Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/NJaotZFnvbCZC6dKCr_vEzEYn6M.roa
File: NJaotZFnvbCZC6dKCr_vEzEYn6M.roa (raw, json)
Hash identifier: dqeYK6phWm8PSJhw0mmBUevUz1KleMZYBxhoQuo4/mw=
Subject key identifier: 34:96:A8:B5:91:67:BD:B0:99:0B:A7:4A:0A:BF:EF:13:31:18:9F:A3
Certificate issuer: /CN=3a92f5d936752baf2d0df713299499cecfa9f48d
Certificate serial: 0198AD17087F9530A1ED4C04EA1775F1ACCF
Authority key identifier: 3A:92:F5:D9:36:75:2B:AF:2D:0D:F7:13:29:94:99:CE:CF:A9:F4:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/NJaotZFnvbCZC6dKCr_vEzEYn6M.roa
Signing time: Fri 15 Aug 2025 09:37:04 +0000
ROA not before: Fri 15 Aug 2025 09:37:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35444
IP address blocks: 45.93.220.0/22 maxlen: 22
80.90.80.0/20 maxlen: 20
80.90.80.0/24 maxlen: 24
80.90.83.0/24 maxlen: 24
80.90.87.0/24 maxlen: 24
80.90.89.0/24 maxlen: 24
80.90.90.0/24 maxlen: 24
80.90.91.0/24 maxlen: 24
80.90.92.0/24 maxlen: 24
81.26.200.0/21 maxlen: 21
81.26.200.0/24 maxlen: 24
81.26.201.0/24 maxlen: 24
81.26.202.0/24 maxlen: 24
81.26.203.0/24 maxlen: 24
81.26.204.0/24 maxlen: 24
81.26.205.0/24 maxlen: 24
81.26.206.0/23 maxlen: 24
93.93.168.0/22 maxlen: 22
93.93.168.0/23 maxlen: 23
93.93.168.0/24 maxlen: 24
93.93.169.0/24 maxlen: 24
93.93.170.0/23 maxlen: 23
93.93.170.0/24 maxlen: 24
93.93.171.0/24 maxlen: 24
185.132.92.0/23 maxlen: 23
185.132.92.0/24 maxlen: 24
185.132.93.0/24 maxlen: 24
185.132.94.0/24 maxlen: 24
185.132.95.0/24 maxlen: 24
185.158.0.0/22 maxlen: 22
185.158.0.0/23 maxlen: 23
185.158.0.0/24 maxlen: 24
185.158.1.0/24 maxlen: 24
185.158.2.0/23 maxlen: 23
185.158.2.0/24 maxlen: 24
185.158.3.0/24 maxlen: 24
185.175.252.0/22 maxlen: 22
185.175.254.0/24 maxlen: 24
185.187.0.0/22 maxlen: 23
185.187.0.0/23 maxlen: 23
185.187.0.0/24 maxlen: 24
185.187.1.0/24 maxlen: 24
185.187.2.0/23 maxlen: 23
185.187.2.0/24 maxlen: 24
185.187.3.0/24 maxlen: 24
185.212.188.0/22 maxlen: 22
185.212.188.0/23 maxlen: 23
185.212.188.0/24 maxlen: 24
185.212.189.0/24 maxlen: 24
185.212.190.0/23 maxlen: 23
185.212.190.0/24 maxlen: 24
185.212.191.0/24 maxlen: 24
185.239.8.0/22 maxlen: 22
185.239.8.0/23 maxlen: 23
185.239.8.0/24 maxlen: 24
185.239.9.0/24 maxlen: 24
185.239.10.0/23 maxlen: 23
185.239.10.0/24 maxlen: 24
185.239.11.0/24 maxlen: 24
2a03:2de0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ad:17:08:7f:95:30:a1:ed:4c:04:ea:17:75:f1:ac:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a92f5d936752baf2d0df713299499cecfa9f48d
Validity
Not Before: Aug 15 09:37:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3496a8b59167bdb0990ba74a0abfef1331189fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:24:b3:00:2e:ac:b9:51:14:fe:04:65:82:9e:
ec:c0:7c:d0:eb:0b:89:67:2f:dd:53:23:39:96:72:
37:78:2e:41:0f:d5:b8:19:b9:34:6d:b1:f3:2f:90:
11:91:ed:6a:2a:ce:d7:95:cd:e1:d9:b8:72:d0:f3:
bd:24:a9:bb:db:93:f9:68:0b:2b:40:f3:58:13:4c:
fc:2e:9d:e0:d2:07:da:3d:e8:6e:2d:d1:81:6d:05:
33:05:85:12:33:29:62:89:8c:07:04:12:31:cf:fb:
ab:fd:f6:e8:20:f7:ee:65:8f:e5:4a:87:7e:39:04:
9d:79:5c:50:49:7a:9b:5d:9e:d4:9e:77:6e:99:91:
db:78:3f:8b:70:f2:62:3f:12:09:36:85:4c:b3:3e:
49:93:44:c9:bc:f0:a4:eb:c7:14:97:86:b7:40:f0:
e9:28:de:52:fd:a4:2a:c1:f0:95:45:24:00:bd:69:
e2:62:4e:73:d1:21:50:ee:d7:da:5c:90:38:ff:c6:
af:67:65:f4:92:94:bd:28:fb:0c:25:e4:4a:28:72:
