Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/NqEDSyCU-4MS42jFZzpvAT-HI8I.roa
File: NqEDSyCU-4MS42jFZzpvAT-HI8I.roa (raw, json)
Hash identifier: 9FbUsU13J/GmaYBC86KZ74ejALBebmKkz0F4iRu7cz4=
Subject key identifier: 36:A1:03:4B:20:94:FB:83:12:E3:68:C5:67:3A:6F:01:3F:87:23:C2
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0197EB4705DF419F6E9B8AF1BC5F842BA8B2
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/NqEDSyCU-4MS42jFZzpvAT-HI8I.roa
Signing time: Tue 08 Jul 2025 18:23:09 +0000
ROA not before: Tue 08 Jul 2025 18:23:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 83.137.156.0/24 maxlen: 24
88.151.56.0/24 maxlen: 24
88.151.59.0/24 maxlen: 24
88.209.244.0/24 maxlen: 24
88.209.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 06:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:eb:47:05:df:41:9f:6e:9b:8a:f1:bc:5f:84:2b:a8:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jul 8 18:23:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=36a1034b2094fb8312e368c5673a6f013f8723c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4c:7a:d2:9c:c1:71:32:ff:d3:17:d5:42:60:
ac:47:ca:7f:a9:7d:c3:84:f5:64:08:e5:1c:c6:56:
6b:7f:4c:c8:07:e2:23:a0:d0:83:31:6d:b6:62:65:
f8:18:7a:b2:ce:fc:26:21:28:ed:08:db:f1:64:2a:
ab:ff:b2:7c:35:db:ad:4f:5e:a7:86:df:3d:7e:6e:
36:1d:9a:8d:e0:42:38:79:02:79:1c:42:65:28:88:
f9:a1:11:80:ae:e7:83:3d:8f:da:cf:ef:38:17:81:
2f:11:47:91:3c:ba:99:38:f0:24:18:76:ed:3a:e5:
22:4e:e4:56:b9:66:e0:1f:78:57:d6:3f:52:ea:a9:
b3:52:66:70:fd:7c:aa:e9:22:1f:bf:e9:f5:1d:0e:
de:9a:cb:4b:7d:2f:45:09:94:be:13:af:7c:d6:7c:
3f:ac:32:e7:57:b2:be:ed:38:ed:a1:58:c8:03:3a:
8a:10:07:f0:06:da:96:0a:fa:1e:31:69:12:e0:97:
31:1c:2f:f9:14:33:04:ac:c7:c1:0d:50:ba:3d:c1:
c6:3f:83:fc:02:85:9f:43:17:4f:97:33:12:0b:67:
3f:35:89:96:95:df:9f:8a:6d:d4:b9:d1:91:f4:4c:
e6:27:8d:36:77:f3:ee:b0:20:0d:6f:4b:55:54:2b:
ea:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A1:03:4B:20:94:FB:83:12:E3:68:C5:67:3A:6F:01:3F:87:23:C2
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/NqEDSyCU-4MS42jFZzpvAT-HI8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.156.0/24
88.151.56.0/24
88.151.59.0/24
88.209.244.0/24
88.209.246.0/24
Signature Algorithm: sha256WithRSAEncryption
09:91:e3:22:cc:e4:80:35:f5:b1:96:78:78:82:4e:f1:af:1f:
ab:c6:67:69:1b:75:7f:13:f9:ab:6c:d8:cb:3b:a7:9b:ec:65:
a6:66:8b:9d:5c:af:af:3e:3f:9e:1b:d0:7d:56:80:fd:10:e1:
0a:0b:e1:b1:5c:7c:8e:ac:2b:91:c6:7d:15:87:52:ff:d0:75:
97:53:ac:04:c9:2f:1a:d1:f3:a1:f9:0c:c2:90:a3:23:df:8a:
67:95:15:72:e8:2f:33:ec:b4:57:e0:05:af:e3:9a:f2:58:63:
c0:aa:f7:11:d1:ae:2f:73:09:4d:88:72:16:91:e4:dc:7f:3c:
bc:db:a7:d3:56:8f:9d:8f:5d:c3:a2:1a:1e:ca:52:ec:6d:3d:
1f:fd:7b:fe:60:9d:81:4b:90:41:68:98:2a:98:fd:68:e1:b4:
d9:06:d0:93:43:3f:5e:e1:80:29:4d:42:7c:49:70:cc:04:bb:
f8:e0:a5:4a:3d:3b:93:70:f7:0d:85:81:e7:39:45:66:48:89:
07:f6:a2:4d:2f:70:fd:87:fc:60:ac:42:91:be:a9:47:7f:1a:
99:03:cb:e5:a9:f6:ec:36:ef:57:bd:84:14:e8:42:af:c5:b9:
d5:af:a1:5c:18:65:03:d6:1d:03:45:42:ac:26:a0:f0:86:ef:
4f:3c:ae:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:09:57 2025 by rpki-client