Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/n71o-euCGrkY8O3e0CR7o49iC7c.roa
File: n71o-euCGrkY8O3e0CR7o49iC7c.roa (raw, json)
Hash identifier: Ni77nUb9wSBLJDB4hHEr5oyLBifZqJmvnhEXMO3zOwA=
Subject key identifier: 9F:BD:68:F9:EB:82:1A:B9:18:F0:ED:DE:D0:24:7B:A3:8F:62:0B:B7
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 0199F82BBB00B7D07798E5DC42FD3C4F4C3E
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/n71o-euCGrkY8O3e0CR7o49iC7c.roa
Signing time: Sat 18 Oct 2025 16:33:59 +0000
ROA not before: Sat 18 Oct 2025 16:33:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 5.182.184.0/24 maxlen: 24
92.249.30.0/24 maxlen: 24
185.52.138.0/24 maxlen: 24
185.52.139.0/24 maxlen: 24
185.187.213.0/24 maxlen: 24
185.187.214.0/24 maxlen: 24
185.205.207.0/24 maxlen: 24
185.208.153.0/24 maxlen: 24
185.208.154.0/24 maxlen: 24
185.230.120.0/24 maxlen: 24
185.230.121.0/24 maxlen: 24
185.230.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f8:2b:bb:00:b7:d0:77:98:e5:dc:42:fd:3c:4f:4c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Oct 18 16:33:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9fbd68f9eb821ab918f0edded0247ba38f620bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:16:8f:e7:97:db:3e:28:80:4f:02:d9:fa:23:
2d:63:8b:42:9c:44:22:55:63:2e:7d:64:9b:b7:54:
32:bf:e0:7e:a3:8a:21:ea:1d:24:c6:99:63:de:ae:
ac:03:79:71:2c:7c:c1:1f:9f:61:b9:0f:e5:bb:0f:
95:87:ac:d0:c1:b4:c1:60:76:7d:11:6a:79:94:83:
35:a9:12:44:a4:48:b7:ec:b5:1b:8d:d7:70:7f:91:
ea:1a:5d:03:b6:ae:24:58:ce:e0:ea:a4:34:d3:0b:
da:82:e2:fd:58:5e:28:f9:6b:c5:50:70:d1:9a:f7:
7d:67:dd:6c:e5:b7:9f:56:72:b0:bd:ba:d0:b6:91:
90:33:d6:0d:b7:b6:e9:d6:9e:46:37:2a:80:27:be:
29:6e:51:83:9b:ae:6c:b6:c3:d4:3f:01:f5:6b:f5:
80:01:ec:6e:ef:c1:4a:f5:f5:54:98:47:c6:80:58:
a5:e6:72:03:a9:de:5e:15:a8:4d:4c:5f:81:2d:d0:
4c:96:16:11:74:9f:d9:3b:a5:c3:6e:ba:24:83:67:
b8:c3:e4:00:05:44:73:4e:99:fe:71:ff:de:26:14:
62:f9:6c:78:6f:9b:e6:6a:15:50:dd:cd:37:45:84:
20:1d:4c:b4:c0:a2:e0:b8:10:47:34:0d:d4:da:6c:
6f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:BD:68:F9:EB:82:1A:B9:18:F0:ED:DE:D0:24:7B:A3:8F:62:0B:B7
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/n71o-euCGrkY8O3e0CR7o49iC7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.184.0/24
92.249.30.0/24
185.52.138.0/23
185.187.213.0-185.187.214.255
185.205.207.0/24
185.208.153.0-185.208.154.255
185.230.120.0/23
185.230.123.0/24
Signature Algorithm: sha256WithRSAEncryption
59:91:b7:3e:5c:2b:69:a5:4d:c3:48:81:94:c0:ae:07:f9:c3:
1d:2f:93:1a:b3:0d:37:c1:c0:90:cb:33:d7:65:2a:40:dc:55:
86:d7:08:45:b0:be:18:13:66:91:8a:9f:9a:ee:59:f8:20:72:
55:99:fa:dd:c7:23:a9:fd:b6:84:70:08:32:04:27:aa:05:a2:
33:f3:81:9d:9e:92:74:37:91:b3:2d:2c:8b:15:8e:ea:27:30:
c1:26:52:24:ac:8e:e2:b0:ee:7a:bc:0b:87:3b:ed:4a:cb:60:
eb:19:28:64:4f:eb:3b:9f:1e:d1:85:06:53:bb:e6:12:9f:11:
6f:ac:63:4f:9e:c2:b1:f6:b0:9e:a0:be:b0:7c:57:f8:36:03:
26:26:6e:cc:57:a5:70:3e:f4:79:43:d4:dc:4b:79:57:4c:4e:
9d:eb:ff:bc:13:6a:a1:31:0f:51:5c:3d:2b:fe:34:ee:83:a3:
ed:08:1e:c7:7f:8f:d1:fd:c3:1c:b7:67:e1:90:4f:86:60:5b:
14:9a:05:f7:1a:04:40:c9:ea:3f:85:63:ec:19:f5:e0:60:42:
67:26:4b:c6:e5:86:08:1f:8a:00:48:bc:1e:8f:26:34:86:b9:
dd:27:5e:6c:90:53:17:96:30:c4:fb:a3:bf:90:5d:7d:9e:79:
1a:10:81:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:29:10 2025 by rpki-client