Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/NNX3NhO0woxXF98anYaBIKxn8BQ.roa
File: NNX3NhO0woxXF98anYaBIKxn8BQ.roa (raw, json)
Hash identifier: V3Enl+XbNx7OXKIm18lDqjvTWLxanoBWya7tgDVhp5w=
Subject key identifier: 34:D5:F7:36:13:B4:C2:8C:57:17:DF:1A:9D:86:81:20:AC:67:F0:14
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 0198CD021E67658386A872C5547518C169EC
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/NNX3NhO0woxXF98anYaBIKxn8BQ.roa
Signing time: Thu 21 Aug 2025 14:22:04 +0000
ROA not before: Thu 21 Aug 2025 14:22:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 32787
IP address blocks: 2.17.108.0/22 maxlen: 22
2.17.120.0/22 maxlen: 22
2.17.192.0/22 maxlen: 22
2.17.192.0/24 maxlen: 24
2.17.193.0/24 maxlen: 24
2.17.194.0/24 maxlen: 24
2.17.195.0/24 maxlen: 24
2.18.212.0/22 maxlen: 22
2.19.4.0/22 maxlen: 22
2.21.112.0/24 maxlen: 24
2.21.113.0/24 maxlen: 24
2.21.114.0/24 maxlen: 24
2.21.115.0/24 maxlen: 24
2.21.116.0/24 maxlen: 24
2.21.117.0/24 maxlen: 24
2.21.118.0/24 maxlen: 24
2.21.119.0/24 maxlen: 24
2.21.120.0/24 maxlen: 24
2.21.121.0/24 maxlen: 24
2.21.123.0/24 maxlen: 24
2.21.124.0/24 maxlen: 24
2.21.125.0/24 maxlen: 24
2.21.126.0/24 maxlen: 24
2.21.127.0/24 maxlen: 24
2.21.175.0/24 maxlen: 24
2.23.128.0/23 maxlen: 23
2.23.130.0/23 maxlen: 23
2.23.132.0/23 maxlen: 23
92.122.184.0/24 maxlen: 24
92.122.185.0/24 maxlen: 24
92.122.207.0/24 maxlen: 24
93.191.168.0/24 maxlen: 24
93.191.169.0/24 maxlen: 24
93.191.172.0/24 maxlen: 24
95.100.157.0/24 maxlen: 24
95.100.180.0/24 maxlen: 24
95.100.212.0/24 maxlen: 24
95.100.213.0/24 maxlen: 24
95.100.214.0/24 maxlen: 24
95.100.215.0/24 maxlen: 24
95.100.253.0/24 maxlen: 24
95.101.117.0/24 maxlen: 24
95.101.118.0/24 maxlen: 24
95.101.204.0/22 maxlen: 22
2a02:2370:1::/48 maxlen: 48
2a02:2370:2::/48 maxlen: 48
2a02:2370:3::/48 maxlen: 48
2a02:2370:4::/48 maxlen: 48
2a02:2370:5::/48 maxlen: 48
2a02:2370:6::/48 maxlen: 48
2a02:2370:101::/48 maxlen: 48
2a02:2370:102::/48 maxlen: 48
2a02:2370:103::/48 maxlen: 48
2a02:2370:104::/48 maxlen: 48
2a02:2370:105::/48 maxlen: 48
2a02:2370:106::/48 maxlen: 48
2a02:2370:200::/48 maxlen: 48
2a02:2370:201::/48 maxlen: 48
2a02:2370:202::/48 maxlen: 48
2a02:2370:203::/48 maxlen: 48
2a02:2370:204::/48 maxlen: 48
2a02:2370:205::/48 maxlen: 48
2a02:2370:206::/48 maxlen: 48
2a02:2370:207::/48 maxlen: 48
2a02:2370:208::/48 maxlen: 48
2a02:2370:209::/48 maxlen: 48
2a02:2370:20a::/48 maxlen: 48
2a02:2370:20b::/48 maxlen: 48
2a02:2370:20c::/48 maxlen: 48
2a02:2370:4000::/48 maxlen: 48
2a02:2370:8000::/48 maxlen: 48
2a02:2370:c000::/48 maxlen: 48
