Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/nS2kJA0lLglIc5uOUfZiV3eL6YA.roa
File: nS2kJA0lLglIc5uOUfZiV3eL6YA.roa (raw, json)
Hash identifier: K783Zb7wLmRXQmApgLlixVva89VTJc2nsPVxHEGUGTo=
Subject key identifier: 9D:2D:A4:24:0D:25:2E:09:48:73:9B:8E:51:F6:62:57:77:8B:E9:80
Certificate issuer: /CN=16241dd83d8ac080b66504bf937459ffcec4ccc4
Certificate serial: 0198EC4DE486CEBFC47BD245316E339EE6BD
Authority key identifier: 16:24:1D:D8:3D:8A:C0:80:B6:65:04:BF:93:74:59:FF:CE:C4:CC:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/nS2kJA0lLglIc5uOUfZiV3eL6YA.roa
Signing time: Wed 27 Aug 2025 16:13:04 +0000
ROA not before: Wed 27 Aug 2025 16:13:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16154
IP address blocks: 80.95.29.0/24 maxlen: 24
80.95.30.0/24 maxlen: 24
88.213.195.0/24 maxlen: 24
88.213.204.0/22 maxlen: 24
217.79.64.0/22 maxlen: 24
217.79.72.0/24 maxlen: 24
217.79.77.0/24 maxlen: 24
217.79.78.0/23 maxlen: 24
217.79.83.0/24 maxlen: 24
217.79.86.0/23 maxlen: 23
217.79.86.0/24 maxlen: 24
217.79.87.0/24 maxlen: 24
217.79.88.0/24 maxlen: 24
217.79.90.0/24 maxlen: 24
217.79.92.0/24 maxlen: 24
217.79.95.0/24 maxlen: 24
2a02:7900::/32 maxlen: 48
2a02:7900:100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 22:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ec:4d:e4:86:ce:bf:c4:7b:d2:45:31:6e:33:9e:e6:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16241dd83d8ac080b66504bf937459ffcec4ccc4
Validity
Not Before: Aug 27 16:13:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d2da4240d252e0948739b8e51f66257778be980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e2:d2:83:c2:ae:ce:c4:8f:f3:1a:ba:f6:c3:
17:05:65:c4:56:54:6a:55:97:74:8e:4e:48:d6:ab:
86:a0:9e:aa:eb:3d:17:84:95:49:08:f0:0c:1f:ff:
f3:1e:c7:d3:79:3d:40:58:a4:4d:e1:d7:d1:66:31:
66:44:d3:9a:ad:64:1c:29:8c:08:0b:4d:39:7c:ee:
c9:63:0f:30:a6:20:c4:e7:d8:ca:15:8e:91:9e:ca:
8d:60:ec:e1:2a:61:4f:c4:eb:2b:0f:9f:20:20:01:
3d:f2:99:5f:75:5d:44:40:e9:bb:59:2e:3b:8f:fc:
ef:ba:e4:95:fd:c0:23:51:3c:12:2f:84:f1:65:de:
7c:83:83:eb:b7:71:2b:e5:b8:b1:73:33:d3:e8:81:
87:13:45:88:6e:d0:0e:7c:6e:ec:07:a3:2e:59:d7:
1c:4d:e6:cb:96:83:4f:3a:12:bd:20:ce:17:72:02:
b8:0b:9d:c7:40:9b:de:b2:51:98:69:3d:14:b4:6a:
37:9d:54:49:b1:96:01:d3:d6:16:d8:7f:ea:3e:2c:
cc:8e:fa:ce:fb:33:3c:3d:ee:d9:e5:6d:e5:d9:1e:
97:ff:68:79:b4:3e:0a:b4:d7:15:e5:fa:49:aa:18:
9c:0b:36:3d:da:21:cb:e8:2a:8e:fd:a9:33:c5:12:
36:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:2D:A4:24:0D:25:2E:09:48:73:9B:8E:51:F6:62:57:77:8B:E9:80
X509v3 Authority Key Identifier:
keyid:16:24:1D:D8:3D:8A:C0:80:B6:65:04:BF:93:74:59:FF:CE:C4:CC:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/nS2kJA0lLglIc5uOUfZiV3eL6YA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.95.29.0-80.95.30.255
88.213.195.0/24
88.213.204.0/22
217.79.64.0/22
217.79.72.0/24
217.79.77.0-217.79.79.255
217.79.83.0/24
217.79.86.0-217.79.88.255
217.79.90.0/24
217.79.92.0/24
217.79.95.0/24
IPv6:
2a02:7900::/32
Signature Algorithm: sha256WithRSAEncryption
56:5f:42:11:9e:23:95:2f:67:46:38:7e:a5:74:6f:f5:41:d6:
2b:0b:50:6f:9c:a7:33:86:fd:f7:85:9b:62:99:55:96:91:6e:
e9:c5:c7:cd:40:8e:40:00:ed:68:4a:6e:93:5a:f3:f2:8f:d7:
eb:c7:72:f0:65:30:26:c9:17:5e:3a:40:12:a6:37:76:2a:8a:
29:9c:26:b1:71:29:6b:e8:4e:56:fb:d5:35:53:ae:5b:c9:c9:
30:22:04:3b:24:1c:6a:5b:3b:53:30:c4:f8:75:5f:ea:db:e4:
dc:37:83:75:c6:92:a4:7f:d7:4e:60:ee:93:11:8a:a1:45:95:
e7:ae:d2:81:e3:76:6c:df:08:23:6b:19:22:63:98:74:c2:4d:
98:48:cd:6d:58:a5:72:51:b1:8d:e7:8b:18:c3:39:25:57:14:
de:79:63:fa:49:eb:b1:5d:53:1a:45:02:3b:a5:16:8c:a4:44:
c6:64:e2:64:63:d6:82:a6:ca:23:40:dc:f5:6c:c1:32:f6:4d:
55:d8:ab:b3:e9:8d:6b:84:1b:e0:05:1e:f4:64:d7:03:0f:01:
37:30:c8:27:0a:af:bd:66:2c:5f:c3:62:bd:f8:e0:e5:28:ae:
22:56:e8:f4:ee:4b:9c:18:e6:d2:ef:ca:e9:a3:f3:8b:41:16:
cc:18:50:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 05:01:10 2025 by rpki-client