Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/ngsJ7Yl8sCiuTC4QItqWzg7itrI.roa
File: ngsJ7Yl8sCiuTC4QItqWzg7itrI.roa (raw, json)
Hash identifier: UN6UoP3GwCiAeYx4upXvVQn1hk1aL2yEM2V/Zoie9XM=
Subject key identifier: 9E:0B:09:ED:89:7C:B0:28:AE:4C:2E:10:22:DA:96:CE:0E:E2:B6:B2
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 0198984523E57CD1AC587A14EEE85F9AA59C
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/ngsJ7Yl8sCiuTC4QItqWzg7itrI.roa
Signing time: Mon 11 Aug 2025 08:35:24 +0000
ROA not before: Mon 11 Aug 2025 08:35:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 77.83.48.0/23 maxlen: 23
77.83.48.0/24 maxlen: 24
77.83.49.0/24 maxlen: 24
86.62.53.0/24 maxlen: 24
86.62.54.0/24 maxlen: 24
95.214.244.0/22 maxlen: 24
193.9.56.0/24 maxlen: 24
193.160.74.0/24 maxlen: 24
193.160.75.0/24 maxlen: 24
194.124.41.0/24 maxlen: 24
213.109.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:98:45:23:e5:7c:d1:ac:58:7a:14:ee:e8:5f:9a:a5:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Aug 11 08:35:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e0b09ed897cb028ae4c2e1022da96ce0ee2b6b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f3:f9:c4:6d:2b:53:bf:15:02:1c:15:7e:e6:
a4:a7:53:ab:d7:ca:9c:8f:43:1f:5a:4d:b3:af:b3:
ac:27:4c:5e:87:3b:8c:b5:1b:01:39:02:3f:e4:f6:
8c:7f:03:b5:ab:5c:6d:35:ba:2f:dc:78:93:0e:bd:
18:dd:ae:3b:57:73:bb:49:e5:41:75:5f:27:cb:a2:
1c:a8:3a:43:1d:06:1c:09:25:66:56:6c:d3:f2:8c:
75:c3:92:d7:f2:7a:5c:9b:43:d3:82:11:e6:a0:21:
e1:3b:17:95:84:51:d6:7b:29:da:50:b0:ff:f2:92:
b1:e9:6c:67:01:68:9d:78:09:c3:41:e8:07:8c:eb:
f1:2e:6a:00:dc:65:50:0d:ad:b5:68:76:dc:65:be:
ed:72:6a:8b:09:b9:28:48:51:d2:c8:21:2f:e3:53:
a9:b2:00:85:15:f3:b1:5f:f0:04:ef:b8:e3:3c:d3:
db:eb:34:b0:49:3b:51:f3:86:00:d8:28:72:0c:94:
55:17:dc:e5:3a:5c:8e:80:3f:f0:de:e3:f4:a3:2e:
8e:4f:cd:f4:a1:ff:0b:f9:f0:58:21:d6:6a:6c:6a:
bc:45:09:d6:d7:c5:ba:fa:4b:5f:a4:05:25:8b:e8:
d9:1f:fd:85:13:aa:1e:22:c1:0c:88:f2:81:a3:cd:
a1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:0B:09:ED:89:7C:B0:28:AE:4C:2E:10:22:DA:96:CE:0E:E2:B6:B2
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/ngsJ7Yl8sCiuTC4QItqWzg7itrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.48.0/23
86.62.53.0-86.62.54.255
95.214.244.0/22
193.9.56.0/24
193.160.74.0/23
194.124.41.0/24
213.109.188.0/22
Signature Algorithm: sha256WithRSAEncryption
