Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/NlD60E7lLlgKw-PAVTBiBt31h5g.roa
File: NlD60E7lLlgKw-PAVTBiBt31h5g.roa (raw, json)
Hash identifier: Be7pkoxW5md2fMzfMMkXfWt3s8AQ9PfjTdxxsGL6hhM=
Subject key identifier: 36:50:FA:D0:4E:E5:2E:58:0A:C3:E3:C0:55:30:62:06:DD:F5:87:98
Certificate issuer: /CN=206f1c32bc0a9006081d552fede67d6842921ec3
Certificate serial: 0196CA58A9D6DAC9CD410BBE0BA012ECDDB0
Authority key identifier: 20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/NlD60E7lLlgKw-PAVTBiBt31h5g.roa
Signing time: Tue 13 May 2025 15:52:10 +0000
ROA not before: Tue 13 May 2025 15:52:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3170
IP address blocks: 83.97.16.0/22 maxlen: 24
83.97.16.0/24 maxlen: 32
91.240.224.0/24 maxlen: 24
103.141.24.0/23 maxlen: 32
185.17.196.0/22 maxlen: 24
185.175.90.0/24 maxlen: 24
188.64.34.0/23 maxlen: 24
188.64.36.0/22 maxlen: 24
193.35.56.0/22 maxlen: 24
193.105.188.0/24 maxlen: 24
194.69.165.0/24 maxlen: 24
195.74.52.0/22 maxlen: 24
195.144.8.0/24 maxlen: 24
195.191.218.0/23 maxlen: 24
195.191.219.0/24 maxlen: 32
2a03:ee40::/32 maxlen: 32
2a07:240::/29 maxlen: 48
2a10:4740::/29 maxlen: 48
2a11:2640::/32 maxlen: 32
2a11:2641::/32 maxlen: 32
2a11:2647::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:58:a9:d6:da:c9:cd:41:0b:be:0b:a0:12:ec:dd:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=206f1c32bc0a9006081d552fede67d6842921ec3
Validity
Not Before: May 13 15:52:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3650fad04ee52e580ac3e3c055306206ddf58798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:cf:8f:c7:68:f0:b2:5c:a9:33:b2:88:84:5e:
0c:69:d0:e7:cc:1f:df:fd:83:0e:4b:a3:66:ba:21:
c6:75:03:53:da:fb:e6:9f:4a:cf:ff:18:2b:44:f3:
95:c1:be:ba:b5:85:9b:ec:dc:7d:b0:67:42:f5:a1:
4d:82:a2:98:3e:ba:cd:2f:ae:05:e9:84:c5:6a:53:
84:1d:05:e3:59:6d:4c:12:68:80:65:48:b2:4c:4f:
c2:a9:fa:57:56:64:95:24:af:29:18:5f:36:b0:be:
22:67:b9:0f:78:14:a0:97:c8:d0:26:cd:e4:73:fc:
87:44:e1:a8:e9:6e:96:78:7d:64:aa:65:85:e8:bd:
d9:3a:65:83:1b:8d:9c:1d:e0:af:e2:96:8e:b4:b7:
3c:8c:89:26:be:1c:3a:98:d9:f6:68:bd:0c:17:ed:
21:a4:8c:f9:26:f7:61:10:f2:9f:f8:79:e7:0b:e0:
54:d0:5c:72:25:48:d3:49:64:c8:3e:46:7e:cc:52:
cb:86:be:26:fc:90:ab:63:77:6d:27:31:78:38:fa:
6b:4d:68:3f:f4:0d:55:d6:25:ff:7f:05:f7:e9:74:
b3:8d:92:20:27:e8:96:04:06:76:36:20:25:5e:2d:
41:6f:8f:3c:ca:56:28:f3:f1:52:d7:bd:61:43:24:
0e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:50:FA:D0:4E:E5:2E:58:0A:C3:E3:C0:55:30:62:06:DD:F5:87:98
X509v3 Authority Key Identifier:
keyid:20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/NlD60E7lLlgKw-PAVTBiBt31h5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.97.16.0/22
91.240.224.0/24
103.141.24.0/23
185.17.196.0/22
185.175.90.0/24
188.64.34.0-188.64.39.255
193.35.56.0/22
193.105.188.0/24
194.69.165.0/24
195.74.52.0/22
195.144.8.0/24
195.191.218.0/23
IPv6:
2a03:ee40::/32
2a07:240::/29
2a10:4740::/29
2a11:2640::/31
2a11:2647::/32
Signature Algorithm: sha256WithRSAEncryption
53:34:4f:78:a6:41:c0:ef:53:4f:6c:1f:da:ff:ca:e8:b3:7f:
80:9f:a8:9e:e3:43:ba:4f:50:9d:61:d6:b2:0e:5f:da:12:2d:
df:f5:8a:ff:9d:ea:41:2b:fb:12:07:e1:3d:69:2a:30:86:95:
f1:90:51:a6:a0:b5:82:8e:b0:4d:ed:96:e4:85:d6:87:81:2a:
12:0d:69:62:aa:f6:2f:f7:4f:f9:b7:e2:ef:77:12:7c:d7:b6:
69:31:95:1e:93:18:09:22:02:e3:99:74:74:31:81:95:84:3f:
eb:d9:02:cc:ae:9f:45:d6:6e:a0:9f:cc:89:62:46:c9:f9:e5:
8e:6e:16:f4:54:df:0b:68:1a:39:cb:b1:f7:e1:d0:4f:54:fe:
08:34:dd:5f:55:be:27:92:98:80:72:61:b3:30:83:05:4c:32:
71:36:7b:2a:b1:21:28:35:56:ba:98:75:51:17:cd:65:d5:a8:
8b:1a:79:58:63:35:ea:b5:48:e4:43:1e:a1:8f:72:28:da:4b:
98:29:61:51:bb:f2:c3:2d:31:2b:a0:98:e0:eb:3f:c5:89:97:
86:a4:e6:d0:81:ea:21:19:84:c5:13:68:4c:d8:49:bd:89:51:
3d:58:2d:3f:87:c9:fd:49:54:17:4e:6c:47:60:4d:e2:fc:a5:
6f:b1:f8:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 14:12:46 2025 by rpki-client