c:8d:d9:22:58:9e:89:2b:35:01:25:6f:
e8:a9:93:77:de:91:48:ab:e6:f3:b0:6f:e6:27:f6:2d:21:c2:
c7:65:b7:7a:a0:f1:32:7d:0d:2e:e7:ba:2e:d5:0a:ec:22:a2:
e3:7c:70:b8:50:72:e2:51:55:b0:8d:8e:de:7e:24:2c:71:fa:
11:58:2d:7c:16:96:2f:9f:b7:c3:1c:6d:88:25:49:38:6d:7c:
f5:7f:19:83:3c:da:b6:b8:d1:f3:96:3a:84:1a:67:d4:c0:40:
dd:24:64:f9:8e:6c:c0:e3:0c:a7:28:ed:09:c8:f7:86:93:7a:
5e:75:6f:47:61:97:0d:4f:82:71:7d:70:2d:84:aa:3d:ab:79:
9f:a5:7d:05:10:db:8f:ce:6e:a2:d3:c4:c4:a6:36:5f:85:b6:
e9:d9:87:b8:ee:eb:94:6d:e4:3a:0c:b0:d0:c5:81:de:c2:be:
61:c1:c1:49:c2:f3:ec:f4:34:4a:9b:24:5c:0b:a0:ae:b2:33:
ee:a6:c1:1f:ad:cf:cf:42:9e:25:94:7b:c2:10:03:5f:f2:0d:
5c:1a:5f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:13:02 2025 by rpki-client