Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/nVAfrOdDzx8pv49EiXLUGwJ5LQI.roa
File: nVAfrOdDzx8pv49EiXLUGwJ5LQI.roa (raw, json)
Hash identifier: AMH9fSklSlnHiDus6wDeBiFrtEGgvAQAd6DhTgYvYCs=
Subject key identifier: 9D:50:1F:AC:E7:43:CF:1F:29:BF:8F:44:89:72:D4:1B:02:79:2D:02
Certificate issuer: /CN=544a82aa5e2eb71719b7f9f049a307b12454497e
Certificate serial: 019A0BDBC357EF0AFCBC9C1B519EFFD87789
Authority key identifier: 54:4A:82:AA:5E:2E:B7:17:19:B7:F9:F0:49:A3:07:B1:24:54:49:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VEqCql4utxcZt_nwSaMHsSRUSX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/nVAfrOdDzx8pv49EiXLUGwJ5LQI.roa
Signing time: Wed 22 Oct 2025 12:19:03 +0000
ROA not before: Wed 22 Oct 2025 12:19:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211381
IP address blocks: 188.137.176.0/24 maxlen: 24
188.137.177.0/24 maxlen: 24
188.137.179.0/24 maxlen: 24
188.137.180.0/24 maxlen: 24
188.137.181.0/24 maxlen: 24
188.137.182.0/24 maxlen: 24
188.137.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VEqCql4utxcZt_nwSaMHsSRUSX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 05:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:db:c3:57:ef:0a:fc:bc:9c:1b:51:9e:ff:d8:77:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=544a82aa5e2eb71719b7f9f049a307b12454497e
Validity
Not Before: Oct 22 12:19:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d501face743cf1f29bf8f448972d41b02792d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:de:69:7f:cb:46:6e:26:70:68:fb:aa:7e:77:
73:27:c4:80:0d:b4:06:d7:07:b6:74:70:a9:65:a5:
a4:fa:f5:86:b9:57:0f:a7:ad:b9:0c:12:0b:46:bd:
04:28:19:c9:ce:01:e3:08:84:06:68:d3:f3:64:20:
05:30:5c:62:32:47:01:ac:7b:07:a6:d2:19:c2:8d:
92:5f:b2:cf:4a:c7:50:e5:74:ac:35:9c:7f:16:7a:
dd:68:e4:f3:17:82:81:e0:e1:73:80:e9:ea:0a:d9:
b7:19:c2:a4:95:5b:0e:fe:de:94:df:0c:6c:e1:96:
0e:82:24:95:ae:6a:9b:d9:38:cd:bf:21:85:8c:3b:
eb:e8:31:d1:e9:f8:85:f9:1f:30:6b:65:92:0e:8d:
40:7b:bd:6f:90:4a:20:04:c9:08:4e:01:cd:9b:06:
0b:24:77:96:b6:d0:99:2e:47:4e:8e:b8:07:15:ed:
3a:28:a1:1c:df:e9:d7:6e:c6:1a:3a:c4:5c:77:63:
08:85:a5:d1:ea:e9:ad:66:fe:b4:e9:e1:af:54:28:
f4:08:2c:86:51:13:68:4c:3a:d2:8e:84:5b:f5:f2:
06:45:95:b3:df:29:50:4b:93:a2:b3:5a:64:49:36:
ba:a3:22:9e:73:cb:3b:a2:c3:fc:ed:5d:c3:1f:44:
4a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:50:1F:AC:E7:43:CF:1F:29:BF:8F:44:89:72:D4:1B:02:79:2D:02
X509v3 Authority Key Identifier:
keyid:54:4A:82:AA:5E:2E:B7:17:19:B7:F9:F0:49:A3:07:B1:24:54:49:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEqCql4utxcZt_nwSaMHsSRUSX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/nVAfrOdDzx8pv49EiXLUGwJ5LQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.137.176.0/23
