
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/B7c_NuomsMLePlv4BqYRjDtq6rA.roa
File: B7c_NuomsMLePlv4BqYRjDtq6rA.roa (raw, json)
Hash identifier: 9F/KOglkwN1+3aYHtjpMXcocrWjjPZ/arLWSx9kmqyY=
Subject key identifier: 07:B7:3F:36:EA:26:B0:C2:DE:3E:5B:F8:06:A6:11:8C:3B:6A:EA:B0
Certificate issuer: /CN=9f2bcd73705b937475a958c634edd64c9c64afb6
Certificate serial: 01978C0983FC1130CC98A8324A88753580CE
Authority key identifier: 9F:2B:CD:73:70:5B:93:74:75:A9:58:C6:34:ED:D6:4C:9C:64:AF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/B7c_NuomsMLePlv4BqYRjDtq6rA.roa
Signing time: Fri 20 Jun 2025 06:32:03 +0000
ROA not before: Fri 20 Jun 2025 06:32:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133073
IP address blocks: 45.15.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8c:09:83:fc:11:30:cc:98:a8:32:4a:88:75:35:80:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f2bcd73705b937475a958c634edd64c9c64afb6
Validity
Not Before: Jun 20 06:32:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07b73f36ea26b0c2de3e5bf806a6118c3b6aeab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ed:59:58:0a:7d:33:6c:99:f9:26:51:f9:0f:
ad:fa:72:d7:7a:9a:b9:28:3d:e3:8f:04:f2:03:48:
76:73:e8:d8:9d:b2:1c:32:ac:67:f3:6e:ff:27:8b:
09:3e:e2:dc:58:e1:88:ab:df:5b:b8:58:a2:f8:37:
98:e4:ee:b2:d9:c4:68:30:4c:0d:eb:30:af:b9:67:
5e:ad:77:b6:d8:59:b0:2f:c5:5d:53:1f:25:c5:7f:
ba:99:7c:4b:28:65:17:ed:90:e2:e2:b8:51:3c:44:
87:9f:97:20:85:2d:09:99:6c:de:ab:00:a7:af:af:
f2:e1:9b:c0:a8:bb:5e:73:10:00:56:24:a2:02:4e:
c0:87:ee:9e:7c:7f:bc:e6:8d:30:c9:11:06:f1:fc:
16:50:a3:0f:af:26:7d:b8:f4:d2:1f:ba:4c:21:54:
de:f5:9e:7c:9e:b2:52:6c:8e:5a:c7:f5:98:28:1f:
98:f0:96:bd:4e:4b:43:85:95:21:8a:d3:24:53:de:
92:37:93:ee:da:67:49:3f:b9:0e:0d:d8:ad:c0:a7:
d2:fd:e9:b8:d9:06:4a:67:8e:cf:03:94:b3:50:93:
07:4e:d6:2f:95:c7:48:b2:53:2d:8b:e3:10:e6:23:
8b:e3:a1:9f:37:a2:73:be:d2:00:f3:6e:d1:9d:e3:
09:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B7:3F:36:EA:26:B0:C2:DE:3E:5B:F8:06:A6:11:8C:3B:6A:EA:B0
X509v3 Authority Key Identifier:
keyid:9F:2B:CD:73:70:5B:93:74:75:A9:58:C6:34:ED:D6:4C:9C:64:AF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/B7c_NuomsMLePlv4BqYRjDtq6rA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.9.0/24
Signature Algorithm: sha256WithRSAEncryption
28:64:34:42:a7:06:bf:e9:21:88:98:55:4b:af:68:c6:ad:83:
97:5e:f4:b7:67:a1:ab:46:52:ba:a4:f3:86:e8:c6:95:e1:18:
dd:3c:7f:00:f7:29:50:6e:2e:fb:a7:48:47:81:cb:23:da:a7:
78:d8:42:d9:8e:1d:21:98:85:5b:e2:f1:9d:1e:46:ce:3a:ab:
f6:ad:93:13:63:1c:dd:18:da:a9:63:42:9a:2f:f5:33:ad:1b:
ed:5f:b5:52:b2:f1:56:c2:a1:3d:a2:55:67:da:f7:83:81:da:
75:a1:4e:b4:d0:e3:ab:68:f9:30:ea:b1:cf:88:0d:81:78:93:
62:a7:1f:2b:f3:75:8c:71:8b:b7:23:80:78:30:93:df:1d:2f:
96:26:ad:ba:56:30:03:c8:94:cc:3e:c7:71:65:bf:ce:6d:6c:
04:7a:6b:de:e1:b8:ef:cd:c0:eb:cc:a4:bf:ef:dd:ce:09:02:
ce:b3:b0:75:bf:46:74:ea:f3:d8:60:af:71:49:fd:34:34:23:
c3:46:cb:93:4a:7f:a2:fc:18:33:31:c3:82:78:39:5c:86:62:
1d:6c:d5:11:8b:b0:50:5d:b3:1b:7b:98:aa:8d:38:71:8b:0b:
c3:f4:a7:4b:23:fc:b2:4c:c7:66:ac:ce:05:df:73:88:49:fc:
c5:05:14:09
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZeMCYP8ETDMmKgySoh1NYDOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMmJjZDczNzA1YjkzNzQ3NWE5NThjNjM0ZWRkNjRjOWM2
NGFmYjYwHhcNMjUwNjIwMDYzMjAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwN2I3M2YzNmVhMjZiMGMyZGUzZTViZjgwNmE2MTE4YzNiNmFlYWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+1ZWAp9M2yZ+SZR+Q+t+nLXepq5
KD3jjwTyA0h2c+jYnbIcMqxn827/J4sJPuLcWOGIq99buFii+DeY5O6y2cRoMEwN
6zCvuWderXe22FmwL8VdUx8lxX+6mXxLKGUX7ZDi4rhRPESHn5cghS0JmWzeqwCn
r6/y4ZvAqLtecxAAViSiAk7Ah+6efH+85o0wyREG8fwWUKMPryZ9uPTSH7pMIVTe
9Z58nrJSbI5ax/WYKB+Y8Ja9TktDhZUhitMkU96SN5Pu2mdJP7kODditwKfS/em4
2QZKZ47PA5SzUJMHTtYvlcdIslMti+MQ5iOL46GfN6JzvtIA827RneMJ1QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAe3PzbqJrDC3j5b+AamEYw7auqwMB8GA1UdIwQY
MBaAFJ8rzXNwW5N0dalYxjTt1kycZK+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnl2TmMzQmJrM1IxcVZqR05PM1dUSnhrcjdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lOGRiYmItNzBkYS00MmY3LWFlNDct
OTA4NGZiMGJlOWMxLzEvQjdjX051b21zTUxlUGx2NEJxWVJqRHRxNnJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lOGRiYmItNzBkYS00MmY3LWFlNDctOTA4NGZiMGJlOWMx
LzEvbnl2TmMzQmJrM1IxcVZqR05PM1dUSnhrcjdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQ8JMA0G
CSqGSIb3DQEBCwUAA4IBAQAoZDRCpwa/6SGImFVLr2jGrYOXXvS3Z6GrRlK6pPOG
6MaV4RjdPH8A9ylQbi77p0hHgcsj2qd42ELZjh0hmIVb4vGdHkbOOqv2rZMTYxzd
GNqpY0KaL/UzrRvtX7VSsvFWwqE9olVn2veDgdp1oU600OOraPkw6rHPiA2BeJNi
px8r83WMcYu3I4B4MJPfHS+WJq26VjADyJTMPsdxZb/ObWwEemve4bjvzcDrzKS/
793OCQLOs7B1v0Z06vPYYK9xSf00NCPDRsuTSn+i/BgzMcOCeDlchmIdbNURi7BQ
XbMbe5iqjThxiwvD9KdLI/yyTMdmrM4F33OISfzFBRQJ
-----END CERTIFICATE-----
Generated at Tue Jul 1 07:04:46 2025 by rpki-client