Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/nRPjF8jc3nCh1BS_R6RyB52wHkI.roa
File: nRPjF8jc3nCh1BS_R6RyB52wHkI.roa (raw, json)
Hash identifier: tjPf5hEQRVKMsge1AoL/XnEJZIu/Kr88kGRhpXlWgd0=
Subject key identifier: 9D:13:E3:17:C8:DC:DE:70:A1:D4:14:BF:47:A4:72:07:9D:B0:1E:42
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 0196F9450FE4701E2C5883DCBC4D85A685C1
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/nRPjF8jc3nCh1BS_R6RyB52wHkI.roa
Signing time: Thu 22 May 2025 18:32:54 +0000
ROA not before: Thu 22 May 2025 18:32:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196695
IP address blocks: 77.83.150.0/24 maxlen: 24
193.187.104.0/24 maxlen: 24
217.28.132.0/24 maxlen: 24
217.28.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f9:45:0f:e4:70:1e:2c:58:83:dc:bc:4d:85:a6:85:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: May 22 18:32:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d13e317c8dcde70a1d414bf47a472079db01e42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6b:69:44:88:94:1d:eb:7f:3d:22:3c:76:da:
ee:b4:1e:55:37:09:0e:94:d3:4f:10:3e:6d:20:4c:
7d:48:88:1f:08:86:e6:bd:78:f7:f7:28:a4:3e:53:
e9:13:bd:df:26:a2:e2:e7:bc:3d:64:a1:f6:3b:0b:
9d:24:81:36:9f:b7:b9:7e:7d:8e:1b:74:37:9b:05:
06:e1:67:fe:20:ab:d0:a9:26:e9:b0:cf:30:5e:d0:
02:81:5a:f3:83:3e:b4:d6:58:33:35:b2:fe:c9:17:
0a:12:0e:6c:97:3e:40:92:7a:78:c2:bb:7d:d6:26:
06:27:01:55:36:dc:7a:c5:97:b7:91:2b:2f:cb:be:
4d:64:01:f3:8c:c6:18:3b:a6:07:e7:62:a5:9b:41:
23:11:57:09:b8:59:55:f9:bd:2a:3e:47:a4:af:a5:
58:1b:46:db:7f:07:81:ac:44:49:f2:1e:de:72:eb:
81:80:62:19:08:de:1b:d2:c4:b3:7f:3d:93:8f:05:
f4:4e:d7:ec:99:c9:91:aa:68:d6:e6:0d:d1:89:27:
b0:e9:10:46:67:0c:b3:1e:49:05:88:a6:85:c7:fb:
f1:11:41:84:a6:0f:5c:39:c8:98:ed:81:de:43:39:
5b:f1:72:e0:c9:c7:b7:24:1f:e7:a0:b5:c4:9a:ce:
79:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:13:E3:17:C8:DC:DE:70:A1:D4:14:BF:47:A4:72:07:9D:B0:1E:42
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/nRPjF8jc3nCh1BS_R6RyB52wHkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.150.0/24
193.187.104.0/24
217.28.132.0/24
217.28.141.0/24
Signature Algorithm: sha256WithRSAEncryption
77:6c:08:3f:14:e6:3c:13:d8:19:34:79:f5:4b:e8:18:c3:5f:
3d:6f:92:51:56:84:8c:11:10:f9:4a:ca:72:e7:c6:11:6f:c9:
f3:e3:e7:9f:43:e7:b5:71:44:12:1f:a0:35:70:39:72:4f:dd:
75:f0:fd:12:1a:a2:7c:03:68:3c:71:0f:7d:af:8b:81:ac:c8:
1f:08:c5:7e:1f:b4:31:1b:58:80:c5:43:8a:c5:3b:ee:a8:b1:
2e:5c:da:b6:68:28:22:20:cf:e3:34:44:8f:92:92:02:9e:75:
81:2b:97:d0:c5:8d:96:56:c6:11:3f:3a:9c:ed:c4:d1:d2:40:
2d:e9:0c:6f:6d:9c:aa:99:e2:e7:5e:e2:ce:b4:c5:b4:c6:1b:
30:a6:6e:6b:91:c2:6c:52:12:2c:31:48:a1:be:6f:a2:c8:2d:
52:b2:41:81:38:7f:ce:fc:13:80:5e:20:84:33:dc:01:2e:55:
32:73:61:ef:39:33:f1:d2:ef:38:c4:58:c5:05:e7:3a:1b:90:
25:9b:be:38:1a:00:ee:b8:46:57:b4:5d:05:5c:52:31:b2:ce:
e7:45:1a:5a:27:38:f5:d0:e8:b8:61:18:71:dc:2a:ba:93:19:
2a:5c:74:b6:4b:0f:d6:66:63:3e:87:45:c6:07:f7:ab:15:50:
96:de:05:d7
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZb5RQ/kcB4sWIPcvE2FpoXBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4
ZmNjNGMwHhcNMjUwNTIyMTgzMjU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDEzZTMxN2M4ZGNkZTcwYTFkNDE0YmY0N2E0NzIwNzlkYjAxZTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GtpRIiUHet/PSI8dtrutB5VNwkO
lNNPED5tIEx9SIgfCIbmvXj39yikPlPpE73fJqLi57w9ZKH2OwudJIE2n7e5fn2O
G3Q3mwUG4Wf+IKvQqSbpsM8wXtACgVrzgz601lgzNbL+yRcKEg5slz5Aknp4wrt9
1iYGJwFVNtx6xZe3kSsvy75NZAHzjMYYO6YH52Klm0EjEVcJuFlV+b0qPkekr6VY
G0bbfweBrERJ8h7ecuuBgGIZCN4b0sSzfz2TjwX0TtfsmcmRqmjW5g3RiSew6RBG
ZwyzHkkFiKaFx/vxEUGEpg9cOciY7YHeQzlb8XLgyce3JB/noLXEms55KwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFJ0T4xfI3N5wodQUv0ekcgedsB5CMB8GA1UdIwQY
MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt
MjM5ZDJmZTM5OGIxLzEvblJQakY4amMzbkNoMUJTX1I2UnlCNTJ3SGtJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx
LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQATVOWAwQA
wbtoAwQA2RyEAwQA2RyNMA0GCSqGSIb3DQEBCwUAA4IBAQB3bAg/FOY8E9gZNHn1
S+gYw189b5JRVoSMERD5Sspy58YRb8nz4+efQ+e1cUQSH6A1cDlyT9118P0SGqJ8
A2g8cQ99r4uBrMgfCMV+H7QxG1iAxUOKxTvuqLEuXNq2aCgiIM/jNESPkpICnnWB
K5fQxY2WVsYRPzqc7cTR0kAt6QxvbZyqmeLnXuLOtMW0xhswpm5rkcJsUhIsMUih
vm+iyC1SskGBOH/O/BOAXiCEM9wBLlUyc2HvOTPx0u84xFjFBec6G5Alm744GgDu
uEZXtF0FXFIxss7nRRpaJzj10Oi4YRhx3Cq6kxkqXHS2Sw/WZmM+h0XGB/erFVCW
3gXX
-----END CERTIFICATE-----
Generated at Fri Jun 6 14:16:21 2025 by rpki-client