Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/NUYU17wR7qkPf4O2VRbGdLlfaPo.roa
File: NUYU17wR7qkPf4O2VRbGdLlfaPo.roa (raw, json)
Hash identifier: InBy6bIW645ml+OuyLEyPiUwejjbHca+Cq+CsxVpxaE=
Subject key identifier: 35:46:14:D7:BC:11:EE:A9:0F:7F:83:B6:55:16:C6:74:B9:5F:68:FA
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0199149D1E74B42A56A2069BD4D0068C44DA
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/NUYU17wR7qkPf4O2VRbGdLlfaPo.roa
Signing time: Thu 04 Sep 2025 12:04:25 +0000
ROA not before: Thu 04 Sep 2025 12:04:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201178
IP address blocks: 45.84.220.0/24 maxlen: 24
45.84.221.0/24 maxlen: 24
91.92.70.0/24 maxlen: 24
93.123.37.0/24 maxlen: 24
93.123.64.0/24 maxlen: 24
193.148.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:14:9d:1e:74:b4:2a:56:a2:06:9b:d4:d0:06:8c:44:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 4 12:04:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=354614d7bc11eea90f7f83b65516c674b95f68fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e0:3d:88:a4:cf:7c:d3:d1:57:82:ff:3f:7e:
d8:71:91:68:27:53:da:80:51:35:59:26:d6:05:31:
a8:6d:27:bc:ac:68:49:30:a2:fe:1f:a5:1c:fa:9b:
63:6b:6c:9c:5f:66:3d:0e:5f:10:b9:89:cc:e6:12:
32:08:b5:40:4b:7a:f3:99:04:60:9b:de:84:82:70:
f2:9e:74:10:fd:2f:6b:ec:b3:22:2c:7b:df:15:4a:
5f:68:a5:00:9a:c5:84:16:f0:73:c2:4b:0a:ca:f9:
19:c0:ce:87:ae:60:9c:19:ed:1f:bd:43:a3:fb:83:
26:28:42:da:b7:9a:0f:5e:bb:bb:4e:2f:71:1c:96:
21:4e:d9:8e:ce:0d:ed:a3:30:ed:5b:a4:f3:02:23:
63:71:95:7b:af:ea:6d:0b:c2:f1:cc:db:b9:e6:c3:
9b:e3:02:a9:8b:ec:e7:23:ef:fd:37:51:c1:de:2a:
7e:15:06:ad:0e:20:1d:57:d9:16:21:ab:0e:5d:0e:
92:22:3a:ea:bd:42:af:d1:1f:79:87:3b:fe:d2:8f:
bb:c1:a9:1c:a1:5f:33:6b:9e:6e:42:87:a0:50:b6:
c2:5d:24:d7:7a:97:43:88:76:47:1a:99:52:c6:f6:
06:94:12:58:92:4a:04:9d:21:b6:6e:92:ec:17:ad:
57:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:46:14:D7:BC:11:EE:A9:0F:7F:83:B6:55:16:C6:74:B9:5F:68:FA
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/NUYU17wR7qkPf4O2VRbGdLlfaPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.220.0/23
91.92.70.0/24
93.123.37.0/24
93.123.64.0/24
193.148.252.0/24
Signature Algorithm: sha256WithRSAEncryption
38:76:11:40:b3:10:52:56:c9:35:d9:e9:2a:48:94:33:e5:de:
1e:15:99:1c:44:40:13:fe:2e:3d:2e:d8:e4:c1:d7:8f:14:55:
4e:60:79:e1:46:1d:bb:89:9b:b2:cd:37:15:ad:79:8a:f5:2b:
1d:64:b5:6b:c2:5b:1c:20:33:20:70:b4:7b:bb:70:28:af:9a:
eb:37:f9:4c:86:08:3f:08:9b:84:4e:39:61:4a:f0:46:5e:32:
24:3b:88:a7:53:e8:38:e7:d8:63:b0:bf:3a:50:24:0e:38:39:
d0:f7:df:c5:f7:64:4e:77:fa:f8:20:3b:53:b3:31:4d:c4:37:
6c:13:bf:7d:6e:78:43:a8:f1:8f:74:b3:ab:cf:17:26:aa:fe:
12:f4:c2:f2:7f:4f:89:61:bb:95:12:a8:e0:3f:54:ab:22:12:
59:37:b8:fd:99:cc:1b:2f:23:23:34:ea:05:11:0f:3a:a3:94:
c0:77:6b:da:3d:77:9f:94:f2:d9:57:84:f8:0f:a4:f5:aa:af:
d6:2a:f3:22:a5:f1:5c:67:28:ff:bb:bc:88:3f:b3:50:83:1f:
f8:07:a7:9d:f2:e1:b9:83:4f:52:d3:cf:a7:7e:51:d3:c9:76:
0c:52:2c:11:d4:b3:a5:89:9e:2c:64:73:68:2b:46:3b:01:9a:
65:d7:b8:6b
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZkUnR50tCpWogab1NAGjETaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwOTA0MTIwNDI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTQ2MTRkN2JjMTFlZWE5MGY3ZjgzYjY1NTE2YzY3NGI5NWY2OGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+A9iKTPfNPRV4L/P37YcZFoJ1Pa
gFE1WSbWBTGobSe8rGhJMKL+H6Uc+ptja2ycX2Y9Dl8QuYnM5hIyCLVAS3rzmQRg
m96EgnDynnQQ/S9r7LMiLHvfFUpfaKUAmsWEFvBzwksKyvkZwM6HrmCcGe0fvUOj
+4MmKELat5oPXru7Ti9xHJYhTtmOzg3tozDtW6TzAiNjcZV7r+ptC8LxzNu55sOb
4wKpi+znI+/9N1HB3ip+FQatDiAdV9kWIasOXQ6SIjrqvUKv0R95hzv+0o+7wakc
oV8za55uQoegULbCXSTXepdDiHZHGplSxvYGlBJYkkoEnSG2bpLsF61XswIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFDVGFNe8Ee6pD3+DtlUWxnS5X2j6MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvTlVZVTE3d1I3cWtQZjRPMlZSYkdkTGxmYVBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBLVTcAwQA
W1xGAwQAXXslAwQAXXtAAwQAwZT8MA0GCSqGSIb3DQEBCwUAA4IBAQA4dhFAsxBS
Vsk12ekqSJQz5d4eFZkcREAT/i49LtjkwdePFFVOYHnhRh27iZuyzTcVrXmK9Ssd
ZLVrwlscIDMgcLR7u3Aor5rrN/lMhgg/CJuETjlhSvBGXjIkO4inU+g459hjsL86
UCQOODnQ99/F92ROd/r4IDtTszFNxDdsE799bnhDqPGPdLOrzxcmqv4S9MLyf0+J
YbuVEqjgP1SrIhJZN7j9mcwbLyMjNOoFEQ86o5TAd2vaPXeflPLZV4T4D6T1qq/W
KvMipfFcZyj/u7yIP7NQgx/4B6ed8uG5g09S08+nflHTyXYMUiwR1LOliZ4sZHNo
K0Y7AZpl17hr
-----END CERTIFICATE-----
Generated at Wed Sep 10 00:24:42 2025 by rpki-client