Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/nUc3_wTTpdnLbKR8Uy1jJ4gBZwQ.roa
File: nUc3_wTTpdnLbKR8Uy1jJ4gBZwQ.roa (raw, json)
Hash identifier: VOaC2DOv6Yz3INtNAQr2e/Adq/ukqiu+QVFQZmotO8w=
Subject key identifier: 9D:47:37:FF:04:D3:A5:D9:CB:6C:A4:7C:53:2D:63:27:88:01:67:04
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 019A4A8CF5CB5E1B293E3035A59A65AAE869
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/nUc3_wTTpdnLbKR8Uy1jJ4gBZwQ.roa
Signing time: Mon 03 Nov 2025 16:29:03 +0000
ROA not before: Mon 03 Nov 2025 16:29:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 93.88.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4a:8c:f5:cb:5e:1b:29:3e:30:35:a5:9a:65:aa:e8:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Nov 3 16:29:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d4737ff04d3a5d9cb6ca47c532d632788016704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b9:a1:25:a1:38:ba:f9:c5:87:d2:b0:4e:52:
a5:02:fb:8c:35:e9:1d:85:40:8e:13:cb:28:ab:b4:
44:0e:99:df:ed:60:2d:49:9a:f2:09:b3:bd:c6:00:
85:e5:a4:19:01:4e:91:9c:76:9f:b0:27:2c:f1:8b:
12:e5:49:aa:37:73:f6:81:97:b1:96:b1:d8:40:4b:
60:08:0a:f4:99:21:2a:2f:bf:d9:9e:44:d5:6b:b6:
75:ce:fc:cd:5b:70:fc:8a:db:10:d6:d9:6f:2e:04:
8a:11:71:5b:25:eb:e3:91:fc:7d:8a:05:1c:a9:11:
3b:5c:59:c3:b1:70:f7:e6:5d:56:a4:85:41:97:91:
68:eb:34:44:ed:38:62:ce:5c:7e:c9:82:ac:c3:63:
55:14:23:ab:bc:19:ee:e0:cd:12:4d:8c:44:e4:98:
c0:f7:22:75:73:0c:27:9c:23:6a:39:85:71:a9:c1:
f5:ce:01:95:e6:48:c1:2f:31:fe:7c:cc:79:c3:3d:
8a:24:d6:95:a2:46:eb:3f:01:f5:a9:c9:ef:59:9b:
3a:6a:0a:21:d3:b0:65:8e:11:06:34:72:d7:78:21:
d0:52:64:34:29:64:98:52:95:5e:1e:57:45:58:3a:
39:f5:ef:59:f7:5f:84:bc:96:6d:85:50:04:08:8a:
cf:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:47:37:FF:04:D3:A5:D9:CB:6C:A4:7C:53:2D:63:27:88:01:67:04
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/nUc3_wTTpdnLbKR8Uy1jJ4gBZwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.88.154.0/24
Signature Algorithm: sha256WithRSAEncryption
12:c8:ea:e3:2e:7f:05:00:dd:18:28:13:7c:c6:dd:7f:23:7f:
80:f5:76:3d:0c:8f:a7:43:86:87:bf:37:af:73:21:31:83:66:
3a:cb:a7:80:a0:92:eb:16:ed:46:e5:10:8d:79:91:19:c0:1b:
4e:59:b3:6b:f8:5b:54:0e:00:aa:79:eb:69:1e:a2:10:c7:ad:
3c:f9:d5:31:b8:44:5e:6a:cb:85:f3:40:41:13:34:b0:f4:b2:
55:69:c5:ef:1c:d7:ff:01:b5:3d:37:7d:8d:87:f3:68:e0:00:
73:f2:35:57:51:b4:36:cf:a9:a8:8b:4a:e3:ac:cb:8c:63:ef:
a5:b1:bb:cc:69:76:b5:49:21:ce:b7:08:c6:04:c0:8b:3d:1c:
3d:75:e5:3d:a0:a9:19:72:cc:a5:69:01:3b:90:08:c8:3d:39:
b1:38:11:17:0e:2d:00:ae:6f:73:6d:75:c5:41:25:08:6a:55:
5f:1e:30:47:a1:e0:e8:ce:ba:2a:d1:51:45:1d:31:ed:86:aa:
ce:5b:dd:9f:4a:de:13:fa:33:42:ad:b8:66:e8:5a:e5:da:d6:
11:50:f3:11:45:6b:06:fc:6b:07:f9:8e:87:47:b4:b6:b2:01:
36:39:e8:63:a7:57:4e:57:6a:e8:34:69:1d:1c:8a:1a:16:43:
b4:e1:57:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:36:08 2025 by rpki-client