Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/NvhPFVk9oyGz8ptuRFIjsEfx-34.roa
File: NvhPFVk9oyGz8ptuRFIjsEfx-34.roa (raw, json)
Hash identifier: rMiBv5wATJ5SuuGpYjDvqo3voyvSBHCSUHAwCjhyOqc=
Subject key identifier: 36:F8:4F:15:59:3D:A3:21:B3:F2:9B:6E:44:52:23:B0:47:F1:FB:7E
Certificate issuer: /CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Certificate serial: 01981D2510B40E9B2049311C9FCD475F1FF1
Authority key identifier: 54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/NvhPFVk9oyGz8ptuRFIjsEfx-34.roa
Signing time: Fri 18 Jul 2025 10:47:05 +0000
ROA not before: Fri 18 Jul 2025 10:47:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9121
IP address blocks: 188.125.160.0/24 maxlen: 24
188.125.163.0/24 maxlen: 24
188.125.166.0/24 maxlen: 24
188.125.168.0/24 maxlen: 24
188.125.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:1d:25:10:b4:0e:9b:20:49:31:1c:9f:cd:47:5f:1f:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Validity
Not Before: Jul 18 10:47:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=36f84f15593da321b3f29b6e445223b047f1fb7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:9c:19:87:96:23:3f:e5:47:41:5d:a1:75:82:
20:d5:63:1e:2d:cb:97:72:f0:4e:d8:37:ec:c3:d0:
e6:80:d2:00:1a:4d:f5:e1:89:43:b5:0e:61:08:1e:
de:ef:0c:f7:5b:36:39:c1:8b:ac:a2:89:e7:44:d9:
ab:81:c2:29:98:63:43:f7:72:a3:fb:42:e6:67:c7:
b0:9a:c4:b2:02:ee:99:2a:4f:81:01:24:68:9d:74:
15:b9:92:81:90:a1:87:d3:70:42:e3:e6:76:9d:6b:
19:0c:1a:48:08:b1:3e:77:79:27:13:45:ac:22:34:
a6:15:30:c8:44:aa:f4:c1:d2:af:67:eb:a0:6d:ff:
c2:f4:d8:2a:5a:27:3f:f5:0c:f1:b2:ce:e8:6b:27:
3e:41:44:c1:f7:ca:c1:66:89:79:01:60:10:7b:ce:
b2:2a:81:f1:b8:40:00:96:19:bd:25:38:f9:bc:00:
4c:ea:32:f2:5c:68:f0:34:c5:ed:fe:90:b0:fd:28:
1f:7e:5f:f5:f3:3b:cd:00:69:f0:85:20:aa:7a:d4:
bb:af:39:0f:31:74:6f:d2:61:c7:df:08:cf:af:49:
68:ff:56:ff:71:f4:41:ce:10:cb:ad:29:07:ff:ee:
55:db:2f:63:7c:32:24:46:51:3a:ba:d5:cf:18:9a:
52:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F8:4F:15:59:3D:A3:21:B3:F2:9B:6E:44:52:23:B0:47:F1:FB:7E
X509v3 Authority Key Identifier:
keyid:54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/NvhPFVk9oyGz8ptuRFIjsEfx-34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.125.160.0/24
188.125.163.0/24
188.125.166.0/24
188.125.168.0/24
188.125.170.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:45:06:da:a1:e1:b4:1a:d4:7e:1b:e6:12:d1:3e:39:60:50:
4c:34:d8:cb:28:34:46:1e:8d:93:8c:1c:27:59:bb:10:d1:cd:
24:05:7c:82:b9:85:9e:0a:2c:84:1c:5d:04:1e:89:52:39:9b:
19:0d:55:83:86:1f:63:50:ae:90:16:c3:76:81:6b:fd:41:54:
6c:f0:d9:ac:73:14:8d:e1:47:38:02:7f:a8:7b:c8:82:9b:43:
80:5c:96:05:93:50:da:03:db:3c:da:2f:da:f8:eb:d3:04:6a:
09:3e:50:b7:89:08:81:97:15:89:c7:b4:5b:9d:cc:73:dc:4d:
7e:38:55:d7:c1:1f:71:6c:be:09:06:ac:24:91:7b:e9:29:57:
60:c6:6f:0c:4c:c2:61:15:ed:6a:a0:19:cc:9c:52:00:0a:f3:
75:8d:ed:80:60:74:6e:ff:cf:bd:f9:74:0b:ef:15:d0:93:5b:
e5:45:50:fc:e6:df:a5:ef:1d:5a:41:50:d3:84:93:de:5e:22:
0b:03:02:76:ec:d3:4b:3e:d7:6e:79:01:a8:1f:51:0b:3f:7b:
27:eb:d5:06:68:0a:4b:83:6e:07:94:bf:53:6b:fa:b5:6e:93:
79:99:66:fb:fb:a1:8b:eb:88:2c:6e:28:b1:10:a3:ae:dd:2b:
64:89:c8:35
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZgdJRC0DpsgSTEcn81HXx/xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MmY2MzNmNzZlOGQ4YWFlYWEzMmI1YWNlMTZhM2RiMzk0
M2Q4MGMwHhcNMjUwNzE4MTA0NzA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNmY4NGYxNTU5M2RhMzIxYjNmMjliNmU0NDUyMjNiMDQ3ZjFmYjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8JwZh5YjP+VHQV2hdYIg1WMeLcuX
cvBO2Dfsw9DmgNIAGk314YlDtQ5hCB7e7wz3WzY5wYusoonnRNmrgcIpmGND93Kj
+0LmZ8ewmsSyAu6ZKk+BASRonXQVuZKBkKGH03BC4+Z2nWsZDBpICLE+d3knE0Ws
IjSmFTDIRKr0wdKvZ+ugbf/C9NgqWic/9Qzxss7oayc+QUTB98rBZol5AWAQe86y
KoHxuEAAlhm9JTj5vABM6jLyXGjwNMXt/pCw/Sgffl/18zvNAGnwhSCqetS7rzkP
MXRv0mHH3wjPr0lo/1b/cfRBzhDLrSkH/+5V2y9jfDIkRlE6utXPGJpSuwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFDb4TxVZPaMhs/KbbkRSI7BH8ft+MB8GA1UdIwQY
MBaAFFQvYz926Niq6qMrWs4Wo9s5Q9gMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkM5alAzYm8yS3Jxb3l0YXpoYWoyemxEMkF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9kNmI4NzQtYWVhOC00YjdlLWIwZDIt
NjliOTUzYzlkNWFhLzEvTnZoUEZWazlveUd6OHB0dVJGSWpzRWZ4LTM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9kNmI4NzQtYWVhOC00YjdlLWIwZDItNjliOTUzYzlkNWFh
LzEvVkM5alAzYm8yS3Jxb3l0YXpoYWoyemxEMkF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAvH2gAwQA
vH2jAwQAvH2mAwQAvH2oAwQAvH2qMA0GCSqGSIb3DQEBCwUAA4IBAQAPRQbaoeG0
GtR+G+YS0T45YFBMNNjLKDRGHo2TjBwnWbsQ0c0kBXyCuYWeCiyEHF0EHolSOZsZ
DVWDhh9jUK6QFsN2gWv9QVRs8NmscxSN4Uc4An+oe8iCm0OAXJYFk1DaA9s82i/a
+OvTBGoJPlC3iQiBlxWJx7Rbncxz3E1+OFXXwR9xbL4JBqwkkXvpKVdgxm8MTMJh
Fe1qoBnMnFIACvN1je2AYHRu/8+9+XQL7xXQk1vlRVD85t+l7x1aQVDThJPeXiIL
AwJ27NNLPtdueQGoH1ELP3sn69UGaApLg24HlL9Ta/q1bpN5mWb7+6GL64gsbiix
EKOu3Stkicg1
-----END CERTIFICATE-----
Generated at Wed Jul 23 23:00:55 2025 by rpki-client