Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/nwqJacIADazQWceEk0i_DcrEc18.roa
File: nwqJacIADazQWceEk0i_DcrEc18.roa (raw, json)
Hash identifier: cp3YvvxeAAf8S+OmYqsXjGDrz235C7l7AfhzBUVjgXU=
Subject key identifier: 9F:0A:89:69:C2:00:0D:AC:D0:59:C7:84:93:48:BF:0D:CA:C4:73:5F
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 01980C6FC71F6FA59334EE2ED8F5ECF28A6A
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/nwqJacIADazQWceEk0i_DcrEc18.roa
Signing time: Tue 15 Jul 2025 04:55:08 +0000
ROA not before: Tue 15 Jul 2025 04:55:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 85.115.208.0/23 maxlen: 24
85.115.210.0/23 maxlen: 24
213.145.66.0/24 maxlen: 24
213.145.68.0/23 maxlen: 23
213.145.70.0/23 maxlen: 24
213.145.71.0/24 maxlen: 24
213.145.72.0/21 maxlen: 24
213.145.82.0/23 maxlen: 24
213.145.84.0/23 maxlen: 23
213.145.86.0/23 maxlen: 23
213.145.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0c:6f:c7:1f:6f:a5:93:34:ee:2e:d8:f5:ec:f2:8a:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Jul 15 04:55:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f0a8969c2000dacd059c7849348bf0dcac4735f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7d:a2:03:ad:2f:8a:29:1b:2d:71:4c:c4:03:
6d:37:17:db:b9:32:ea:95:ec:da:f0:e6:1d:2f:26:
4f:1d:91:c7:59:6d:4c:f8:1f:22:80:f1:1e:3c:4d:
7a:78:51:b1:a8:65:ea:0c:8b:9f:88:12:e3:b1:46:
7c:6a:64:7c:bf:d5:58:8e:5d:3f:8c:91:b3:af:c6:
3e:48:1f:42:21:85:82:d5:3e:64:75:26:a2:a1:4b:
22:84:c7:51:08:cd:02:75:6b:8e:b7:f6:24:c4:c3:
ac:87:c8:b1:1a:8a:1e:b1:93:02:a3:50:ae:da:a2:
dd:94:dd:89:a9:7f:41:38:bb:da:cf:a4:83:9a:c4:
0c:cd:d6:79:d6:42:4d:1c:f5:05:0e:47:3c:48:fc:
2f:a6:b8:07:d7:5a:74:eb:57:29:d8:47:27:ea:ea:
ef:a0:73:9e:3a:1d:f6:63:26:7a:b7:88:30:7a:b1:
ea:db:1a:48:36:ab:15:a4:66:19:a4:23:d3:bd:f0:
34:e2:d1:75:9f:9c:20:c2:b2:a2:16:3d:27:13:21:
f5:cc:14:31:af:fa:6c:b7:f6:ad:bb:05:3a:3d:6b:
b5:0e:07:1c:01:0f:f8:44:f3:b7:44:65:e0:a3:73:
7f:5a:3f:2b:52:ac:50:d3:4a:63:1e:44:4d:5c:92:
11:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:0A:89:69:C2:00:0D:AC:D0:59:C7:84:93:48:BF:0D:CA:C4:73:5F
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/nwqJacIADazQWceEk0i_DcrEc18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.208.0/22
213.145.66.0/24
213.145.68.0-213.145.79.255
213.145.82.0-213.145.89.255
Signature Algorithm: sha256WithRSAEncryption
