Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/NBhxUPqU4KVRkXQlEmbee_BLGec.roa
File: NBhxUPqU4KVRkXQlEmbee_BLGec.roa (raw, json)
Hash identifier: TdH1BcU9pOE9Zd5e+oGC/w82jC3J/bgBAhjShNpC00U=
Subject key identifier: 34:18:71:50:FA:94:E0:A5:51:91:74:25:12:66:DE:7B:F0:4B:19:E7
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01991A57CB41BA835288DDDF2BE68EB04DB1
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/NBhxUPqU4KVRkXQlEmbee_BLGec.roa
Signing time: Fri 05 Sep 2025 14:46:25 +0000
ROA not before: Fri 05 Sep 2025 14:46:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 267507
IP address blocks: 109.176.16.0/24 maxlen: 24
212.38.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 13:26:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1a:57:cb:41:ba:83:52:88:dd:df:2b:e6:8e:b0:4d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Sep 5 14:46:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=34187150fa94e0a5519174251266de7bf04b19e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ae:9d:60:3f:d0:cf:95:3f:6d:c2:31:1f:8e:
05:f6:a4:b6:3b:2f:7b:24:42:10:fa:f9:7d:11:6e:
42:10:14:d0:d9:18:7b:5b:bc:ae:a9:46:75:de:86:
b7:fb:6a:65:59:01:81:f4:01:f4:94:ec:03:df:92:
7d:17:4c:dd:19:a0:24:54:d5:48:35:39:1d:f6:18:
37:ed:86:1e:97:75:98:c8:bc:f9:a3:9f:a9:de:0a:
85:51:43:6d:5a:e7:23:57:78:d3:95:d7:0a:d0:12:
68:ae:d1:e3:fc:6d:d3:c5:2d:b4:b5:71:eb:e5:a9:
ec:d0:9e:8f:3d:ae:50:36:ee:2e:36:76:f5:2a:3e:
04:b9:b4:21:94:17:69:4d:db:6e:d9:48:2a:12:37:
4f:97:75:a6:30:87:f9:b0:45:d1:06:da:8c:06:84:
38:ac:67:3a:61:ae:2e:29:4e:8c:d4:b6:6d:94:8f:
4d:aa:f4:88:67:62:5a:0e:85:f7:48:9e:3b:6e:11:
cf:0c:f5:47:e9:7e:5e:57:d5:44:5b:e2:90:d9:89:
4a:bd:68:ea:52:a0:41:1e:09:f1:29:19:16:81:60:
9b:d5:7a:10:0c:99:79:d3:f3:83:d2:1b:86:46:d3:
0b:e5:db:ee:42:6a:2e:f1:25:c3:88:20:f5:d3:36:
9b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:18:71:50:FA:94:E0:A5:51:91:74:25:12:66:DE:7B:F0:4B:19:E7
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/NBhxUPqU4KVRkXQlEmbee_BLGec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.16.0/24
212.38.84.0/24
Signature Algorithm: sha256WithRSAEncryption
02:92:62:37:6c:9f:2c:ed:6f:bd:7e:b7:e7:e2:58:f0:ee:19:
61:40:33:68:00:e7:06:b1:a2:43:ed:82:ea:0a:08:28:08:21:
55:cc:74:50:5a:c5:55:e5:97:cc:c0:90:42:69:5b:dd:ac:27:
3b:f7:5e:e8:92:b2:41:2c:81:b2:f4:0a:87:ff:ad:08:67:aa:
58:58:f7:c5:bb:16:ef:51:49:a5:80:68:5c:05:e3:bd:20:4b:
98:bb:6d:95:ae:96:d9:d5:c6:3b:73:f0:e4:20:68:0d:77:5d:
76:a6:b2:87:c6:b9:98:2c:c6:20:e2:7c:2c:ed:8a:8a:b0:b3:
c0:1d:09:bb:40:6c:b8:b2:6f:d1:96:e1:1e:bd:aa:d4:45:1e:
4e:19:09:5d:24:29:fa:4e:ad:b0:7b:c5:41:79:a8:1e:ad:31:
fa:e6:67:97:6f:bb:2f:9b:b7:35:3b:d2:6c:ac:26:ef:60:4c:
fe:52:3f:d2:cf:7e:7b:7b:aa:58:99:40:fe:80:09:ee:ee:88:
92:c6:a1:c9:85:67:b5:be:1d:e4:67:12:df:2b:bb:93:b8:c3:
83:4f:bc:34:c8:69:3f:88:2c:ed:28:4d:b0:86:71:54:d9:7e:
57:3d:a0:80:ec:ea:98:ce:8b:dd:cc:dd:f0:ea:1e:8f:6b:ba:
6c:c7:f4:81
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZkaV8tBuoNSiN3fK+aOsE2xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjUwOTA1MTQ0NjI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNDE4NzE1MGZhOTRlMGE1NTE5MTc0MjUxMjY2ZGU3YmYwNGIxOWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyK6dYD/Qz5U/bcIxH44F9qS2Oy97
JEIQ+vl9EW5CEBTQ2Rh7W7yuqUZ13oa3+2plWQGB9AH0lOwD35J9F0zdGaAkVNVI
NTkd9hg37YYel3WYyLz5o5+p3gqFUUNtWucjV3jTldcK0BJortHj/G3TxS20tXHr
5ans0J6PPa5QNu4uNnb1Kj4EubQhlBdpTdtu2UgqEjdPl3WmMIf5sEXRBtqMBoQ4
rGc6Ya4uKU6M1LZtlI9NqvSIZ2JaDoX3SJ47bhHPDPVH6X5eV9VEW+KQ2YlKvWjq
UqBBHgnxKRkWgWCb1XoQDJl50/OD0huGRtML5dvuQmou8SXDiCD10zabLwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDQYcVD6lOClUZF0JRJm3nvwSxnnMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvTkJoeFVQcVU0S1ZSa1hRbEVtYmVlX0JMR2VjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAbbAQAwQA
1CZUMA0GCSqGSIb3DQEBCwUAA4IBAQACkmI3bJ8s7W+9frfn4ljw7hlhQDNoAOcG
saJD7YLqCggoCCFVzHRQWsVV5ZfMwJBCaVvdrCc7917okrJBLIGy9AqH/60IZ6pY
WPfFuxbvUUmlgGhcBeO9IEuYu22VrpbZ1cY7c/DkIGgNd112prKHxrmYLMYg4nws
7YqKsLPAHQm7QGy4sm/RluEevarURR5OGQldJCn6Tq2we8VBeagerTH65meXb7sv
m7c1O9JsrCbvYEz+Uj/Sz357e6pYmUD+gAnu7oiSxqHJhWe1vh3kZxLfK7uTuMOD
T7w0yGk/iCztKE2whnFU2X5XPaCA7OqYzovdzN3w6h6Pa7psx/SB
-----END CERTIFICATE-----
Generated at Mon Sep 8 19:44:07 2025 by rpki-client