Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/nejv_OwVDfkOnJjwA5e7gYQjidY.roa
File: nejv_OwVDfkOnJjwA5e7gYQjidY.roa (raw, json)
Hash identifier: FJcl36JaiMGpcbPH3v7IF+mtOr442ZnbZlg142+ovR0=
Subject key identifier: 9D:E8:EF:FC:EC:15:0D:F9:0E:9C:98:F0:03:97:BB:81:84:23:89:D6
Certificate issuer: /CN=e215be4532e9588c40531a7f331eabfbf4770a5e
Certificate serial: 01991A6EA960C395D71A852655BB5A8644F0
Authority key identifier: E2:15:BE:45:32:E9:58:8C:40:53:1A:7F:33:1E:AB:FB:F4:77:0A:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/nejv_OwVDfkOnJjwA5e7gYQjidY.roa
Signing time: Fri 05 Sep 2025 15:11:23 +0000
ROA not before: Fri 05 Sep 2025 15:11:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48737
IP address blocks: 37.58.16.0/24 maxlen: 24
37.58.17.0/24 maxlen: 24
37.58.18.0/24 maxlen: 24
37.58.19.0/24 maxlen: 24
37.58.20.0/24 maxlen: 24
37.58.21.0/24 maxlen: 24
37.58.22.0/24 maxlen: 24
37.58.23.0/24 maxlen: 24
46.20.144.0/24 maxlen: 24
46.20.145.0/24 maxlen: 24
46.20.146.0/24 maxlen: 24
46.20.147.0/24 maxlen: 24
46.20.148.0/24 maxlen: 24
46.20.149.0/24 maxlen: 24
46.20.150.0/24 maxlen: 24
46.20.151.0/24 maxlen: 24
46.20.152.0/24 maxlen: 24
46.20.153.0/24 maxlen: 24
46.20.154.0/24 maxlen: 24
46.20.155.0/24 maxlen: 24
46.20.156.0/24 maxlen: 24
46.20.157.0/24 maxlen: 24
46.20.158.0/24 maxlen: 24
46.20.159.0/24 maxlen: 24
81.22.96.0/24 maxlen: 24
81.22.97.0/24 maxlen: 24
81.22.98.0/24 maxlen: 24
81.22.99.0/24 maxlen: 24
81.22.100.0/24 maxlen: 24
81.22.101.0/24 maxlen: 24
81.22.102.0/24 maxlen: 24
81.22.103.0/24 maxlen: 24
81.22.104.0/24 maxlen: 24
81.22.105.0/24 maxlen: 24
81.22.106.0/24 maxlen: 24
81.22.107.0/24 maxlen: 24
81.22.108.0/24 maxlen: 24
81.22.109.0/24 maxlen: 24
81.22.110.0/24 maxlen: 24
81.22.111.0/24 maxlen: 24
95.128.56.0/24 maxlen: 24
95.128.57.0/24 maxlen: 24
95.128.58.0/24 maxlen: 24
95.128.60.0/24 maxlen: 24
95.128.61.0/24 maxlen: 24
95.128.62.0/24 maxlen: 24
95.128.63.0/24 maxlen: 24
185.56.236.0/24 maxlen: 24
185.56.237.0/24 maxlen: 24
185.56.238.0/24 maxlen: 24
185.56.239.0/24 maxlen: 24
185.59.72.0/24 maxlen: 24
185.59.73.0/24 maxlen: 24
185.59.74.0/24 maxlen: 24
185.59.75.0/24 maxlen: 24
2a02:dc40::/48 maxlen: 48
2a02:dc40:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 06:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1a:6e:a9:60:c3:95:d7:1a:85:26:55:bb:5a:86:44:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e215be4532e9588c40531a7f331eabfbf4770a5e