188.137.179.0-188.137.183.255
Signature Algorithm: sha256WithRSAEncryption
4a:82:51:08:ca:4b:c3:70:24:44:1f:87:e6:5e:42:a1:91:6d:
6a:e4:59:e2:77:79:31:c4:a3:4f:4c:41:9e:4c:57:19:14:06:
27:13:95:e6:e7:10:cd:fe:16:2a:dd:f8:39:7e:b3:a5:32:39:
3f:af:02:ce:3e:ed:db:f9:8d:89:67:00:a3:4b:a2:b9:40:a8:
af:59:99:dc:b2:83:65:7a:30:98:12:3e:cb:a5:ba:d9:b0:d3:
86:bb:a7:9b:88:40:4c:9d:fe:9c:f6:8c:62:43:5f:5d:6e:65:
af:0f:5e:7d:c0:a0:06:73:c9:7f:76:e8:e5:d8:91:79:ac:f7:
1b:00:2a:04:f1:6c:a7:61:cb:99:7f:56:50:3d:aa:4a:e1:ba:
3b:73:e2:2e:45:e1:79:ba:06:2a:a5:30:44:c1:a8:93:5e:61:
65:0c:53:b8:1b:b9:2b:5a:8f:76:44:1f:b9:be:3c:e6:ca:7b:
b8:60:49:0e:88:a3:c0:53:4f:94:6a:c2:1d:b1:9f:50:9b:40:
7c:ee:66:88:ee:66:44:8d:5a:77:2e:ad:03:b4:a5:ec:6b:1b:
9d:bb:df:ba:b2:c6:c3:d5:fc:73:ed:3f:3d:d3:8c:57:01:4a:
eb:cc:4b:80:b4:76:b8:26:6f:4b:f5:96:7e:17:30:5b:52:0c:
b1:4e:be:04
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZoL28NX7wr8vJwbUZ7/2HeJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NGE4MmFhNWUyZWI3MTcxOWI3ZjlmMDQ5YTMwN2IxMjQ1
NDQ5N2UwHhcNMjUxMDIyMTIxOTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDUwMWZhY2U3NDNjZjFmMjliZjhmNDQ4OTcyZDQxYjAyNzkyZDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAot5pf8tGbiZwaPuqfndzJ8SADbQG
1we2dHCpZaWk+vWGuVcPp625DBILRr0EKBnJzgHjCIQGaNPzZCAFMFxiMkcBrHsH
ptIZwo2SX7LPSsdQ5XSsNZx/FnrdaOTzF4KB4OFzgOnqCtm3GcKklVsO/t6U3wxs
4ZYOgiSVrmqb2TjNvyGFjDvr6DHR6fiF+R8wa2WSDo1Ae71vkEogBMkITgHNmwYL
JHeWttCZLkdOjrgHFe06KKEc3+nXbsYaOsRcd2MIhaXR6umtZv606eGvVCj0CCyG
URNoTDrSjoRb9fIGRZWz3ylQS5Ois1pkSTa6oyKec8s7osP87V3DH0RKbQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFJ1QH6znQ88fKb+PRIly1BsCeS0CMB8GA1UdIwQY
MBaAFFRKgqpeLrcXGbf58EmjB7EkVEl+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkVxQ3FsNHV0eGNadF9ud1NhTUhzU1JVU1g0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9jNTAxOGMtZmRjNi00MTRiLWJlZWYt
MDJkZTAxMjQyMjhlLzEvblZBZnJPZER6eDhwdjQ5RWlYTFVHd0o1TFFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC9jNTAxOGMtZmRjNi00MTRiLWJlZWYtMDJkZTAxMjQyMjhl
LzEvVkVxQ3FsNHV0eGNadF9ud1NhTUhzU1JVU1g0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBvImwMAwD
BAC8ibMDBAO8ibAwDQYJKoZIhvcNAQELBQADggEBAEqCUQjKS8NwJEQfh+ZeQqGR
bWrkWeJ3eTHEo09MQZ5MVxkUBicTlebnEM3+Fird+Dl+s6UyOT+vAs4+7dv5jYln
AKNLorlAqK9Zmdyyg2V6MJgSPsulutmw04a7p5uIQEyd/pz2jGJDX11uZa8PXn3A
oAZzyX926OXYkXms9xsAKgTxbKdhy5l/VlA9qkrhujtz4i5F4Xm6BiqlMETBqJNe
YWUMU7gbuStaj3ZEH7m+PObKe7hgSQ6Io8BTT5Rqwh2xn1CbQHzuZojuZkSNWncu
rQO0pexrG52737qyxsPV/HPtPz3TjFcBSuvMS4C0drgmb0v1ln4XMFtSDLFOvgQ=
-----END CERTIFICATE-----
Generated at Sun Oct 26 13:58:19 2025 by rpki-client