Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/NPlJ_KhWtoEU85P6_bEw-JrQECw.roa
File: NPlJ_KhWtoEU85P6_bEw-JrQECw.roa (raw, json)
Hash identifier: +WKUN/INEKKaNIE4RDQgpQc6rCP9GRAzlztHhcY8Wc4=
Subject key identifier: 34:F9:49:FC:A8:56:B6:81:14:F3:93:FA:FD:B1:30:F8:9A:D0:10:2C
Certificate issuer: /CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
Certificate serial: 01983C96629A3DC21633F1E4A93D6B6B9B46
Authority key identifier: 54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/NPlJ_KhWtoEU85P6_bEw-JrQECw.roa
Signing time: Thu 24 Jul 2025 13:19:05 +0000
ROA not before: Thu 24 Jul 2025 13:19:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50053
IP address blocks: 91.204.74.0/24 maxlen: 24
91.204.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3c:96:62:9a:3d:c2:16:33:f1:e4:a9:3d:6b:6b:9b:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
Validity
Not Before: Jul 24 13:19:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=34f949fca856b68114f393fafdb130f89ad0102c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ea:70:00:f7:1a:03:8d:57:07:fb:7f:f7:84:
29:d8:96:da:e7:7e:4d:c4:b2:e4:e0:63:a7:84:ad:
8e:1c:d6:9b:87:ea:c6:77:60:f4:b2:94:45:fe:e6:
ba:b3:33:46:48:82:6c:b9:d5:09:76:08:b5:13:b5:
67:ae:cd:31:52:f7:7b:31:92:3f:76:4d:37:c2:9e:
65:49:a6:da:ac:6a:45:a1:47:87:6c:74:6e:d1:d9:
b2:b9:aa:69:1f:df:9a:45:75:77:49:33:88:19:fa:
9b:93:9c:04:ea:7d:da:0a:80:4a:85:a3:a4:03:21:
83:68:cf:a3:44:78:dd:72:83:28:a6:41:a8:7c:13:
93:d4:7f:9f:6d:38:26:33:2a:94:6b:f3:bc:a5:ed:
75:05:e1:f7:9e:81:40:73:ad:55:ff:73:53:b5:a1:
b0:50:34:85:81:57:05:77:7c:6d:af:6f:7f:d4:1c:
0e:7f:4c:ac:75:f4:4a:b3:04:ff:20:db:2d:fd:b1:
fa:16:32:05:38:5a:6c:65:64:8b:09:87:44:20:d9:
f8:c0:2e:2e:78:dc:d9:7c:09:bb:06:20:c6:37:83:
40:62:0f:09:3b:11:64:1d:76:37:4e:84:84:58:fc:
3d:d5:49:a5:92:73:8b:fa:7e:d6:88:1d:6d:da:d1:
8f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F9:49:FC:A8:56:B6:81:14:F3:93:FA:FD:B1:30:F8:9A:D0:10:2C
X509v3 Authority Key Identifier:
keyid:54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/NPlJ_KhWtoEU85P6_bEw-JrQECw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.74.0/23
Signature Algorithm: sha256WithRSAEncryption
31:8a:07:d5:83:da:61:16:24:74:90:18:2e:27:4d:22:28:33:
96:fd:9b:ce:e8:e7:fb:87:56:1b:f2:96:19:5e:69:b0:c7:83:
a5:d3:62:ae:41:f8:e5:b8:21:37:47:35:3c:07:62:87:51:bb:
ac:7d:9f:75:c5:7c:6e:14:96:7a:6b:43:a7:a1:0b:0e:58:62:
d8:39:3e:fc:fc:1e:1c:fc:55:7f:95:a2:6c:08:68:a7:57:61:
4d:7b:ab:ed:d2:aa:ad:7f:46:8b:16:14:d5:67:77:e7:d2:15:
23:c8:55:f6:df:33:7f:87:4b:4b:fc:22:85:c4:81:a9:46:71:
df:5b:55:dd:a4:40:7e:0e:a3:c3:5a:76:dc:b1:d7:25:61:55:
42:92:ca:a6:fe:c5:9e:03:e4:7a:62:2b:f6:82:00:7c:4b:f5:
e2:58:37:77:d3:15:bc:e5:41:6a:b1:61:4e:ae:5c:b6:f2:e5:
dc:98:79:31:db:64:01:ee:df:df:8c:f0:3e:c5:6e:f5:dd:16:
31:f2:53:f4:f6:9e:0b:6c:23:22:f2:15:db:5e:eb:f2:fb:1e:
ac:a9:32:7c:96:df:17:dd:1c:1b:08:9f:a8:2a:8e:22:02:1d:
e5:17:94:9b:40:a9:69:1c:a5:f9:96:a0:6f:82:b9:0f:0a:0a:
c3:de:6d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:56:34 2025 by rpki-client