Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/nuJCufKxfSGnrF6IbE2YGjzO2l4.roa
File: nuJCufKxfSGnrF6IbE2YGjzO2l4.roa (raw, json)
Hash identifier: ObS0zDmka61xgQPQQs4ANrf813hyHmHt6WHq/r3ANPk=
Subject key identifier: 9E:E2:42:B9:F2:B1:7D:21:A7:AC:5E:88:6C:4D:98:1A:3C:CE:DA:5E
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01993776CA80760D4FD837C9864DB0EFD773
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/nuJCufKxfSGnrF6IbE2YGjzO2l4.roa
Signing time: Thu 11 Sep 2025 06:29:15 +0000
ROA not before: Thu 11 Sep 2025 06:29:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61002
IP address blocks: 80.96.107.0/24 maxlen: 24
80.97.55.0/24 maxlen: 24
85.122.44.0/24 maxlen: 24
217.156.28.0/24 maxlen: 24
217.156.108.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:76:ca:80:76:0d:4f:d8:37:c9:86:4d:b0:ef:d7:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Sep 11 06:29:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ee242b9f2b17d21a7ac5e886c4d981a3cceda5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:13:f6:ba:5b:c1:4c:69:6d:13:d6:d8:1e:b7:
28:08:f2:9a:7e:db:b7:87:ef:e9:2c:a0:9b:a9:6f:
4d:e7:8c:ec:c5:30:9b:ef:6e:be:c0:d6:98:dd:6a:
e4:d9:86:85:5d:f2:15:63:cf:70:57:0e:be:dd:1a:
26:52:d3:b4:b3:10:70:96:7a:d0:3a:6c:04:ba:2a:
72:a0:e4:62:40:34:93:56:99:0e:29:a7:06:60:d4:
19:a6:5a:07:4a:54:f6:6f:f7:29:dc:75:d6:48:a0:
13:03:b6:63:a9:6c:66:78:e3:08:8b:e2:b2:45:8f:
e4:51:11:b4:06:70:5c:42:48:80:b2:1f:c0:e5:c3:
4f:95:34:12:47:a3:01:25:a5:92:d8:0f:c7:f1:3b:
6e:cc:33:1d:d8:0f:21:33:a8:e4:97:ad:42:2d:9a:
c3:4c:27:b4:48:10:2e:37:88:4d:6b:d1:29:90:45:
34:ef:ae:4f:c3:52:d2:52:f4:23:a5:be:3f:a3:11:
dd:1a:fc:66:d5:d7:5a:af:31:0b:35:bd:2b:17:ae:
e0:19:86:69:dc:30:44:07:59:46:7a:aa:44:48:bd:
7a:3a:a3:5b:04:9e:57:e3:ed:9c:49:57:44:b4:5c:
09:46:50:f2:27:ec:e0:b2:ba:cd:10:f8:76:5a:17:
a3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E2:42:B9:F2:B1:7D:21:A7:AC:5E:88:6C:4D:98:1A:3C:CE:DA:5E
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/nuJCufKxfSGnrF6IbE2YGjzO2l4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.107.0/24
80.97.55.0/24
85.122.44.0/24
217.156.28.0/24
217.156.108.0/23
Signature Algorithm: sha256WithRSAEncryption
56:af:2a:be:f9:c2:74:2f:0f:ba:34:8f:e9:c0:d8:30:eb:69:
62:67:d7:67:a5:61:3d:67:c9:71:58:d0:d9:80:e1:21:8e:6b:
3a:0b:01:d2:60:48:e6:0d:95:f5:15:17:a6:90:d2:81:2c:58:
0a:cf:38:c4:c1:46:52:6a:c1:20:15:8b:14:9c:2b:e4:92:76:
3d:4e:6e:df:94:7f:5c:87:3a:d1:eb:76:cd:12:6f:f0:ec:4a:
e8:e6:21:09:ce:e8:a4:a4:02:f8:c4:c1:dd:72:61:87:48:2a:
5c:dc:b8:e1:f8:33:33:1f:b8:b7:39:3d:00:50:24:60:d0:e6:
e6:2a:fb:89:80:09:a0:1b:66:fd:37:4a:3a:6f:7d:b4:05:42:
b4:43:57:9f:7f:1e:87:36:86:76:3b:36:c5:49:55:5a:6c:b6:
44:a8:24:c6:5e:e7:e0:d5:ee:4e:7e:dd:ec:5e:29:d5:e3:11:
19:c1:92:23:a3:20:62:9f:93:35:73:af:bc:a3:c3:77:4d:3f:
17:ee:99:46:25:ce:8f:28:de:c4:df:95:e2:e7:58:14:f2:ea:
92:3b:bd:28:be:d6:47:a9:87:9e:9b:20:0d:60:f0:9b:37:78:
2c:55:07:b2:07:74:e6:2b:32:0c:c5:e0:76:ad:28:c3:af:e1:
ff:3d:c7:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:58:46 2025 by rpki-client