Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/nPjV6lYXInJfXl86tbhvs9WXUa4.roa
File: nPjV6lYXInJfXl86tbhvs9WXUa4.roa (raw, json)
Hash identifier: asKBhySwit3PBxbedsUA8HTRnekoYKrc5tk7Wn5QFGc=
Subject key identifier: 9C:F8:D5:EA:56:17:22:72:5F:5E:5F:3A:B5:B8:6F:B3:D5:97:51:AE
Certificate issuer: /CN=c224b69ed4a23b7b3e0674a3f994601d73b7baff
Certificate serial: 01981CC8E91FE0DF9D93BC2175D2E3773E30
Authority key identifier: C2:24:B6:9E:D4:A2:3B:7B:3E:06:74:A3:F9:94:60:1D:73:B7:BA:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/nPjV6lYXInJfXl86tbhvs9WXUa4.roa
Signing time: Fri 18 Jul 2025 09:06:25 +0000
ROA not before: Fri 18 Jul 2025 09:06:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59655
IP address blocks: 176.97.156.0/23 maxlen: 23
176.97.156.0/24 maxlen: 24
176.97.157.0/24 maxlen: 24
178.255.200.0/22 maxlen: 22
178.255.201.0/24 maxlen: 24
178.255.202.0/23 maxlen: 23
178.255.202.0/24 maxlen: 24
178.255.203.0/24 maxlen: 24
178.255.204.0/23 maxlen: 23
178.255.204.0/24 maxlen: 24
178.255.205.0/24 maxlen: 24
178.255.206.0/23 maxlen: 23
178.255.206.0/24 maxlen: 24
185.199.12.0/24 maxlen: 24
185.199.13.0/24 maxlen: 24
185.199.14.0/24 maxlen: 24
185.199.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:1c:c8:e9:1f:e0:df:9d:93:bc:21:75:d2:e3:77:3e:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c224b69ed4a23b7b3e0674a3f994601d73b7baff
Validity
Not Before: Jul 18 09:06:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9cf8d5ea561722725f5e5f3ab5b86fb3d59751ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:fa:3e:51:fd:79:6f:63:37:0d:83:c7:9e:bf:
4a:31:d4:dd:9c:06:78:dc:c3:e8:42:50:7b:5b:01:
56:74:d8:01:6a:31:a3:03:b5:fe:6a:ce:e3:1e:bc:
01:71:3a:f2:b4:c2:36:07:89:3c:5b:ed:9c:6f:25:
97:f5:12:af:2b:99:07:bb:f4:66:ba:4e:fb:82:1c:
3c:01:a8:03:a1:ba:77:66:33:f7:e5:e3:c2:c8:93:
4b:18:0b:65:66:f4:1f:53:5e:4e:89:1a:a6:11:f1:
2e:a3:d2:cf:9c:7e:cd:cd:8a:dc:7d:37:31:cd:2e:
ea:05:84:73:cc:0f:a7:2e:62:91:76:52:25:30:02:
27:19:3c:f2:a9:93:1e:cc:da:ce:9f:1a:85:6d:87:
57:af:e1:a7:4b:ef:ae:be:83:85:46:dd:a2:0e:62:
b3:fd:72:a3:ae:85:04:63:d0:a0:ad:8d:d9:d6:6c:
64:bd:60:73:1e:25:16:72:d2:e3:f9:eb:70:73:2e:
cb:f3:bc:ec:2c:79:27:d2:36:ca:54:9e:6e:55:c2:
34:4a:97:bf:ff:a5:81:fc:55:28:0f:b5:fc:03:05:
7a:8f:e8:70:f9:57:20:12:21:b9:de:d0:79:ea:07:
82:22:ba:ad:f2:b9:2c:1d:db:30:c1:fd:8d:88:6d:
e1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F8:D5:EA:56:17:22:72:5F:5E:5F:3A:B5:B8:6F:B3:D5:97:51:AE
X509v3 Authority Key Identifier:
keyid:C2:24:B6:9E:D4:A2:3B:7B:3E:06:74:A3:F9:94:60:1D:73:B7:BA:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/nPjV6lYXInJfXl86tbhvs9WXUa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.156.0/23
178.255.200.0/21
185.199.12.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:19:72:84:bb:39:89:ed:17:20:05:d5:b2:d7:4b:48:d6:ef:
e1:0e:a6:36:5b:59:d2:81:60:4f:16:c2:50:99:9f:3f:5d:2c:
ec:67:34:0e:34:37:b5:d9:ba:f8:1e:f5:3b:32:16:f8:a7:05:
5c:ee:bf:81:08:87:75:56:47:0a:14:6c:8d:2a:3c:fb:2b:f4:
00:5a:3c:59:14:0c:f0:5e:11:f2:97:f1:8e:44:67:0d:3c:a7:
c1:3a:af:12:e3:d3:14:33:7c:ea:fb:86:9a:e0:0c:b0:e5:2b:
ba:65:df:11:19:cc:2a:e9:48:da:ec:e7:4c:3d:a3:5b:88:c9:
38:20:f5:42:df:d5:f8:28:05:95:ee:1c:73:55:f7:b2:80:b2:
42:80:d0:b8:26:aa:98:49:0b:b5:bd:82:b9:32:4d:db:89:40:
90:27:0d:6e:b2:a0:f7:4a:af:bd:f5:82:56:c6:4a:99:19:89:
30:82:ee:f8:72:5b:a8:12:2e:c8:05:c5:5a:f6:53:3a:78:8c:
e4:a9:54:d0:d2:ca:c1:dd:5b:e8:52:89:b4:c9:47:14:be:f9:
ae:19:44:9e:81:58:7d:4a:af:45:64:58:27:ba:3c:d3:12:05:
43:41:b2:96:71:5a:62:68:fd:ac:b7:ee:17:2c:4a:38:01:d3:
56:7e:5b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 14:48:09 2025 by rpki-client