ea:14:eb:b5:ad:83:ad:9e:e4:05:f0:0f:79:e3:1f:55:94:23:
42:28:ec:74:a6:3e:8f:74:bc:2c:9b:7b:91:2f:d4:73:61:c7:
ba:2e:cd:13:ea:d9:f5:4b:aa:29:52:4e:88:fe:9c:e0:31:fd:
59:de:a3:7e:0d:15:c8:44:d4:c8:78:06:55:a8:f3:45:6e:af:
7e:78:16:0f:d0:62:0c:85:6e:01:b1:18:00:22:89:48:01:83:
1b:a5:3f:cc:2b:4a:46:13:c9:ae:b0:31:63:e6:73:6a:66:09:
1d:e9:6c:08:88:6c:04:f9:3b:ac:79:a5:a2:e6:a5:51:9d:3c:
77:85:76:05:5f:8f:4c:95:df:ed:96:b6:f1:2e:6a:d4:da:19:
72:e7:54:63:45:2f:41:2d:10:11:7e:02:3c:3c:4c:d6:ca:bc:
20:bc:28:12:49:86:75:66:ef:bc:6b:da:ad:85:b4:d0:a4:8f:
bc:5e:bc:39:98:61:31:81:f4:44:27:03:68:b0:7d:fb:b1:cb:
0e:c3:df:ee:5b:87:05:27:80:f4:7e:34:e8:5e:85:04:f8:f3:
0f:f0:77:e5:66:83:34:2e:ff:00:ca:28:ad:42:f7:c7:6d:be:
05:11:ed:64:4a:69:e4:93:5d:39:2b:4b:77:1c:48:b8:05:11:
48:96:09:b0
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAZgMb8cfb6WTNO4u2PXs8opqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYTE2YWIwNjAyMDA2Nzc0MGE0YzFmYjQ3YTkxMjYyMmYx
ZDA3MjIwHhcNMjUwNzE1MDQ1NTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjBhODk2OWMyMDAwZGFjZDA1OWM3ODQ5MzQ4YmYwZGNhYzQ3MzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt32iA60viikbLXFMxANtNxfbuTLq
leza8OYdLyZPHZHHWW1M+B8igPEePE16eFGxqGXqDIufiBLjsUZ8amR8v9VYjl0/
jJGzr8Y+SB9CIYWC1T5kdSaioUsihMdRCM0CdWuOt/YkxMOsh8ixGooesZMCo1Cu
2qLdlN2JqX9BOLvaz6SDmsQMzdZ51kJNHPUFDkc8SPwvprgH11p061cp2Ecn6urv
oHOeOh32YyZ6t4gwerHq2xpINqsVpGYZpCPTvfA04tF1n5wgwrKiFj0nEyH1zBQx
r/pst/atuwU6PWu1DgccAQ/4RPO3RGXgo3N/Wj8rUqxQ00pjHkRNXJIRpwIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFJ8KiWnCAA2s0FnHhJNIvw3KxHNfMB8GA1UdIwQY
MBaAFC+harBgIAZ3QKTB+0epEmIvHQciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUt
ZDI0MmI2ZjNhOGExLzEvbndxSmFjSUFEYXpRV2NlRWswaV9EY3JFYzE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUtZDI0MmI2ZjNhOGEx
LzEvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwQCVXPQAwQA
1ZFCMAwDBALVkUQDBATVkUAwDAMEAdWRUgMEAdWRWDANBgkqhkiG9w0BAQsFAAOC
AQEA6hTrta2DrZ7kBfAPeeMfVZQjQijsdKY+j3S8LJt7kS/Uc2HHui7NE+rZ9Uuq
KVJOiP6c4DH9Wd6jfg0VyETUyHgGVajzRW6vfngWD9BiDIVuAbEYACKJSAGDG6U/
zCtKRhPJrrAxY+ZzamYJHelsCIhsBPk7rHmloualUZ08d4V2BV+PTJXf7Za28S5q
1NoZcudUY0UvQS0QEX4CPDxM1sq8ILwoEkmGdWbvvGvarYW00KSPvF68OZhhMYH0
RCcDaLB9+7HLDsPf7luHBSeA9H406F6FBPjzD/B35WaDNC7/AMoorUL3x22+BRHt
ZEpp5JNdOStLdxxIuAURSJYJsA==
-----END CERTIFICATE-----
Generated at Thu Jul 24 11:55:02 2025 by rpki-client