Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/nIsV8WXoFlCYl9OHe2W6fEzLftg.roa
File: nIsV8WXoFlCYl9OHe2W6fEzLftg.roa (raw, json)
Hash identifier: Om6CGjgErroiQEvecl29BRYdrs0sFDR9vdgbmT4yZwE=
Subject key identifier: 9C:8B:15:F1:65:E8:16:50:98:97:D3:87:7B:65:BA:7C:4C:CB:7E:D8
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 019904F6075DD0A49A05568D8EDC4771F317
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/nIsV8WXoFlCYl9OHe2W6fEzLftg.roa
Signing time: Mon 01 Sep 2025 11:07:36 +0000
ROA not before: Mon 01 Sep 2025 11:07:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20910
IP address blocks: 37.148.168.0/21 maxlen: 32
62.84.0.0/20 maxlen: 32
62.205.192.0/18 maxlen: 32
77.38.128.0/17 maxlen: 32
85.254.120.0/23 maxlen: 23
87.226.0.0/17 maxlen: 32
89.18.192.0/19 maxlen: 32
89.201.0.0/17 maxlen: 32
91.142.0.0/20 maxlen: 32
91.188.32.0/19 maxlen: 32
93.177.192.0/18 maxlen: 32
94.30.128.0/17 maxlen: 32
109.110.0.0/19 maxlen: 32
136.169.0.0/17 maxlen: 32
185.144.184.0/22 maxlen: 32
188.112.128.0/18 maxlen: 32
195.62.128.0/19 maxlen: 32
195.244.128.0/20 maxlen: 32
213.180.96.0/19 maxlen: 32
217.198.224.0/20 maxlen: 32
217.199.96.0/19 maxlen: 32
2a00:9000::/29 maxlen: 32
2a00:f4a0::/29 maxlen: 32
2a03:6740::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 23:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:04:f6:07:5d:d0:a4:9a:05:56:8d:8e:dc:47:71:f3:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Sep 1 11:07:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c8b15f165e816509897d3877b65ba7c4ccb7ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7b:44:36:3c:24:78:0e:fb:e8:c7:b3:a0:45:
ae:5c:3b:ef:32:84:2a:ad:93:c2:fc:57:c6:7f:06:
ec:e2:47:fe:be:5a:ce:cd:9f:3b:c0:d9:b7:78:4a:
3c:70:80:02:87:48:30:49:8d:39:fa:2a:35:f8:f6:
92:5b:65:82:f9:84:ad:f8:9f:4a:2c:72:b5:02:52:
fd:2c:df:63:2f:32:25:c1:84:69:3c:9c:d3:c4:7e:
8f:7c:8f:ef:ee:80:c4:fc:ec:36:55:b4:4f:30:ab:
f5:68:5f:ec:da:b3:80:77:78:31:79:c5:d0:28:d0:
48:d3:4a:65:ca:df:ec:6d:f2:10:c5:1c:a9:39:a7:
f0:86:f6:d8:34:3c:06:d4:91:06:20:32:94:8a:d5:
2a:67:7f:99:a5:e0:02:5d:12:1b:4f:af:8a:f0:49:
6f:78:b9:cd:06:40:39:8c:50:46:07:17:d9:a6:e1:
d8:ae:37:1c:6b:42:b1:64:1e:78:26:8c:a9:68:ac:
fb:7f:89:25:91:a6:ae:23:2a:11:b1:2e:76:a0:e5:
04:0e:52:31:fa:b7:3f:79:bc:bd:b0:51:e2:ff:75:
45:5e:35:db:73:67:33:7d:80:42:5c:87:6f:c3:fa:
e9:fc:70:aa:77:16:a0:f6:4b:b8:bf:dc:4f:84:9f:
65:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:8B:15:F1:65:E8:16:50:98:97:D3:87:7B:65:BA:7C:4C:CB:7E:D8
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/nIsV8WXoFlCYl9OHe2W6fEzLftg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.168.0/21
62.84.0.0/20
62.205.192.0/18
77.38.128.0/17
85.254.120.0/23
87.226.0.0/17
89.18.192.0/19
89.201.0.0/17
91.142.0.0/20
91.188.32.0/19
93.177.192.0/18
94.30.128.0/17
109.110.0.0/19
136.169.0.0/17
185.144.184.0/22
188.112.128.0/18
195.62.128.0/19
195.244.128.0/20
213.180.96.0/19
217.198.224.0/20
217.199.96.0/19
IPv6:
2a00:9000::/29
2a00:f4a0::/29
2a03:6740::/29
Signature Algorithm: sha256WithRSAEncryption
6c:6a:f4:ea:9a:be:97:59:42:52:35:2f:7d:5d:97:a5:08:f8:
75:66:14:75:10:41:40:69:a0:5e:03:1b:88:ed:fc:08:af:2a:
2f:7a:75:44:d4:ba:69:44:21:47:9a:19:fe:5c:5a:15:aa:89:
ae:3d:a4:24:46:79:88:b9:ff:12:1e:13:ee:46:72:48:12:79:
7b:96:47:8a:70:6c:93:eb:f9:80:a7:8b:d5:31:6a:29:9c:89:
f7:7a:ac:11:10:5b:d8:f8:f3:61:2e:85:fe:9f:8e:89:73:2a:
a8:bf:21:7a:a6:40:7a:dc:32:f3:a1:f0:91:f3:25:4d:7a:19:
5c:31:dd:23:cc:1f:f9:94:9f:76:b8:4e:ec:fe:0c:84:61:20:
fd:a0:45:a6:97:97:8d:76:41:c3:b6:ec:12:9c:49:50:98:a9:
6b:b8:f3:58:44:67:8b:63:e7:02:b1:7c:34:5f:f1:16:e4:aa:
e5:e1:78:7e:cf:05:4f:89:a3:68:31:74:c5:7f:8e:9a:25:54:
07:7e:29:d4:0f:ef:d5:2e:ba:2d:07:25:3c:ff:ff:5e:5c:bd:
0e:b8:25:dc:16:93:31:ff:50:0d:b3:81:8d:06:e2:f8:97:a9:
4f:e2:13:6e:be:a8:ed:b9:dc:7e:83:30:7a:01:54:23:71:b8:
de:7f:de:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 06:59:50 2025 by rpki-client