Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/npd6gKJKim1KHOcjng1GmwEFA6I.roa
File: npd6gKJKim1KHOcjng1GmwEFA6I.roa (raw, json)
Hash identifier: KpUj9mG5FfwttSHfbtQ+ZC5OsG/BaXTGqzrV2frnyhg=
Subject key identifier: 9E:97:7A:80:A2:4A:8A:6D:4A:1C:E7:23:9E:0D:46:9B:01:05:03:A2
Certificate issuer: /CN=c28973affaa9936d39146aa136fbcb051b9af99f
Certificate serial: 01987EE0F60AE5CC8FE538493E9AFEA00A5F
Authority key identifier: C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/npd6gKJKim1KHOcjng1GmwEFA6I.roa
Signing time: Wed 06 Aug 2025 10:15:28 +0000
ROA not before: Wed 06 Aug 2025 10:15:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 88.81.160.0/22 maxlen: 22
88.81.164.0/22 maxlen: 22
88.81.188.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 07:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:e0:f6:0a:e5:cc:8f:e5:38:49:3e:9a:fe:a0:0a:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c28973affaa9936d39146aa136fbcb051b9af99f
Validity
Not Before: Aug 6 10:15:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e977a80a24a8a6d4a1ce7239e0d469b010503a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6d:6f:f0:54:ba:0e:19:15:01:60:2b:8d:ca:
19:49:f2:0e:d3:76:1e:5a:87:96:dc:f8:b9:cb:88:
aa:cb:62:f4:a0:e2:ec:15:e9:3d:6f:63:2f:27:5c:
b0:8e:93:5a:e2:46:80:b2:e0:5e:ab:83:cf:dc:aa:
59:a0:5e:c3:8b:50:15:be:56:7e:00:7f:1f:dc:67:
0c:a5:cb:b6:aa:9a:8c:af:6e:47:97:80:ed:34:1b:
3a:b6:48:6b:eb:af:4d:35:f1:53:b0:46:60:5b:d9:
6a:75:07:e5:98:6e:92:dd:ba:8f:32:cb:e8:1b:8b:
bc:43:38:98:cf:38:86:73:0b:af:d3:2a:98:b4:d1:
36:ed:4e:30:94:7e:32:ad:76:29:f9:4c:61:37:01:
51:e0:5c:10:b3:ba:f1:be:8b:ee:5c:6e:21:d7:3c:
fa:fd:a2:2f:a1:e6:7a:66:46:18:43:50:a3:6a:d1:
e1:2e:f7:1f:5e:af:0a:ac:64:e5:91:8e:c9:52:35:
ac:8e:e4:e6:60:4e:c9:4b:fb:32:7e:f6:84:e1:bb:
4c:57:b9:d9:db:72:87:bb:5b:04:3e:92:af:6d:b2:
a6:02:d7:87:82:3d:0a:24:aa:e2:05:37:6a:26:f3:
51:2a:b0:48:07:05:60:40:c9:d7:69:b0:ad:aa:8f:
2e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:97:7A:80:A2:4A:8A:6D:4A:1C:E7:23:9E:0D:46:9B:01:05:03:A2
X509v3 Authority Key Identifier:
keyid:C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/npd6gKJKim1KHOcjng1GmwEFA6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.81.160.0/21
88.81.188.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:88:ef:7d:19:d4:8b:00:8a:4f:84:8d:9f:ca:26:3a:39:2a:
0f:93:52:6c:c7:08:e7:d4:0f:ac:3b:95:f2:0f:00:39:db:1a:
7d:0c:28:8a:ec:e7:3f:b0:19:e7:de:6b:da:74:eb:09:d0:7a:
de:92:3f:45:18:78:40:4d:bc:11:5e:43:b9:45:5d:ba:3c:63:
33:83:b7:f4:64:3a:be:a9:60:48:f4:de:b3:1f:af:e9:8a:a3:
25:41:88:5a:0b:36:42:b7:f9:67:45:b6:37:35:90:ca:3a:6d:
5a:82:75:0c:60:5a:0d:71:f1:4d:77:51:b4:6e:53:fe:b6:1e:
5b:45:dc:0f:13:e8:88:26:18:bf:a9:33:0f:cc:0f:dc:c4:34:
4d:e8:b3:39:86:39:50:cf:22:c2:03:77:f4:f4:53:b6:4e:2f:
c6:27:b0:a8:18:1b:94:30:f2:6c:0a:de:30:41:8a:18:b2:6c:
4e:85:2d:de:c5:05:b5:37:88:54:31:8c:60:53:46:58:96:fe:
31:1b:e1:f6:c5:2d:cb:55:0c:24:80:05:94:61:73:83:62:64:
db:a5:cb:58:4b:57:eb:e4:53:4e:7a:d5:0a:2d:5a:01:02:82:
8a:86:a4:e7:ba:bb:d6:5a:86:fb:42:6e:eb:cc:8f:0a:a8:21:
8d:67:31:d4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZh+4PYK5cyP5ThJPpr+oApfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyODk3M2FmZmFhOTkzNmQzOTE0NmFhMTM2ZmJjYjA1MWI5
YWY5OWYwHhcNMjUwODA2MTAxNTI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTk3N2E4MGEyNGE4YTZkNGExY2U3MjM5ZTBkNDY5YjAxMDUwM2EyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA221v8FS6DhkVAWArjcoZSfIO03Ye
WoeW3Pi5y4iqy2L0oOLsFek9b2MvJ1ywjpNa4kaAsuBeq4PP3KpZoF7Di1AVvlZ+
AH8f3GcMpcu2qpqMr25Hl4DtNBs6tkhr669NNfFTsEZgW9lqdQflmG6S3bqPMsvo
G4u8QziYzziGcwuv0yqYtNE27U4wlH4yrXYp+UxhNwFR4FwQs7rxvovuXG4h1zz6
/aIvoeZ6ZkYYQ1CjatHhLvcfXq8KrGTlkY7JUjWsjuTmYE7JS/syfvaE4btMV7nZ
23KHu1sEPpKvbbKmAteHgj0KJKriBTdqJvNRKrBIBwVgQMnXabCtqo8uAwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJ6XeoCiSoptShznI54NRpsBBQOiMB8GA1UdIwQY
MBaAFMKJc6/6qZNtORRqoTb7ywUbmvmfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd29senJfcXBrMjA1RkdxaE52dkxCUnVhLVo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9hOTU0YmQtMTU3Zi00ZGJiLWJiYTQt
MzQ2M2I1NmUzNzJjLzEvbnBkNmdLSktpbTFLSE9jam5nMUdtd0VGQTZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9hOTU0YmQtMTU3Zi00ZGJiLWJiYTQtMzQ2M2I1NmUzNzJj
LzEvd29senJfcXBrMjA1RkdxaE52dkxCUnVhLVo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDWFGgAwQC
WFG8MA0GCSqGSIb3DQEBCwUAA4IBAQCriO99GdSLAIpPhI2fyiY6OSoPk1Jsxwjn
1A+sO5XyDwA52xp9DCiK7Oc/sBnn3mvadOsJ0Hrekj9FGHhATbwRXkO5RV26PGMz
g7f0ZDq+qWBI9N6zH6/piqMlQYhaCzZCt/lnRbY3NZDKOm1agnUMYFoNcfFNd1G0
blP+th5bRdwPE+iIJhi/qTMPzA/cxDRN6LM5hjlQzyLCA3f09FO2Ti/GJ7CoGBuU
MPJsCt4wQYoYsmxOhS3exQW1N4hUMYxgU0ZYlv4xG+H2xS3LVQwkgAWUYXODYmTb
pctYS1fr5FNOetUKLVoBAoKKhqTnurvWWob7Qm7rzI8KqCGNZzHU
-----END CERTIFICATE-----
Generated at Wed Aug 20 10:48:41 2025 by rpki-client