Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/NT21_MPJZNMtqheS4V3izhPH1zc.roa
File: NT21_MPJZNMtqheS4V3izhPH1zc.roa (raw, json)
Hash identifier: IO6Rumzpg8yCfZmIf0HOoHxg3olglQIxQqvs6n8q3cI=
Subject key identifier: 35:3D:B5:FC:C3:C9:64:D3:2D:AA:17:92:E1:5D:E2:CE:13:C7:D7:37
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0198F03B4BFD1D37EAAD820F18CEA4DD20CD
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/NT21_MPJZNMtqheS4V3izhPH1zc.roa
Signing time: Thu 28 Aug 2025 10:31:14 +0000
ROA not before: Thu 28 Aug 2025 10:31:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60647
IP address blocks: 86.105.4.0/24 maxlen: 24
94.177.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f0:3b:4b:fd:1d:37:ea:ad:82:0f:18:ce:a4:dd:20:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 28 10:31:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=353db5fcc3c964d32daa1792e15de2ce13c7d737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:72:67:e8:bf:0a:dd:aa:82:8d:c1:f5:ed:b2:
97:0d:79:a9:2e:b0:62:21:df:51:0c:81:af:82:67:
77:7c:69:45:01:74:be:d2:ac:4c:23:e6:bf:41:b1:
6d:54:41:66:8e:6e:9e:3f:04:03:62:b7:19:f9:f7:
15:5b:2c:6a:50:8f:16:c8:8d:43:ff:c7:b7:76:63:
07:72:a3:7c:3d:9f:19:e1:e8:a2:02:5f:61:be:f5:
44:f1:8e:6e:79:dc:f1:7e:ee:30:99:45:b2:29:35:
a1:8d:9f:12:6c:94:56:a6:e4:6c:ea:59:ef:f4:2c:
1b:14:09:5c:46:49:d5:81:ae:48:09:71:90:45:44:
13:77:b0:f1:14:b4:31:85:06:96:4f:85:ec:2a:e0:
a8:c6:75:8c:53:12:49:53:4f:16:7d:79:4d:d0:66:
3c:03:2d:1b:c1:34:06:31:ff:58:00:0c:e6:1e:bc:
df:0b:4d:43:0b:37:44:29:71:96:94:2c:21:23:95:
76:a4:5d:77:f5:b3:90:70:c3:37:41:b4:ca:d1:52:
8f:c1:a0:8e:88:de:6e:c0:41:af:4a:9a:fa:9a:22:
ed:32:ab:b1:75:71:b4:42:15:d0:0e:e5:7a:1d:84:
36:ea:df:37:e9:c5:19:d2:9c:cf:72:c7:57:0d:a6:
7c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:3D:B5:FC:C3:C9:64:D3:2D:AA:17:92:E1:5D:E2:CE:13:C7:D7:37
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/NT21_MPJZNMtqheS4V3izhPH1zc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.105.4.0/24
94.177.147.0/24
Signature Algorithm: sha256WithRSAEncryption
33:69:fe:bd:9a:59:93:9b:96:9d:4e:fe:e8:e0:81:b2:0c:d3:
5e:28:c4:64:1c:b9:e7:9f:a0:0f:7c:c1:6d:b2:ca:78:86:b1:
22:df:f7:05:a3:97:9f:20:30:bf:cb:14:06:0f:17:9a:f5:8e:
2a:74:a6:74:22:15:80:dd:06:17:56:3b:c8:7d:2b:96:50:3f:
d7:14:9c:15:8b:05:4d:1d:d6:bc:a3:c6:62:55:b9:be:85:18:
f3:25:db:71:fd:52:0f:5d:cf:1d:9c:ec:e9:61:1a:c4:89:5a:
1b:19:e1:19:97:f0:99:16:5e:4d:69:f5:5b:ba:63:0c:a1:7c:
19:33:96:82:4a:18:eb:70:8f:0a:7d:0b:87:57:47:68:70:66:
98:4d:d9:22:1d:3c:bf:11:3c:e2:a0:5a:d4:35:b1:22:07:b7:
0d:f1:0d:03:3c:5a:34:37:a9:f7:68:7c:7c:10:7f:cd:a9:02:
d1:ec:55:9f:52:c1:19:df:20:22:b4:ba:4e:11:4f:16:4d:9e:
96:ad:e0:5b:dc:48:83:6b:aa:05:2e:d5:d0:b9:da:47:53:88:
b2:20:a2:0d:5b:c6:46:cf:53:4b:a9:64:e9:41:97:2b:48:88:
8a:2f:4d:6d:75:98:65:02:da:1b:65:5a:bb:02:2e:6c:31:47:
c6:34:c3:5d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZjwO0v9HTfqrYIPGM6k3SDNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjUwODI4MTAzMTE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTNkYjVmY2MzYzk2NGQzMmRhYTE3OTJlMTVkZTJjZTEzYzdkNzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6nJn6L8K3aqCjcH17bKXDXmpLrBi
Id9RDIGvgmd3fGlFAXS+0qxMI+a/QbFtVEFmjm6ePwQDYrcZ+fcVWyxqUI8WyI1D
/8e3dmMHcqN8PZ8Z4eiiAl9hvvVE8Y5uedzxfu4wmUWyKTWhjZ8SbJRWpuRs6lnv
9CwbFAlcRknVga5ICXGQRUQTd7DxFLQxhQaWT4XsKuCoxnWMUxJJU08WfXlN0GY8
Ay0bwTQGMf9YAAzmHrzfC01DCzdEKXGWlCwhI5V2pF139bOQcMM3QbTK0VKPwaCO
iN5uwEGvSpr6miLtMquxdXG0QhXQDuV6HYQ26t836cUZ0pzPcsdXDaZ8YwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDU9tfzDyWTTLaoXkuFd4s4Tx9c3MB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvTlQyMV9NUEpaTk10cWhlUzRWM2l6aFBIMXpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVmkEAwQA
XrGTMA0GCSqGSIb3DQEBCwUAA4IBAQAzaf69mlmTm5adTv7o4IGyDNNeKMRkHLnn
n6APfMFtssp4hrEi3/cFo5efIDC/yxQGDxea9Y4qdKZ0IhWA3QYXVjvIfSuWUD/X
FJwViwVNHda8o8ZiVbm+hRjzJdtx/VIPXc8dnOzpYRrEiVobGeEZl/CZFl5NafVb
umMMoXwZM5aCShjrcI8KfQuHV0docGaYTdkiHTy/ETzioFrUNbEiB7cN8Q0DPFo0
N6n3aHx8EH/NqQLR7FWfUsEZ3yAitLpOEU8WTZ6WreBb3EiDa6oFLtXQudpHU4iy
IKINW8ZGz1NLqWTpQZcrSIiKL01tdZhlAtobZVq7Ai5sMUfGNMNd
-----END CERTIFICATE-----
Generated at Sun Sep 7 15:41:47 2025 by rpki-client