Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/nOFVw_7kFMGCzy_Hh0mnx-1jnSw.roa
File: nOFVw_7kFMGCzy_Hh0mnx-1jnSw.roa (raw, json)
Hash identifier: p9o7KchBRH+igENWMZBwRoWo5e8rSEzaut8NsxOpOaY=
Subject key identifier: 9C:E1:55:C3:FE:E4:14:C1:82:CF:2F:C7:87:49:A7:C7:ED:63:9D:2C
Certificate issuer: /CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
Certificate serial: 019910605BF5B8CD7467B4912AD904896752
Authority key identifier: B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/nOFVw_7kFMGCzy_Hh0mnx-1jnSw.roa
Signing time: Wed 03 Sep 2025 16:19:34 +0000
ROA not before: Wed 03 Sep 2025 16:19:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199152
IP address blocks: 91.239.23.0/24 maxlen: 24
146.19.84.0/24 maxlen: 24
2a0a:2e82::/36 maxlen: 36
2a0a:2e83::/36 maxlen: 36
2a0a:2e84::/36 maxlen: 36
2a0a:2e85::/36 maxlen: 36
2a0a:2e86::/32 maxlen: 32
2a0a:2e86:1000::/36 maxlen: 36
2a0a:2e86:2000::/36 maxlen: 36
2a0a:2e86:3000::/36 maxlen: 36
2a0a:2e86:4000::/36 maxlen: 36
2a0a:2e86:5000::/36 maxlen: 36
2a0a:2e86:6000::/36 maxlen: 36
2a0a:2e86:7000::/36 maxlen: 36
2a0a:2e86:8000::/36 maxlen: 36
2a0a:2e86:9000::/36 maxlen: 36
2a0a:2e86:a000::/36 maxlen: 36
2a0a:2e86:b000::/36 maxlen: 36
2a0a:2e87::/32 maxlen: 32
2a11:7e41::/48 maxlen: 48
2a11:7e41:1::/48 maxlen: 48
2a11:7e41:2::/48 maxlen: 48
2a11:7e41:3::/48 maxlen: 48
2a11:7e42::/36 maxlen: 36
2a11:7e43::/36 maxlen: 36
2a11:7e44::/32 maxlen: 32
2a11:7e45::/32 maxlen: 32
2a11:8480::/32 maxlen: 32
2a11:8482::/36 maxlen: 36
2a11:8483::/36 maxlen: 36
2a11:8484::/32 maxlen: 32
2a11:df41::/32 maxlen: 32
2a11:df42::/36 maxlen: 36
2a11:df43::/36 maxlen: 36
2a11:df44::/32 maxlen: 32
2a11:df45::/32 maxlen: 32
2a11:df46::/32 maxlen: 32
2a11:df47::/32 maxlen: 32
2a12:6700::/32 maxlen: 32
2a12:6703::/36 maxlen: 36
2a12:6704::/36 maxlen: 36
2a12:6705::/32 maxlen: 32
2a12:6706::/32 maxlen: 32
2a12:6707::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.mft
rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:10:60:5b:f5:b8:cd:74:67:b4:91:2a:d9:04:89:67:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
Validity
Not Before: Sep 3 16:19:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ce155c3fee414c182cf2fc78749a7c7ed639d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b2:87:5d:dc:69:ce:46:01:0a:c5:d9:15:7e:
6a:de:08:e0:eb:58:2e:5b:dc:79:45:8e:25:a9:82:
8b:3b:9d:69:93:a9:05:bf:78:00:4b:ef:9a:3c:7e:
5b:56:c3:de:ea:33:c4:ea:9b:8d:8f:46:43:37:39:
8f:09:61:f2:08:e7:28:8d:9f:f1:36:fd:1f:47:86:
5a:76:bb:2c:71:2f:e5:ff:50:b0:a8:88:7c:c6:56:
54:04:06:99:0c:23:e3:9b:ce:1e:11:ea:54:09:48:
0c:21:48:b2:a6:5b:f3:a5:cd:e0:75:51:d5:0e:61:
68:95:d6:84:28:d0:ff:8c:aa:57:d4:c5:d1:ab:9d:
64:56:cf:b2:05:d8:a5:b3:f0:c1:a7:28:eb:01:dc:
84:24:18:eb:56:a4:e2:8f:fe:ef:11:ec:b7:0e:78:
df:de:fd:65:7d:6a:6d:08:5d:61:f0:30:26:e3:49:
fc:7e:a7:3b:0c:3a:fb:16:d7:4d:5b:cc:d5:37:82:
99:9a:61:2b:b3:2e:92:02:2d:8a:cc:d4:db:b8:99:
c8:53:84:79:fe:10:3e:40:f2:4c:95:9c:2d:f0:a8:
26:c3:a6:76:7c:81:01:e0:8c:83:ba:ef:07:cb:8f:
80:73:46:6d:e0:11:d7:cc:de:b2:42:4d:a3:42:19:
5d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E1:55:C3:FE:E4:14:C1:82:CF:2F:C7:87:49:A7:C7:ED:63:9D:2C
X509v3 Authority Key Identifier:
keyid:B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/nOFVw_7kFMGCzy_Hh0mnx-1jnSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.23.0/24
146.19.84.0/24
IPv6:
2a0a:2e82::/36
2a0a:2e83::/36
2a0a:2e84::/36
2a0a:2e85::/36
2a0a:2e86::/31
2a11:7e41::/46
2a11:7e42::/36
2a11:7e43::/36
2a11:7e44::/31
2a11:8480::/32
2a11:8482::/36
2a11:8483::/36
2a11:8484::/32
2a11:df41::-2a11:df42:fff:ffff:ffff:ffff:ffff:ffff
2a11:df43::/36
2a11:df44::/30
2a12:6700::/32
2a12:6703::/36
2a12:6704::/36
2a12:6705::-2a12:6707:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
86:94:1f:29:cf:5c:77:f8:d7:77:98:25:8b:63:f5:42:c9:8d:
ce:c1:05:b5:a6:cd:b5:ae:f5:d6:39:da:a0:0d:52:48:88:4c:
13:de:7c:58:c8:62:cb:11:89:eb:13:d1:2a:49:24:60:29:4d:
76:d9:5e:0a:3f:c9:86:9b:66:ae:6f:3b:fd:40:e1:4d:9e:77:
6a:22:3e:4e:13:7c:b3:e7:9c:c1:96:a2:7b:e7:af:f3:f2:54:
5f:e9:62:36:2a:9e:97:ec:de:47:db:61:30:69:fa:f9:71:2f:
6f:e8:c6:a0:9f:01:02:4b:3a:50:7d:45:82:5b:c5:d3:86:63:
9e:44:cd:99:af:19:4b:62:2e:a5:f8:d5:d0:08:f0:c1:83:63:
9e:67:fc:1b:cd:ae:b8:b5:c4:63:bd:8c:18:80:b5:1e:0e:fa:
37:d2:a7:e3:34:69:f5:74:be:93:92:a0:56:f8:c8:16:de:7e:
c4:a8:e2:2a:ff:87:85:2b:b7:84:b1:5e:d1:bd:5a:0d:59:2d:
10:79:df:f5:2c:8d:2c:05:fe:2e:4e:77:38:11:f9:7b:fa:9d:
72:42:d7:02:3c:f9:db:c3:d7:41:7c:86:5b:40:ac:cf:9e:47:
62:4e:3d:f3:0d:6d:08:9e:4e:2e:28:76:7e:89:c4:f6:97:cb:
e4:18:3a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 12:30:15 2025 by rpki-client