Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/nzDasInWsEOC_GDoCjtyUJz3KiY.roa
File: nzDasInWsEOC_GDoCjtyUJz3KiY.roa (raw, json)
Hash identifier: +Zq7yOuM1mxAHdfTxtbKmNJUaqryoSUFrdnuX3MnvE0=
Subject key identifier: 9F:30:DA:B0:89:D6:B0:43:82:FC:60:E8:0A:3B:72:50:9C:F7:2A:26
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01A10D32D1639ACAD27133DCBF2264C0C474
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/nzDasInWsEOC_GDoCjtyUJz3KiY.roa
Signing time: Mon 05 Oct 2026 17:53:16 +0000
ROA not before: Mon 05 Oct 2026 17:53:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8708
IP address blocks: 80.96.12.0/24 maxlen: 24
80.96.43.0/24 maxlen: 24
80.96.47.0/24 maxlen: 24
80.96.51.0/24 maxlen: 24
80.96.67.0/24 maxlen: 24
80.96.69.0/24 maxlen: 24
80.96.72.0/24 maxlen: 24
80.96.79.0/24 maxlen: 24
80.96.166.0/24 maxlen: 24
80.96.219.0/24 maxlen: 24
80.97.22.0/23 maxlen: 24
80.97.147.0/24 maxlen: 24
80.97.148.0/24 maxlen: 24
81.180.27.0/24 maxlen: 24
81.181.24.0/23 maxlen: 24
81.181.30.0/24 maxlen: 24
81.181.112.0/24 maxlen: 24
81.181.128.0/24 maxlen: 24
81.181.147.0/24 maxlen: 24
81.181.167.0/24 maxlen: 24
81.181.246.0/24 maxlen: 24
85.120.20.0/24 maxlen: 24
85.120.23.0/24 maxlen: 24
85.121.12.0/23 maxlen: 24
193.226.16.0/24 maxlen: 24
193.226.116.0/24 maxlen: 24
193.226.125.0/24 maxlen: 24
193.226.127.0/24 maxlen: 24
193.230.158.0/24 maxlen: 24
193.230.171.0/24 maxlen: 24
193.230.229.0/24 maxlen: 24
193.231.75.0/24 maxlen: 24
193.231.108.0/24 maxlen: 24
193.231.184.0/24 maxlen: 24
193.231.194.0/24 maxlen: 24
193.231.233.0/24 maxlen: 24
193.231.236.0/24 maxlen: 24
193.231.238.0/24 maxlen: 24
193.231.252.0/24 maxlen: 24
194.102.98.0/24 maxlen: 24
194.102.132.0/23 maxlen: 24
194.102.134.0/24 maxlen: 24
194.102.229.0/24 maxlen: 24
194.153.224.0/24 maxlen: 24
194.153.227.0/24 maxlen: 24
194.153.228.0/23 maxlen: 24
217.156.14.0/24 maxlen: 24
217.156.41.0/24 maxlen: 24
217.156.78.0/23 maxlen: 24
217.156.92.0/24 maxlen: 24
217.156.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0d:32:d1:63:9a:ca:d2:71:33:dc:bf:22:64:c0:c4:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Oct 5 17:53:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f30dab089d6b04382fc60e80a3b72509cf72a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:63:e8:43:cb:41:27:a6:85:74:b6:22:53:ac:
9a:cf:db:1e:4a:69:a0:15:db:07:5a:cb:09:fc:86:
36:a7:d5:7d:58:5a:98:87:bd:7d:1d:36:c1:bb:f6:
2f:e5:5f:e0:5d:4f:ea:2c:4d:43:0a:88:53:cb:d1:
27:56:bb:68:1f:55:07:d7:89:d4:b4:b3:b5:9b:8d:
