Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/nSIzJKU0ViW0Tp1lo2ol2RD3RHM.roa
File: nSIzJKU0ViW0Tp1lo2ol2RD3RHM.roa (raw, json)
Hash identifier: BXbV5oAGjKarH2sbJPJGead6lXsDaCiXKANtgRRfQaI=
Subject key identifier: 9D:22:33:24:A5:34:56:25:B4:4E:9D:65:A3:6A:25:D9:10:F7:44:73
Certificate issuer: /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Certificate serial: 0197F4B62ABBA1BE29A4905A85F1EA8CA334
Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/nSIzJKU0ViW0Tp1lo2ol2RD3RHM.roa
Signing time: Thu 10 Jul 2025 14:21:08 +0000
ROA not before: Thu 10 Jul 2025 14:21:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212666
IP address blocks: 31.133.80.0/22 maxlen: 24
176.103.224.0/22 maxlen: 24
176.103.232.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f4:b6:2a:bb:a1:be:29:a4:90:5a:85:f1:ea:8c:a3:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Validity
Not Before: Jul 10 14:21:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d223324a5345625b44e9d65a36a25d910f74473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a0:f6:37:34:d3:cd:dd:22:fa:fb:09:3b:5f:
1e:a3:06:21:71:e0:e4:6d:75:4a:dc:dc:e5:ec:87:
70:4d:ee:38:40:6c:e4:b9:e2:71:82:08:f8:01:bc:
a2:c5:be:c0:06:00:27:05:ac:5c:ea:fd:ab:99:80:
5c:42:f3:6f:5a:34:bf:06:2a:9b:eb:83:b7:26:c3:
2d:00:d4:73:c5:3a:5d:31:9f:cd:e5:9d:c5:f4:bb:
a4:d0:c8:93:73:1e:06:27:39:0a:1f:29:03:1e:c8:
43:dd:bb:bc:51:8f:02:3e:cc:84:70:54:8b:85:bd:
88:9a:b4:7f:27:b3:24:d9:72:13:c2:c3:31:8f:e4:
13:f2:ed:a2:42:fc:a7:3b:1c:a8:d9:29:e3:7a:01:
30:0d:88:ab:15:2d:1c:c4:b5:1b:c3:59:9f:4c:d2:
f6:c1:a3:a1:ee:8c:d0:1d:85:70:32:6d:38:db:7d:
18:fa:c9:dc:4f:ef:08:db:a5:5f:1f:c7:4d:c5:cc:
1b:45:c0:3f:c2:c3:61:bf:87:b6:5f:c5:27:ed:ad:
41:a6:62:ef:cc:fa:77:00:9e:76:14:f2:70:43:44:
20:11:45:03:98:77:a7:e1:4a:3a:7a:3c:18:7b:5e:
aa:1f:6d:0d:98:b2:33:7a:4f:49:13:6e:67:df:1f:
87:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:22:33:24:A5:34:56:25:B4:4E:9D:65:A3:6A:25:D9:10:F7:44:73
X509v3 Authority Key Identifier:
keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/nSIzJKU0ViW0Tp1lo2ol2RD3RHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.80.0/22
176.103.224.0/22
176.103.232.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:e6:9b:30:5a:f5:ea:5b:b5:4d:30:a5:44:9c:f9:2d:5b:19:
6c:82:00:44:32:ed:41:f5:69:0f:6d:59:d2:35:0a:60:96:60:
7b:fa:44:d8:19:04:24:5b:58:50:f8:0f:b5:a1:01:ab:1c:aa:
f2:8c:7d:32:d9:19:e6:aa:96:0c:76:1b:25:ce:37:e2:0f:a0:
3d:83:aa:d4:43:f3:a1:79:ae:af:56:cc:02:54:2a:20:80:99:
e6:0e:1b:67:26:e4:92:25:9b:50:b1:3d:7c:9e:0b:c3:55:f4:
3d:56:36:00:da:39:f7:60:90:94:84:ad:e9:dc:69:39:d7:e7:
df:b5:ca:b2:c1:fb:fb:0e:09:ca:22:26:da:d3:67:96:40:60:
01:95:b6:29:68:10:6c:28:b6:67:87:d5:22:12:d9:f6:d6:ae:
c5:b2:67:a0:47:85:1a:fc:4d:65:c7:53:9c:b3:32:ce:fa:c6:
d6:cf:2d:ae:1e:97:b7:a8:00:08:e4:96:a0:ce:31:cd:11:e8:
5d:73:dc:0c:2b:91:1a:7a:73:d8:cd:e1:18:75:bc:78:58:19:
a7:0f:be:9b:15:ff:a0:0e:81:89:ef:f3:ac:78:a4:bc:b1:bd:
8e:20:2f:37:51:2a:df:9c:28:7e:0a:48:71:c1:31:e9:d7:f8:
7e:3b:ec:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:02:55 2025 by rpki-client