f2:fd:6f:1c:ff:fe:e0:e9:f0:fe:f0:76:b7:b5:62:
be:7b:ac:9d:a9:82:6a:4e:1b:53:57:42:8a:80:27:
80:70:b4:3a:9a:0b:73:c0:b8:1a:8d:0b:14:75:76:
d2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:96:A8:B5:91:67:BD:B0:99:0B:A7:4A:0A:BF:EF:13:31:18:9F:A3
X509v3 Authority Key Identifier:
keyid:3A:92:F5:D9:36:75:2B:AF:2D:0D:F7:13:29:94:99:CE:CF:A9:F4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/NJaotZFnvbCZC6dKCr_vEzEYn6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.220.0/22
80.90.80.0/20
81.26.200.0/21
93.93.168.0/22
185.132.92.0/22
185.158.0.0/22
185.175.252.0/22
185.187.0.0/22
185.212.188.0/22
185.239.8.0/22
IPv6:
2a03:2de0::/32
Signature Algorithm: sha256WithRSAEncryption
11:8d:53:a0:74:c4:58:13:03:91:49:c4:20:3f:a5:9a:0b:c4:
37:b9:ad:d1:be:3c:30:99:90:7b:81:d8:70:6c:87:b3:2b:67:
ec:6e:fd:67:81:cc:5a:f2:13:de:04:d8:a4:6b:c5:75:97:0e:
3f:b5:9b:d7:b5:bf:72:0b:f6:6c:5a:2b:2c:34:2c:49:b7:e3:
cf:ce:b5:3e:f2:b2:7c:20:97:cd:0f:43:0f:e8:a8:d7:3f:79:
df:05:d8:dd:37:09:c9:08:78:fd:de:50:bf:88:1d:71:2e:1d:
2d:dd:2f:18:97:d8:e6:b0:13:3c:60:34:7e:fe:cc:e0:61:48:
92:c2:8d:40:96:e6:bc:f6:09:aa:a8:94:6c:bd:b7:54:1c:ff:
46:10:a5:22:a9:50:88:c4:87:ae:89:8c:b8:42:58:f6:21:18:
e3:48:a7:64:47:6f:76:00:bb:e4:f7:2c:62:28:f8:59:65:9e:
5c:c2:9e:b9:8f:b0:37:fe:34:f7:8a:e4:02:d8:99:98:6a:10:
05:02:cd:43:b9:23:72:32:33:c0:c0:17:32:ee:d5:a4:10:ee:
f5:96:d0:8e:0d:8b:d7:ae:9f:cc:6a:fc:2b:65:d5:94:77:76:
fe:f6:29:50:b8:8c:0e:ad:af:18:a3:21:d0:98:cb:4a:65:9c:
4a:3e:de:e0
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgISAZitFwh/lTCh7UwE6hd18azPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhOTJmNWQ5MzY3NTJiYWYyZDBkZjcxMzI5OTQ5OWNlY2Zh
OWY0OGQwHhcNMjUwODE1MDkzNzA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNDk2YThiNTkxNjdiZGIwOTkwYmE3NGEwYWJmZWYxMzMxMTg5ZmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriSzAC6suVEU/gRlgp7swHzQ6wuJ
Zy/dUyM5lnI3eC5BD9W4Gbk0bbHzL5ARke1qKs7Xlc3h2bhy0PO9JKm725P5aAsr
QPNYE0z8Lp3g0gfaPehuLdGBbQUzBYUSMyliiYwHBBIxz/ur/fboIPfuZY/lSod+
OQSdeVxQSXqbXZ7UnndumZHbeD+LcPJiPxIJNoVMsz5Jk0TJvPCk68cUl4a3QPDp
KN5S/aQqwfCVRSQAvWniYk5z0SFQ7tfaXJA4/8avZ2X0kpS9KPsMJeRKKHLy/W8c
//7g6fD+8Ha3tWK+e6ydqYJqThtTV0KKgCeAcLQ6mgtzwLgajQsUdXbSfwIDAQAB
o4ICTjCCAkowHQYDVR0OBBYEFDSWqLWRZ72wmQunSgq/7xMxGJ+jMB8GA1UdIwQY
MBaAFDqS9dk2dSuvLQ33EymUmc7PqfSNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3BMMTJUWjFLNjh0RGZjVEtaU1p6cy1wOUkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS83Y2QxNTctYzU4Zi00Y2I5LTgyNTIt
MTY5NmIyNDZjZDUwLzEvTkphb3RaRm52YkNaQzZkS0NyX3ZFekVZbjZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS83Y2QxNTctYzU4Zi00Y2I5LTgyNTItMTY5NmIyNDZjZDUw
LzEvT3BMMTJUWjFLNjh0RGZjVEtaU1p6cy1wOUkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGQGCCsGAQUFBwEHAQH/BFUwUzBCBAIAATA8AwQCLV3cAwQE
UFpQAwQDURrIAwQCXV2oAwQCuYRcAwQCuZ4AAwQCua/8AwQCubsAAwQCudS8AwQC
ue8IMA0EAgACMAcDBQAqAy3gMA0GCSqGSIb3DQEBCwUAA4IBAQARjVOgdMRYEwOR
ScQgP6WaC8Q3ua3RvjwwmZB7gdhwbIezK2fsbv1ngcxa8hPeBNika8V1lw4/tZvX
tb9yC/ZsWissNCxJt+PPzrU+8rJ8IJfND0MP6KjXP3nfBdjdNwnJCHj93lC/iB1x
Lh0t3S8Yl9jmsBM8YDR+/szgYUiSwo1Alua89gmqqJRsvbdUHP9GEKUiqVCIxIeu
iYy4Qlj2IRjjSKdkR292ALvk9yxiKPhZZZ5cwp65j7A3/jT3iuQC2JmYahAFAs1D
uSNyMjPAwBcy7tWkEO71ltCODYvXrp/MavwrZdWUd3b+9ilQuIwOra8YoyHQmMtK
ZZxKPt7g
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:30:46 2025 by rpki-client