Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/naJDw79uibVkaGaH_0eV0J5B2dY.roa
File: naJDw79uibVkaGaH_0eV0J5B2dY.roa (raw, json)
Hash identifier: yDaZVgS4cevhnu0has1L4JpEN6Da8ACyFkjbCjw8XE4=
Subject key identifier: 9D:A2:43:C3:BF:6E:89:B5:64:68:66:87:FF:47:95:D0:9E:41:D9:D6
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 0199E8FF24C2DF9A87E6AA3B7F38DA8E0D1C
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/naJDw79uibVkaGaH_0eV0J5B2dY.roa
Signing time: Wed 15 Oct 2025 17:50:59 +0000
ROA not before: Wed 15 Oct 2025 17:50:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138888
IP address blocks: 84.233.132.0/23 maxlen: 23
84.233.164.0/23 maxlen: 23
84.233.200.0/23 maxlen: 23
84.233.220.0/23 maxlen: 23
84.233.232.0/23 maxlen: 23
84.233.240.0/23 maxlen: 23
195.86.2.0/23 maxlen: 23
195.86.8.0/21 maxlen: 21
195.86.16.0/22 maxlen: 22
195.86.20.0/23 maxlen: 23
195.86.28.0/22 maxlen: 22
195.86.32.0/22 maxlen: 22
195.86.36.0/23 maxlen: 23
195.86.44.0/22 maxlen: 22
195.86.50.0/23 maxlen: 23
195.86.52.0/22 maxlen: 22
195.86.60.0/22 maxlen: 22
195.86.64.0/23 maxlen: 23
195.86.68.0/22 maxlen: 22
195.86.72.0/21 maxlen: 21
195.86.80.0/20 maxlen: 20
195.86.96.0/20 maxlen: 20
195.86.114.0/23 maxlen: 23
195.86.116.0/22 maxlen: 22
195.86.120.0/22 maxlen: 22
195.86.128.0/23 maxlen: 23
195.86.132.0/22 maxlen: 22
195.86.136.0/21 maxlen: 21
195.86.144.0/20 maxlen: 20
195.86.162.0/23 maxlen: 23
195.86.164.0/22 maxlen: 22
195.86.168.0/21 maxlen: 21
195.86.176.0/20 maxlen: 20
195.86.192.0/20 maxlen: 20
195.86.212.0/22 maxlen: 22
195.86.216.0/23 maxlen: 23
195.86.224.0/21 maxlen: 21
195.86.232.0/22 maxlen: 22
195.86.236.0/23 maxlen: 23
195.86.242.0/23 maxlen: 23
195.86.244.0/22 maxlen: 22
195.86.248.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e8:ff:24:c2:df:9a:87:e6:aa:3b:7f:38:da:8e:0d:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 15 17:50:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9da243c3bf6e89b564686687ff4795d09e41d9d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0c:f0:2d:c7:95:c9:a3:3b:df:f9:7f:86:9d:
ab:24:b5:e2:ae:20:89:6c:fb:d1:c3:6a:e2:ca:a6:
bf:5d:cb:3d:23:2a:4d:a8:e9:ba:56:86:ba:dc:0f:
eb:df:1a:55:91:8e:1e:f4:b9:e7:40:f7:d2:84:f1:
bf:dc:15:bc:60:82:7e:38:5c:cd:99:65:ab:d0:70:
ca:55:8d:88:f2:84:f4:ef:ca:2f:ba:c9:b1:a3:52:
7a:a3:9f:a9:fe:78:3f:8b:a4:3b:b0:d7:10:1b:49:
b8:5f:46:ff:33:38:19:2a:4b:3f:10:43:f3:dd:11:
59:f1:e9:a5:06:4f:eb:25:52:60:83:cd:bc:26:e7:
df:22:7e:42:5b:ba:92:83:11:00:bb:a9:2d:91:2f:
2b:b1:84:94:c1:73:9d:c8:6a:68:68:46:c0:f1:ab:
7a:c5:4d:9f:3b:c5:e1:75:5e:0c:d9:f8:6c:15:18:
b9:7b:ee:dc:eb:c4:0b:11:e4:13:c2:92:fc:cb:11:
9e:2a:db:93:66:85:ce:af:55:11:d6:f2:15:80:6f:
c2:1a:4c:60:78:c9:f6:a1:ad:7f:33:b2:a7:0c:16:
17:b4:8d:fa:6c:08:b8:53:fd:e6:17:7e:c6:68:20:
42:d5:04:cc:e6:68:b7:ad:8b:57:03:fc:c1:71:31:
27:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A2:43:C3:BF:6E:89:B5:64:68:66:87:FF:47:95:D0:9E:41:D9:D6
