Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Nz3-Q-RxdSBD88DeGr810PxedL8.roa
File: Nz3-Q-RxdSBD88DeGr810PxedL8.roa (raw, json)
Hash identifier: uPZGJ9gwD1kRoY4QiGyirZQndG4HUf2vvZTk9DEBtFM=
Subject key identifier: 37:3D:FE:43:E4:71:75:20:43:F3:C0:DE:1A:BF:35:D0:FC:5E:74:BF
Certificate issuer: /CN=66df7742890173927935206a28efbf48123e787c
Certificate serial: 0196F76AD1853A71D01B1DF05511F021913A
Authority key identifier: 66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Nz3-Q-RxdSBD88DeGr810PxedL8.roa
Signing time: Thu 22 May 2025 09:54:54 +0000
ROA not before: Thu 22 May 2025 09:54:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202
IP address blocks: 5.39.176.0/21 maxlen: 24
5.159.208.0/21 maxlen: 24
5.181.72.0/22 maxlen: 24
31.192.96.0/21 maxlen: 24
45.8.100.0/22 maxlen: 24
45.132.108.0/22 maxlen: 24
45.137.44.0/22 maxlen: 24
80.74.240.0/21 maxlen: 24
80.74.248.0/21 maxlen: 24
80.87.16.0/20 maxlen: 24
83.150.252.0/22 maxlen: 24
85.95.96.0/19 maxlen: 24
87.236.128.0/21 maxlen: 24
88.151.152.0/21 maxlen: 24
89.38.120.0/21 maxlen: 24
91.143.64.0/20 maxlen: 24
92.42.120.0/21 maxlen: 24
93.115.176.0/20 maxlen: 24
94.142.168.0/21 maxlen: 24
95.129.64.0/21 maxlen: 24
176.58.0.0/21 maxlen: 24
185.52.144.0/22 maxlen: 24
185.79.184.0/22 maxlen: 24
185.90.0.0/22 maxlen: 24
185.94.204.0/22 maxlen: 24
185.99.76.0/22 maxlen: 24
185.145.88.0/22 maxlen: 24
185.178.216.0/22 maxlen: 24
185.182.200.0/23 maxlen: 24
185.204.212.0/22 maxlen: 24
185.229.4.0/22 maxlen: 24
185.246.132.0/22 maxlen: 24
185.247.200.0/22 maxlen: 24
185.248.252.0/24 maxlen: 24
185.248.253.0/24 maxlen: 24
185.248.254.0/24 maxlen: 24
185.248.255.0/24 maxlen: 24
188.94.16.0/21 maxlen: 24
193.24.3.0/24 maxlen: 24
193.24.6.0/24 maxlen: 24
193.24.13.0/24 maxlen: 24
193.24.31.0/24 maxlen: 24
195.26.32.0/19 maxlen: 24
195.88.8.0/23 maxlen: 24
212.11.68.0/22 maxlen: 24
212.11.72.0/22 maxlen: 24
217.145.128.0/20 maxlen: 24
2a00:f1c0::/32 maxlen: 32
2a0d:7680::/29 maxlen: 29
2a0e:a1c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 18:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f7:6a:d1:85:3a:71:d0:1b:1d:f0:55:11:f0:21:91:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66df7742890173927935206a28efbf48123e787c
Validity
Not Before: May 22 09:54:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=373dfe43e471752043f3c0de1abf35d0fc5e74bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:de:70:a4:e6:94:c9:ad:0e:4e:b0:19:c8:50:
f1:67:e0:ed:f4:fe:40:9f:06:43:05:9f:ea:21:f8:
2d:51:b7:17:ac:b0:d9:fa:bf:87:7e:8a:d8:b8:e0:
d9:95:0b:b0:a9:51:ce:2a:15:a4:82:3a:9a:36:be:
cc:37:7c:02:b6:a2:a4:af:59:82:70:d3:5d:ac:5a:
6f:76:e4:ea:8a:3a:82:64:25:da:5d:7d:d3:14:c5:
f6:c2:d0:6e:02:68:fd:41:04:aa:00:a2:b9:c0:ec:
ee:fd:cb:35:62:4f:24:96:f9:f2:0f:98:1d:6b:35:
1b:b0:d6:d6:b8:bc:07:aa:4d:a0:08:7d:c1:80:4c:
af:f6:13:ea:2c:5b:2c:f0:8b:2d:81:db:d8:90:a1:
94:43:a8:72:d2:a1:b7:68:cc:fc:65:e6:cb:a4:e3:
c8:4c:13:51:18:cb:a6:8a:c1:b8:09:15:1e:8c:9e:
0a:86:47:b4:90:45:d6:16:89:1f:c3:61:70:6b:da:
34:a0:6c:60:53:a9:ae:3b:ac:cb:fc:5d:b8:8f:95:
81:db:03:d0:fc:23:59:3d:97:0e:ec:44:5f:df:23:
73:62:c5:60:b8:b2:24:87:66:c9:4e:c5:f8:82:e2:
05:4b:12:cd:0c:7d:d0:97:00:9d:fc:1d:fd:9b:59:
c1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:3D:FE:43:E4:71:75:20:43:F3:C0:DE:1A:BF:35:D0:FC:5E:74:BF
X509v3 Authority Key Identifier:
keyid:66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Nz3-Q-RxdSBD88DeGr810PxedL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.39.176.0/21
5.159.208.0/21
5.181.72.0/22
31.192.96.0/21
45.8.100.0/22
45.132.108.0/22
45.137.44.0/22
80.74.240.0/20
80.87.16.0/20
83.150.252.0/22
85.95.96.0/19
87.236.128.0/21
88.151.152.0/21
89.38.120.0/21
91.143.64.0/20
92.42.120.0/21
93.115.176.0/20
94.142.168.0/21
95.129.64.0/21
176.58.0.0/21
185.52.144.0/22
185.79.184.0/22
185.90.0.0/22
185.94.204.0/22
185.99.76.0/22
185.145.88.0/22
185.178.216.0/22
185.182.200.0/23
185.204.212.0/22
185.229.4.0/22
185.246.132.0/22
185.247.200.0/22
185.248.252.0/22
188.94.16.0/21
193.24.3.0/24
193.24.6.0/24
193.24.13.0/24
193.24.31.0/24
195.26.32.0/19
195.88.8.0/23
212.11.68.0-212.11.75.255
217.145.128.0/20
IPv6:
2a00:f1c0::/32
2a0d:7680::/29
2a0e:a1c0::/29
Signature Algorithm: sha256WithRSAEncryption
16:80:43:6c:d5:26:ce:d3:bf:15:6d:5a:61:b5:90:58:8d:56:
8b:c3:7e:f4:66:fc:c3:57:d7:90:dd:e9:43:46:ef:8e:a9:df:
1f:2b:3b:16:22:51:ac:78:39:96:cc:d3:bd:55:ea:02:f3:d2:
92:48:7b:e2:72:6c:5e:2a:b9:31:a0:d3:3f:a1:b2:e0:62:f7:
00:50:9b:d7:fb:1c:66:6b:05:64:70:a5:48:f3:fd:c4:ae:ca:
b3:93:79:d7:e7:56:48:34:8b:6d:62:c1:fc:65:b1:88:5a:50:
19:11:bd:65:86:a5:e1:12:c2:77:b0:78:92:a4:3e:c4:45:c9:
34:21:f7:e9:ac:42:01:fd:29:3d:df:ab:93:0c:c9:0e:96:a8:
ac:04:a2:de:cc:37:09:cd:52:db:ca:dc:4c:1f:99:22:70:cd:
ce:ef:24:13:23:28:3f:2b:1d:3e:18:23:27:ec:01:e7:d6:2e:
fc:d8:3a:41:a1:47:9d:62:34:3d:6f:6b:d5:4d:0e:e7:61:69:
c0:2b:b7:1e:66:43:08:c4:cf:53:93:32:40:2d:52:a1:d8:d9:
22:5f:6d:16:5b:18:62:74:1b:0d:dd:88:fe:82:04:55:ba:fa:
29:06:db:86:3c:4c:50:21:b7:9f:b7:cd:3c:35:51:6b:a9:e0:
06:d1:7b:1c
-----BEGIN CERTIFICATE-----
MIIGIjCCBQqgAwIBAgISAZb3atGFOnHQGx3wVRHwIZE6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZGY3NzQyODkwMTczOTI3OTM1MjA2YTI4ZWZiZjQ4MTIz
ZTc4N2MwHhcNMjUwNTIyMDk1NDU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzNkZmU0M2U0NzE3NTIwNDNmM2MwZGUxYWJmMzVkMGZjNWU3NGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyt5wpOaUya0OTrAZyFDxZ+Dt9P5A
nwZDBZ/qIfgtUbcXrLDZ+r+HforYuODZlQuwqVHOKhWkgjqaNr7MN3wCtqKkr1mC
cNNdrFpvduTqijqCZCXaXX3TFMX2wtBuAmj9QQSqAKK5wOzu/cs1Yk8klvnyD5gd
azUbsNbWuLwHqk2gCH3BgEyv9hPqLFss8IstgdvYkKGUQ6hy0qG3aMz8ZebLpOPI
TBNRGMumisG4CRUejJ4Khke0kEXWFokfw2Fwa9o0oGxgU6muO6zL/F24j5WB2wPQ
/CNZPZcO7ERf3yNzYsVguLIkh2bJTsX4guIFSxLNDH3QlwCd/B39m1nBVQIDAQAB
o4IDLjCCAyowHQYDVR0OBBYEFDc9/kPkcXUgQ/PA3hq/NdD8XnS/MB8GA1UdIwQY
MBaAFGbfd0KJAXOSeTUgaijvv0gSPnh8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnQ5M1Fva0JjNUo1TlNCcUtPLV9TQkktZUh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9lODQzNDAtMTI4YS00NDk3LTk0NmYt
MDk3ODdmMTUyYWRlLzEvTnozLVEtUnhkU0JEODhEZUdyODEwUHhlZEw4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9lODQzNDAtMTI4YS00NDk3LTk0NmYtMDk3ODdmMTUyYWRl
LzEvWnQ5M1Fva0JjNUo1TlNCcUtPLV9TQkktZUh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBQgYIKwYBBQUHAQcBAf8EggExMIIBLTCCAQwEAgABMIIB
BAMEAwUnsAMEAwWf0AMEAgW1SAMEAx/AYAMEAi0IZAMEAi2EbAMEAi2JLAMEBFBK
8AMEBFBXEAMEAlOW/AMEBVVfYAMEA1fsgAMEA1iXmAMEA1kmeAMEBFuPQAMEA1wq
eAMEBF1zsAMEA16OqAMEA1+BQAMEA7A6AAMEArk0kAMEArlPuAMEArlaAAMEArle
zAMEArljTAMEArmRWAMEArmy2AMEAbm2yAMEArnM1AMEArnlBAMEArn2hAMEArn3
yAMEArn4/AMEA7xeEAMEAMEYAwMEAMEYBgMEAMEYDQMEAMEYHwMEBcMaIAMEAcNY
CDAMAwQC1AtEAwQC1AtIAwQE2ZGAMBsEAgACMBUDBQAqAPHAAwUDKg12gAMFAyoO
ocAwDQYJKoZIhvcNAQELBQADggEBABaAQ2zVJs7TvxVtWmG1kFiNVovDfvRm/MNX
15Dd6UNG746p3x8rOxYiUax4OZbM071V6gLz0pJIe+JybF4quTGg0z+hsuBi9wBQ
m9f7HGZrBWRwpUjz/cSuyrOTedfnVkg0i21iwfxlsYhaUBkRvWWGpeESwneweJKk
PsRFyTQh9+msQgH9KT3fq5MMyQ6WqKwEot7MNwnNUtvK3EwfmSJwzc7vJBMjKD8r
HT4YIyfsAefWLvzYOkGhR51iND1va9VNDudhacArtx5mQwjEz1OTMkAtUqHY2SJf
bRZbGGJ0Gw3diP6CBFW6+ikG24Y8TFAht5+3zTw1UWup4AbRexw=
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:47:43 2025 by rpki-client