83:e5:ee:30:c5:3e:4c:e4:c7:de:e3:d4:11:f3:5e:
73:41:2c:3b:c5:63:b0:45:9f:5e:2f:cc:79:90:f0:
cb:41:fd:28:ee:31:b6:6d:e9:4d:8b:97:68:66:56:
74:0b:74:e7:37:5d:b5:23:7a:4d:e1:91:3a:0b:5a:
d0:5a:2d:a3:89:80:17:3a:a6:2c:ff:e0:71:d5:a9:
d7:21:e2:e5:7d:6e:97:21:5a:5d:19:df:ef:0f:b7:
c5:e8:9f:79:b2:16:9a:9b:45:7e:45:29:8b:b0:bb:
e7:d2:70:be:60:02:12:ec:ae:d3:28:6e:fa:2e:2f:
36:d3:23:cd:b6:e4:39:d2:c3:42:9f:5a:a4:78:e2:
37:81:cd:e8:32:e0:4e:9a:3e:70:f3:cb:9d:53:6f:
0a:22:f7:04:f9:66:63:80:16:0a:49:89:9d:47:d9:
5b:bb:44:9a:84:bd:b0:44:5e:b8:81:93:17:2f:b9:
86:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:30:DA:B0:89:D6:B0:43:82:FC:60:E8:0A:3B:72:50:9C:F7:2A:26
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/nzDasInWsEOC_GDoCjtyUJz3KiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.12.0/24
80.96.43.0/24
80.96.47.0/24
80.96.51.0/24
80.96.67.0/24
80.96.69.0/24
80.96.72.0/24
80.96.79.0/24
80.96.166.0/24
80.96.219.0/24
80.97.22.0/23
80.97.147.0-80.97.148.255
81.180.27.0/24
81.181.24.0/23
81.181.30.0/24
81.181.112.0/24
81.181.128.0/24
81.181.147.0/24
81.181.167.0/24
81.181.246.0/24
85.120.20.0/24
85.120.23.0/24
85.121.12.0/23
193.226.16.0/24
193.226.116.0/24
193.226.125.0/24
193.226.127.0/24
193.230.158.0/24
193.230.171.0/24
193.230.229.0/24
193.231.75.0/24
193.231.108.0/24
193.231.184.0/24
193.231.194.0/24
193.231.233.0/24
193.231.236.0/24
193.231.238.0/24
193.231.252.0/24
194.102.98.0/24
194.102.132.0-194.102.134.255
194.102.229.0/24
194.153.224.0/24
194.153.227.0-194.153.229.255
217.156.14.0/24
217.156.41.0/24
217.156.78.0/23
217.156.92.0/24
217.156.97.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:62:48:37:f7:61:12:54:12:38:ca:7f:09:fa:15:37:d1:24:
db:e4:8c:76:c6:0f:20:58:25:a0:59:99:7a:2f:fa:6f:2b:87:
7a:f1:d2:a2:98:cd:19:e5:91:61:24:ee:3b:a3:7a:d2:e8:d4:
18:5a:65:fa:02:4a:dc:12:ea:1d:47:fb:30:f2:75:dd:c2:61:
76:e9:34:29:33:29:49:ae:0f:e2:f9:7d:25:8c:56:bd:d7:91:
05:29:58:3b:14:f2:dd:23:f3:04:e2:91:8f:af:03:3f:a5:f1:
48:5f:3f:a0:02:36:de:df:af:08:98:e0:66:77:24:d2:2b:d1:
a1:fa:66:f1:06:e7:3e:19:4c:9c:48:b7:17:e0:6e:70:26:6b:
ff:5a:01:0d:72:99:73:ff:d1:87:fe:ef:c2:b2:a8:8e:a6:f8:
82:87:e2:5b:3e:e0:bb:ed:60:e5:79:17:63:f3:0d:56:50:90:
f7:fc:b2:bf:7f:6d:2e:2d:f8:18:8c:98:76:b7:49:85:92:aa:
b8:77:40:0c:02:ed:ab:ed:f4:5a:9b:7b:db:61:79:e1:89:4d:
e8:88:15:f5:d7:c5:3a:ea:95:7f:99:1b:c1:b8:aa:95:df:d7:
37:15:0c:c7:07:56:5f:bf:64:f0:e5:1c:8a:ca:51:9d:9b:51:
41:bc:e9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 06:03:36 2026 by rpki-client