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/naJDw79uibVkaGaH_0eV0J5B2dY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.233.132.0/23
84.233.164.0/23
84.233.200.0/23
84.233.220.0/23
84.233.232.0/23
84.233.240.0/23
195.86.2.0/23
195.86.8.0-195.86.21.255
195.86.28.0-195.86.37.255
195.86.44.0/22
195.86.50.0-195.86.55.255
195.86.60.0-195.86.65.255
195.86.68.0-195.86.111.255
195.86.114.0-195.86.123.255
195.86.128.0/23
195.86.132.0-195.86.159.255
195.86.162.0-195.86.207.255
195.86.212.0-195.86.217.255
195.86.224.0-195.86.237.255
195.86.242.0-195.86.255.255
Signature Algorithm: sha256WithRSAEncryption
8a:61:b6:42:c0:63:5e:cd:aa:86:4e:15:1d:9b:2b:86:00:5c:
d0:1e:aa:b7:b8:5b:4a:1a:b4:ae:61:d9:e2:2b:56:74:6e:76:
b5:1b:08:f8:ee:db:77:fb:4f:ff:66:e6:d1:bf:b0:38:6d:28:
95:d7:bf:41:b3:2d:88:be:f5:7c:7b:b9:ee:80:77:8a:f8:4d:
5f:6b:72:e0:f6:19:5d:81:42:91:15:2a:27:53:a4:c7:e8:ef:
f3:73:33:4e:33:ce:c4:85:a9:e6:5f:77:08:6e:58:03:50:a7:
99:fb:97:4a:35:17:98:a5:24:1c:77:19:f4:38:d8:df:5b:5e:
8e:d5:4c:3d:6c:bf:6f:df:16:25:54:78:7a:e2:07:9c:be:4e:
0e:00:41:33:fc:4d:38:48:fe:59:12:af:61:68:18:a2:94:7a:
98:ab:47:bd:24:5d:e1:b5:83:0d:63:a7:07:1c:2d:6d:d4:58:
e5:5e:cf:84:2c:9e:12:0b:45:af:91:8c:34:3c:99:eb:2e:d8:
9a:c5:e9:51:38:6f:cf:d3:bd:48:5b:33:cc:90:39:00:80:81:
22:80:8b:40:22:ca:c2:be:c1:ee:f7:f4:6e:bd:f3:5f:4b:5d:
dc:fe:91:57:ad:74:0a:1d:91:f4:c4:0d:33:b4:c5:38:a2:e0:
9e:fe:26:f5
-----BEGIN CERTIFICATE-----
MIIFyzCCBLOgAwIBAgISAZno/yTC35qH5qo7fzjajg0cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjUxMDE1MTc1MDU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZGEyNDNjM2JmNmU4OWI1NjQ2ODY2ODdmZjQ3OTVkMDllNDFkOWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQzwLceVyaM73/l/hp2rJLXiriCJ
bPvRw2riyqa/Xcs9IypNqOm6Voa63A/r3xpVkY4e9LnnQPfShPG/3BW8YIJ+OFzN
mWWr0HDKVY2I8oT078ovusmxo1J6o5+p/ng/i6Q7sNcQG0m4X0b/MzgZKks/EEPz
3RFZ8emlBk/rJVJgg828JuffIn5CW7qSgxEAu6ktkS8rsYSUwXOdyGpoaEbA8at6
xU2fO8XhdV4M2fhsFRi5e+7c68QLEeQTwpL8yxGeKtuTZoXOr1UR1vIVgG/CGkxg
eMn2oa1/M7KnDBYXtI36bAi4U/3mF37GaCBC1QTM5mi3rYtXA/zBcTEnVwIDAQAB
o4IC1zCCAtMwHQYDVR0OBBYEFJ2iQ8O/bom1ZGhmh/9HldCeQdnWMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvbmFKRHc3OXVpYlZrYUdhSF8wZVYwSjVCMmRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHsBggrBgEFBQcBBwEB/wSB3DCB2TCB1gQCAAEwgc8DBAFU
6YQDBAFU6aQDBAFU6cgDBAFU6dwDBAFU6egDBAFU6fADBAHDVgIwDAMEA8NWCAME
AcNWFDAMAwQCw1YcAwQBw1YkAwQCw1YsMAwDBAHDVjIDBAPDVjAwDAMEAsNWPAME
AcNWQDAMAwQCw1ZEAwQEw1ZgMAwDBAHDVnIDBALDVngDBAHDVoAwDAMEAsNWhAME
BcNWgDAMAwQBw1aiAwQEw1bAMAwDBALDVtQDBAHDVtgwDAMEBcNW4AMEAcNW7DAL
AwQBw1byAwMAw1YwDQYJKoZIhvcNAQELBQADggEBAIphtkLAY17NqoZOFR2bK4YA
XNAeqre4W0oatK5h2eIrVnRudrUbCPju23f7T/9m5tG/sDhtKJXXv0GzLYi+9Xx7
ue6Ad4r4TV9rcuD2GV2BQpEVKidTpMfo7/NzM04zzsSFqeZfdwhuWANQp5n7l0o1
F5ilJBx3GfQ42N9bXo7VTD1sv2/fFiVUeHriB5y+Tg4AQTP8TThI/lkSr2FoGKKU
epirR70kXeG1gw1jpwccLW3UWOVez4QsnhILRa+RjDQ8mesu2JrF6VE4b8/TvUhb
M8yQOQCAgSKAi0AiysK+we739G69819LXdz+kVetdAodkfTEDTO0xTii4J7+JvU=
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:13:15 2025 by rpki-client