Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/1-NOojewDd9utfznujBymNMOVe5o.roa
File: 1-NOojewDd9utfznujBymNMOVe5o.roa (raw, json)
Hash identifier: X2kKFux/YKAN46Gj+j+YVyBua6uxGC7NabYTrscJFb0=
Subject key identifier: F8:D3:A8:8D:EC:03:77:DB:AD:7F:39:EE:8C:1C:A6:34:C3:95:7B:9A
Certificate issuer: /CN=1f810cc3fd228338d9b969725d95bb33c4e65a48
Certificate serial: 019A2EF200C7744BDACBD647981AE3A7F812
Authority key identifier: 1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/1-NOojewDd9utfznujBymNMOVe5o.roa
Signing time: Wed 29 Oct 2025 07:50:03 +0000
ROA not before: Wed 29 Oct 2025 07:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197327
IP address blocks: 176.120.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:f2:00:c7:74:4b:da:cb:d6:47:98:1a:e3:a7:f8:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f810cc3fd228338d9b969725d95bb33c4e65a48
Validity
Not Before: Oct 29 07:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8d3a88dec0377dbad7f39ee8c1ca634c3957b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3b:f6:aa:91:2b:b1:5f:72:95:35:02:33:1f:
28:b0:df:e3:ac:95:ba:34:a7:17:15:47:d3:e2:0a:
33:9d:40:40:4d:b8:c4:4c:de:99:4a:83:c2:35:e5:
75:f8:a0:cf:61:0c:6f:ad:ad:58:98:cc:6d:88:9c:
72:7f:f5:fc:fc:a7:90:e7:88:53:29:60:b3:ba:fd:
67:99:e1:53:0c:df:ca:2f:9a:fc:a0:27:83:21:ba:
ff:5f:3b:4b:eb:2c:bb:b6:80:64:8e:f5:9b:58:bd:
af:95:92:c8:aa:90:eb:8a:af:43:87:a2:a2:62:6a:
2e:ad:63:d2:7a:b0:56:93:01:ee:8d:e1:a6:69:c6:
5b:90:d0:1f:89:03:ea:35:b6:25:a1:e7:3e:50:67:
6e:9f:9f:8b:4e:d2:62:3b:e1:c6:c7:b5:b4:8c:a6:
99:9c:3c:ae:34:43:cf:42:bf:b1:7d:f1:a1:98:da:
7c:1f:90:96:ab:06:f8:57:3b:08:00:09:6e:b2:9e:
d5:1e:f7:91:58:b5:c5:c9:ec:55:f1:80:35:0c:26:
e5:42:5f:3b:e0:66:52:8c:10:22:8d:5c:5d:eb:6a:
89:bd:8d:2e:88:aa:9d:b4:3f:37:ed:ec:f8:96:f5:
90:a4:bc:fa:33:91:89:e2:c0:d2:ed:7d:d5:be:5a:
e3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D3:A8:8D:EC:03:77:DB:AD:7F:39:EE:8C:1C:A6:34:C3:95:7B:9A
X509v3 Authority Key Identifier:
keyid:1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/1-NOojewDd9utfznujBymNMOVe5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.120.101.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:8d:55:c2:24:cb:fd:66:a3:87:3a:0b:5a:f2:8a:e4:10:94:
35:b6:5f:b3:7b:3d:b9:0a:fb:32:92:04:2a:fa:6a:44:c6:d9:
7a:ad:ca:6e:07:54:27:fc:3a:1e:12:5c:f8:3f:aa:4b:6e:c9:
5a:cd:16:24:c2:87:95:81:28:0e:d2:c2:9a:79:fc:f9:1e:ae:
2e:46:9a:05:74:e6:f5:59:66:b2:26:97:53:14:f8:13:42:74:
7d:e8:d7:e5:06:31:e1:00:1a:27:a0:16:d0:4a:ca:86:a4:93:
11:06:78:38:52:b4:c3:e7:f6:63:90:bd:95:f0:9e:9b:f3:f9:
81:f2:2c:e6:04:8d:da:e8:3b:9f:b5:17:28:30:7e:20:d5:55:
97:c8:27:1c:5a:60:3d:05:a8:db:da:4a:35:d9:b5:b3:00:8f:
17:53:8d:b4:ab:21:ac:ec:b3:ea:2d:59:d6:28:6d:4f:3b:84:
9b:b5:44:f0:76:6e:0c:d0:a4:01:48:52:e2:78:64:4b:84:42:
08:11:5a:2f:33:08:5f:09:da:50:09:d7:bb:cf:60:64:03:cd:
b8:8c:1c:26:32:d4:e2:82:ce:a5:a2:f3:c0:63:98:d1:78:55:
54:b9:f7:df:7c:48:5d:55:b4:4b:78:2c:2c:33:00:a2:7f:39:
d3:77:f2:c1
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZou8gDHdEvay9ZHmBrjp/gSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmODEwY2MzZmQyMjgzMzhkOWI5Njk3MjVkOTViYjMzYzRl
NjVhNDgwHhcNMjUxMDI5MDc1MDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOGQzYTg4ZGVjMDM3N2RiYWQ3ZjM5ZWU4YzFjYTYzNGMzOTU3YjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDv2qpErsV9ylTUCMx8osN/jrJW6
NKcXFUfT4goznUBATbjETN6ZSoPCNeV1+KDPYQxvra1YmMxtiJxyf/X8/KeQ54hT
KWCzuv1nmeFTDN/KL5r8oCeDIbr/XztL6yy7toBkjvWbWL2vlZLIqpDriq9Dh6Ki
YmourWPSerBWkwHujeGmacZbkNAfiQPqNbYloec+UGdun5+LTtJiO+HGx7W0jKaZ
nDyuNEPPQr+xffGhmNp8H5CWqwb4VzsIAAlusp7VHveRWLXFyexV8YA1DCblQl87
4GZSjBAijVxd62qJvY0uiKqdtD837ez4lvWQpLz6M5GJ4sDS7X3Vvlrj4QIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPjTqI3sA3fbrX857owcpjTDlXuaMB8GA1UdIwQY
MBaAFB+BDMP9IoM42blpcl2VuzPE5lpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDRFTXdfMGlnempadVdseVhaVzdNOFRtV2tnLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8wZjA5MjctYzI5Yi00Njk4LTg1OWUt
ZjljMTgwYmE0ODAxLzEvMS1OT29qZXdEZDl1dGZ6bnVqQnltTk1PVmU1by5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZjkvMGYwOTI3LWMyOWItNDY5OC04NTllLWY5YzE4MGJhNDgw
MS8xL0g0RU13XzBpZ3pqWnVXbHlYWlc3TThUbVdrZy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALB4ZTAN
BgkqhkiG9w0BAQsFAAOCAQEAwo1VwiTL/WajhzoLWvKK5BCUNbZfs3s9uQr7MpIE
KvpqRMbZeq3KbgdUJ/w6HhJc+D+qS27JWs0WJMKHlYEoDtLCmnn8+R6uLkaaBXTm
9VlmsiaXUxT4E0J0fejX5QYx4QAaJ6AW0ErKhqSTEQZ4OFK0w+f2Y5C9lfCem/P5
gfIs5gSN2ug7n7UXKDB+INVVl8gnHFpgPQWo29pKNdm1swCPF1ONtKshrOyz6i1Z
1ihtTzuEm7VE8HZuDNCkAUhS4nhkS4RCCBFaLzMIXwnaUAnXu89gZAPNuIwcJjLU
4oLOpaLzwGOY0XhVVLn333xIXVW0S3gsLDMAon8503fywQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:30:16 2025 by rpki-client