Validity
Not Before: Sep 5 15:11:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9de8effcec150df90e9c98f00397bb81842389d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:61:47:15:a6:c4:fd:e1:5b:d2:1b:a3:b3:46:
de:a5:60:00:3f:f8:3a:8c:32:1b:0d:0c:ba:b5:55:
c2:92:2c:a3:41:2b:8b:b5:82:59:f8:5e:de:39:6c:
26:00:8f:f9:3a:75:6b:a2:08:7d:de:90:71:ad:de:
54:88:e9:c2:27:b0:2e:00:61:97:b4:a7:67:36:53:
8a:6a:ed:5a:c3:81:4f:5f:4a:bb:06:a9:f2:f4:e1:
7b:d9:1f:fb:34:a8:61:2f:74:6d:0d:b9:b8:e7:ef:
4e:16:06:1e:82:c0:5c:ff:e4:5f:d7:44:5a:74:2e:
3d:0a:4b:3c:c7:2e:f4:97:28:86:8e:9d:d3:53:1f:
75:bc:20:13:35:49:a2:89:f9:be:b8:7f:5e:83:65:
01:5e:ff:c9:de:8a:33:cf:1a:f8:46:71:55:a6:4e:
61:78:00:85:c0:ec:3d:a9:99:c2:ed:ee:fc:a9:1b:
64:e3:3c:9a:58:4e:b2:1b:34:ce:52:6c:68:61:5b:
d7:37:09:f9:c9:da:90:70:ac:92:87:7a:22:a6:70:
be:f1:6b:7b:91:62:44:7b:8b:7d:13:02:0c:3b:b6:
5b:e8:85:1c:3e:f5:43:22:e3:08:2f:8a:d9:63:dd:
70:02:6a:fd:45:12:58:93:2a:29:1f:94:34:f7:de:
7b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E8:EF:FC:EC:15:0D:F9:0E:9C:98:F0:03:97:BB:81:84:23:89:D6
X509v3 Authority Key Identifier:
keyid:E2:15:BE:45:32:E9:58:8C:40:53:1A:7F:33:1E:AB:FB:F4:77:0A:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/nejv_OwVDfkOnJjwA5e7gYQjidY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.58.16.0/21
46.20.144.0/20
81.22.96.0/20
95.128.56.0-95.128.58.255
95.128.60.0/22
185.56.236.0/22
185.59.72.0/22
IPv6:
2a02:dc40::/47
Signature Algorithm: sha256WithRSAEncryption
a0:b9:6f:d5:72:ac:86:bd:ea:39:71:d1:c6:a4:36:ac:d9:57:
65:d1:64:b7:1e:b6:04:c3:97:87:21:b4:7a:84:4d:57:ee:04:
58:28:56:a8:bf:86:00:02:61:da:9b:cd:08:78:46:d8:be:21:
17:94:e4:6d:aa:85:c0:69:c0:42:d0:ae:28:e0:5c:b3:40:e2:
06:7e:a0:7b:a7:bb:b1:88:1e:63:25:6f:9d:0c:34:b7:3f:09:
f5:c3:b0:2c:58:14:2c:03:80:b9:f6:b7:10:b6:34:89:e8:fe:
bf:3a:08:f9:fd:67:c8:35:5a:34:e6:7d:47:76:67:89:d4:76:
a0:68:89:90:c0:34:44:84:98:d7:83:38:a1:74:91:9a:6e:d0:
c4:62:1e:f1:ad:76:cc:c9:8a:45:d1:b5:4e:33:fb:78:14:23:
48:c1:de:6f:b2:b4:99:96:8a:b1:48:da:89:9d:fb:41:1b:1f:
a1:84:8a:45:25:d2:e2:df:30:28:b8:48:4e:ed:9d:f5:95:c7:
db:fe:1b:53:6c:61:be:e0:74:27:f1:ca:17:34:b4:ed:a9:27:
6a:02:8f:b3:da:5d:b8:93:2d:df:33:aa:9c:e8:c3:2e:28:11:
8b:88:37:e2:84:f1:20:fa:a5:7c:2e:97:ea:75:26:ce:98:ef:
0a:69:3e:a0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Sep 8 11:22:59 2025 by rpki-client