Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/NznSTmaNmRlH_azHj2PejtUv32Y.roa
File: NznSTmaNmRlH_azHj2PejtUv32Y.roa (raw, json)
Hash identifier: vqJasZBwevHspmBMCQpj1DtVpKmfJrLVqU+PRrcMqfM=
Subject key identifier: 37:39:D2:4E:66:8D:99:19:47:FD:AC:C7:8F:63:DE:8E:D5:2F:DF:66
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 01971B04E4A405FF3D91930095AB2D711A45
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/NznSTmaNmRlH_azHj2PejtUv32Y.roa
Signing time: Thu 29 May 2025 07:49:54 +0000
ROA not before: Thu 29 May 2025 07:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 37.148.128.0/22 maxlen: 24
93.88.153.0/24 maxlen: 24
93.88.154.0/23 maxlen: 24
93.88.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1b:04:e4:a4:05:ff:3d:91:93:00:95:ab:2d:71:1a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: May 29 07:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3739d24e668d991947fdacc78f63de8ed52fdf66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f8:06:ef:69:f5:85:64:55:2f:96:62:4a:c6:
4e:32:57:d1:af:a6:70:86:30:4c:98:54:21:3d:fd:
7c:ca:32:c5:e1:88:89:57:19:05:da:ca:08:0d:24:
a4:98:a6:f8:3d:25:f7:91:69:55:ed:88:5c:e5:1f:
95:33:39:57:dd:47:b1:03:22:a3:54:a5:6d:69:87:
2e:a9:20:de:49:c9:99:6a:e4:6e:00:f8:91:4b:3d:
46:3a:5e:71:50:08:e4:94:1d:20:12:58:9f:1b:4f:
ab:aa:d0:6e:a3:f8:e0:a3:44:29:c6:7d:74:fb:35:
7a:da:43:37:9e:16:b7:53:c2:17:05:88:23:7c:83:
2d:8c:71:24:b3:8c:ae:57:37:f6:00:ff:a9:2c:c6:
7e:2a:6b:8f:36:00:50:53:4f:bd:51:3d:76:44:c4:
3d:6e:1e:df:70:ab:f3:f7:70:fd:43:42:a7:3f:25:
53:98:09:3b:9e:a4:2b:90:bf:8a:48:a0:95:6d:b2:
a7:03:2b:73:56:c4:b7:31:39:f9:47:2c:bd:e6:cf:
2c:f3:80:63:1d:83:ac:11:55:f0:49:32:86:1d:1c:
91:26:47:a7:bb:9f:98:ab:df:ae:6f:a2:b2:d4:69:
05:a4:7e:62:86:98:7a:bf:1c:de:4a:50:7e:ee:47:
63:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:39:D2:4E:66:8D:99:19:47:FD:AC:C7:8F:63:DE:8E:D5:2F:DF:66
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/NznSTmaNmRlH_azHj2PejtUv32Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.128.0/22
93.88.153.0-93.88.155.255
93.88.157.0/24
Signature Algorithm: sha256WithRSAEncryption
45:34:d2:78:8b:44:06:99:80:fe:92:d0:32:c7:ce:f5:45:36:
6a:91:e9:21:7a:a3:6c:49:ec:9a:14:89:9f:70:ce:52:eb:63:
fd:c0:8a:35:00:2d:1a:b9:ea:76:e8:f0:29:96:5d:7c:73:4e:
ba:4d:04:67:5f:15:56:18:e9:a8:20:6d:63:0b:d6:2a:64:c7:
9d:f7:13:be:a8:52:68:60:f5:80:77:2f:2f:2a:54:dc:45:8e:
7b:c9:69:d3:f3:fe:ba:32:d2:30:1d:50:bb:68:96:5e:f1:39:
30:f6:21:43:de:fb:36:5a:b7:46:ae:dd:36:48:a1:db:74:38:
1e:b4:ab:f3:dd:62:76:e4:c6:9b:ae:ec:1f:a1:01:a0:ff:8a:
fe:bf:14:a8:35:e5:d9:c9:8a:82:c8:4b:05:59:fc:21:e1:50:
25:15:0b:b4:86:6f:00:a2:95:af:f6:4f:6d:c6:44:5c:47:9d:
f9:70:89:3e:00:5c:1e:67:fa:94:6d:f4:ea:de:1b:ae:11:e5:
f7:f1:b1:9a:89:c0:7e:20:f0:9f:1e:27:16:fb:e3:de:31:19:
90:c0:e0:0f:ab:3b:1d:ed:75:89:9d:ae:e0:3e:bf:ee:19:85:
0c:fe:e1:4f:74:3e:12:d1:a2:f0:f4:01:79:14:30:dd:12:6b:
69:f0:2a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:21:14 2025 by rpki-client