96:04:01:09:cd:a2:9c:3c:1e:8f:b7:65:eb:16:16:b6:7e:70:
44:82:44:cb:59:c6:56:0a:76:91:6a:0d:f0:42:98:24:ed:82:
06:18:23:89:25:11:d6:5a:d9:5b:a9:a3:a7:38:d3:0f:a8:83:
f5:ca:30:50:ca:bb:d4:0d:1c:f1:c6:c2:ca:46:3a:d3:f7:4e:
42:e1:cb:76:77:71:3c:e4:d9:ff:61:8a:13:6b:42:a8:13:9e:
b1:6b:76:0d:b6:ef:53:c6:47:b1:8e:1c:ec:17:01:86:55:4a:
b8:02:ca:61:21:66:63:c3:41:b9:38:a3:59:00:c2:4d:f1:ef:
bf:3a:fa:8f:8c:4f:8c:d9:b0:cb:2c:1d:b1:4a:eb:b9:6b:b1:
ca:99:9b:03:d9:c7:3e:59:53:68:e5:2b:99:40:27:7b:06:06:
a2:01:33:6e:a0:d8:05:19:15:60:a1:7d:3c:96:b8:b8:e8:6e:
dc:e2:5c:49:54:95:db:ec:f4:a7:d8:be:e9:a2:37:27:a8:13:
c7:79:20:3f:14:20:73:53:df:47:cb:53:a6:19:db:a1:40:13:
9d:83:c6:64:70:81:d3:b5:49:18:63:0d:fa:a1:83:75:69:b2:
74:67:01:58:cc:4b:fd:e4:39:f0:18:27:ed:a2:09:15:97:0a:
aa:b6:f0:b4
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAZiYRSPlfNGsWHoU7uhfmqWcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYzJiODM0ZmJjOTFhZjBlYzZiMWQzNGZkNjQwNTRkMjI2
OWExZmQwHhcNMjUwODExMDgzNTI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTBiMDllZDg5N2NiMDI4YWU0YzJlMTAyMmRhOTZjZTBlZTJiNmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvP5xG0rU78VAhwVfuakp1Or18qc
j0MfWk2zr7OsJ0xehzuMtRsBOQI/5PaMfwO1q1xtNbov3HiTDr0Y3a47V3O7SeVB
dV8ny6IcqDpDHQYcCSVmVmzT8ox1w5LX8npcm0PTghHmoCHhOxeVhFHWeynaULD/
8pKx6WxnAWideAnDQegHjOvxLmoA3GVQDa21aHbcZb7tcmqLCbkoSFHSyCEv41Op
sgCFFfOxX/AE77jjPNPb6zSwSTtR84YA2ChyDJRVF9zlOlyOgD/w3uP0oy6OT830
of8L+fBYIdZqbGq8RQnW18W6+ktfpAUli+jZH/2FE6oeIsEMiPKBo82hYQIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFJ4LCe2JfLAorkwuECLals4O4rayMB8GA1UdIwQY
MBaAFOLCuDT7yRrw7GsdNP1kBU0iaaH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2Et
OTk0ODA2ZjA4MWYwLzEvbmdzSjdZbDhzQ2l1VEM0UUl0cVd6ZzdpdHJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2EtOTk0ODA2ZjA4MWYw
LzEvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQBTVMwMAwD
BABWPjUDBABWPjYDBAJf1vQDBADBCTgDBAHBoEoDBADCfCkDBALVbbwwDQYJKoZI
hvcNAQELBQADggEBAJYEAQnNopw8Ho+3ZesWFrZ+cESCRMtZxlYKdpFqDfBCmCTt
ggYYI4klEdZa2Vupo6c40w+og/XKMFDKu9QNHPHGwspGOtP3TkLhy3Z3cTzk2f9h
ihNrQqgTnrFrdg2271PGR7GOHOwXAYZVSrgCymEhZmPDQbk4o1kAwk3x7786+o+M
T4zZsMssHbFK67lrscqZmwPZxz5ZU2jlK5lAJ3sGBqIBM26g2AUZFWChfTyWuLjo
btziXElUldvs9KfYvumiNyeoE8d5ID8UIHNT30fLU6YZ26FAE52DxmRwgdO1SRhj
Dfqhg3VpsnRnAVjMS/3kOfAYJ+2iCRWXCqq28LQ=
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:11:18 2025 by rpki-client