Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/Npx18kARbKwhPsVOQp9AGtW-IRk.roa
File: Npx18kARbKwhPsVOQp9AGtW-IRk.roa (raw, json)
Hash identifier: vuiB+5rGT82oxQbwKjm+/1tHrIOrr/bLoXItiD0HcWA=
Subject key identifier: 36:9C:75:F2:40:11:6C:AC:21:3E:C5:4E:42:9F:40:1A:D5:BE:21:19
Certificate issuer: /CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360
Certificate serial: 019A2D23A907B51926C4C3E3E90CC8DB6D4B
Authority key identifier: B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/Npx18kARbKwhPsVOQp9AGtW-IRk.roa
Signing time: Tue 28 Oct 2025 23:25:03 +0000
ROA not before: Tue 28 Oct 2025 23:25:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15490
IP address blocks: 185.141.252.0/22 maxlen: 24
185.141.252.0/24 maxlen: 24
185.141.254.0/23 maxlen: 23
185.141.254.0/24 maxlen: 24
2a07:2780::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2d:23:a9:07:b5:19:26:c4:c3:e3:e9:0c:c8:db:6d:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360
Validity
Not Before: Oct 28 23:25:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=369c75f240116cac213ec54e429f401ad5be2119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3c:df:20:7b:c0:6d:d5:83:63:8f:6a:6f:55:
c3:42:a9:c2:cf:61:f6:ff:55:a5:b0:f8:2d:67:de:
1c:58:6a:7c:4d:0e:79:f2:68:86:44:f6:ac:12:14:
86:c3:58:d7:41:54:36:1f:52:b3:c9:c6:89:0a:ba:
38:80:80:9b:84:90:6c:cf:db:08:ee:32:7c:d4:a6:
df:93:9c:e0:6e:07:f8:70:82:11:16:7b:47:93:8e:
f8:fe:f7:c2:6b:ac:3f:4e:8f:76:af:54:8d:6e:8d:
f5:89:51:ce:70:71:ef:4b:8e:b7:4c:e1:57:37:4b:
47:fd:65:bb:9e:72:bf:0f:71:f8:ec:d6:c5:08:14:
58:54:26:9e:2a:6b:6c:0c:06:d2:88:44:fc:b8:e9:
5e:91:1d:77:09:2c:75:f7:2d:4e:7c:45:ef:e4:4a:
fe:f7:a5:d0:c2:bf:5e:94:d3:e0:7b:8f:5d:7e:ef:
9a:17:63:7b:ec:9a:bd:95:0e:de:a3:0d:9c:91:a3:
0d:71:d8:9b:61:86:43:9e:e4:49:35:49:52:03:a0:
af:54:18:33:31:f8:46:e7:9e:8d:c0:ce:f5:0b:75:
b9:87:27:1f:b3:07:14:f9:45:57:2e:92:1e:56:ea:
07:27:8a:45:91:05:6f:53:ad:cd:2d:6a:de:b4:00:
f6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:9C:75:F2:40:11:6C:AC:21:3E:C5:4E:42:9F:40:1A:D5:BE:21:19
X509v3 Authority Key Identifier:
keyid:B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/Npx18kARbKwhPsVOQp9AGtW-IRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.252.0/22
IPv6:
2a07:2780::/29
Signature Algorithm: sha256WithRSAEncryption
41:00:e4:a5:55:10:c1:05:1b:45:4d:9c:05:81:77:f5:b5:23:
2c:60:94:56:3e:8d:c1:ac:17:f9:12:87:28:35:74:d6:ad:81:
59:70:ce:89:df:74:e4:ed:52:cb:5e:0f:25:0d:96:19:8d:69:
83:23:ea:2a:e5:b1:d7:7e:48:54:d2:26:d3:72:91:0f:45:d4:
19:0f:4b:9d:ae:6a:c2:bb:8c:89:24:58:1d:69:51:43:f0:9c:
49:25:7c:ca:ed:29:d2:66:56:d8:7a:71:b3:46:0d:78:ab:cd:
93:c2:db:e1:25:21:ae:a6:23:ea:81:22:99:f9:99:12:22:ff:
80:70:92:51:87:03:4d:09:12:6c:a8:d2:76:6e:8b:9c:34:5d:
81:be:8e:2a:a7:b1:89:80:b6:1c:f1:03:28:4a:bb:ef:01:e1:
2f:ea:b5:ad:de:49:df:89:f4:3d:87:bd:2b:08:5c:dd:2a:c9:
d2:f6:c4:ee:08:ba:9f:0c:9b:32:a9:91:cd:ef:f2:24:e1:05:
c5:43:b8:32:5a:c9:54:02:60:ed:af:72:7f:63:74:a1:c0:b0:
6c:f9:c7:6a:62:20:b4:aa:b0:e1:aa:c1:50:16:74:9b:ae:f9:
d4:fc:fb:7a:9e:e2:a3:44:96:21:a0:43:d8:3e:29:31:ee:e9:
5b:6a:ae:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:36:50 2025 by rpki-client