2a02:2370:f000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cd:02:1e:67:65:83:86:a8:72:c5:54:75:18:c1:69:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Aug 21 14:22:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=34d5f73613b4c28c5717df1a9d868120ac67f014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:60:cb:66:e3:35:d8:f9:1c:fa:ea:0e:b6:b0:
b6:57:41:db:43:b0:da:88:73:98:8c:3c:d4:33:cc:
a4:21:a9:da:d0:55:b6:8b:ab:c8:60:1e:37:24:2a:
44:ea:24:f9:23:71:68:68:e6:e2:18:0a:a2:5e:f5:
2b:6e:37:f7:ad:53:b8:f4:64:44:3d:2c:5f:95:48:
77:bd:93:48:6e:9d:c6:a7:db:c6:44:76:7b:76:0d:
f4:1e:b8:9e:e7:14:3a:c6:61:d7:6d:18:a5:b7:4e:
0e:58:81:f0:09:93:5a:f3:1d:fb:6a:e9:48:32:f3:
ad:13:6b:47:e5:f1:de:7f:cc:c5:72:5b:46:9e:c4:
e2:4d:b3:d4:0f:88:13:a7:b4:af:0b:45:5b:65:40:
a2:bd:4c:08:c6:44:53:88:0c:e2:16:f4:b4:b2:b8:
ef:00:6f:1e:21:82:a3:cf:87:8f:28:93:17:23:f2:
4c:db:cd:3d:09:31:d8:0b:e1:df:1e:25:80:14:a8:
95:8c:1c:39:89:ad:c7:0e:65:a7:bf:42:e2:ce:e7:
25:0b:5e:c0:31:0c:8e:84:39:41:e2:1d:ae:d9:c8:
80:6c:74:99:1a:8e:4a:cc:08:d0:5d:86:b4:35:3f:
fb:ea:d8:87:d1:37:9c:7a:ae:06:fa:8f:db:ee:88:
17:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D5:F7:36:13:B4:C2:8C:57:17:DF:1A:9D:86:81:20:AC:67:F0:14
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/NNX3NhO0woxXF98anYaBIKxn8BQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.17.108.0/22
2.17.120.0/22
2.17.192.0/22
2.18.212.0/22
2.19.4.0/22
2.21.112.0-2.21.121.255
2.21.123.0-2.21.127.255
2.21.175.0/24
2.23.128.0-2.23.133.255
92.122.184.0/23
92.122.207.0/24
93.191.168.0/23
93.191.172.0/24
95.100.157.0/24
95.100.180.0/24
95.100.212.0/22
95.100.253.0/24
95.101.117.0-95.101.118.255
95.101.204.0/22
IPv6:
2a02:2370:1::-2a02:2370:6:ffff:ffff:ffff:ffff:ffff
2a02:2370:101::-2a02:2370:106:ffff:ffff:ffff:ffff:ffff
2a02:2370:200::-2a02:2370:20c:ffff:ffff:ffff:ffff:ffff
2a02:2370:4000::/48
2a02:2370:8000::/48
2a02:2370:c000::/48
2a02:2370:f000::/48
Signature Algorithm: sha256WithRSAEncryption
95:63:aa:60:a6:11:77:4c:7e:81:60:c9:49:a0:67:76:69:3d:
fe:2c:63:84:70:7c:99:7e:f2:b5:b2:d6:fe:bd:34:cf:03:7c:
b2:ab:96:1c:67:09:4d:e0:17:2b:18:68:6c:1c:8e:17:fd:45:
70:99:99:45:af:6e:c0:4c:6b:6d:0b:1f:8f:ff:ff:11:36:1e:
92:4b:ac:94:11:d8:36:73:ed:f8:ae:17:f0:ee:b9:b5:7d:d9:
90:c7:46:8c:0b:05:7b:d1:43:96:08:09:c6:19:59:94:b9:d5:
cb:33:dc:93:14:e5:c5:4f:19:36:a8:57:4e:41:86:11:56:9a:
82:22:56:29:93:88:42:19:de:b6:51:83:90:80:80:10:c8:9f:
44:0e:8b:4d:d8:e0:ea:83:98:6b:56:a8:16:4a:61:3c:52:37:
9d:4d:49:ca:39:68:90:b5:b5:f7:14:8f:0c:b3:d2:35:4c:ae:
77:3f:58:b3:d2:45:6b:64:ad:9c:f2:7e:f3:02:58:f0:70:98:
2c:1b:9c:0f:67:7f:bc:37:fd:ac:30:fb:58:e0:0b:f8:4c:50:
7e:b4:cb:17:21:1c:4c:80:7d:5f:ec:57:ea:d5:7d:d3:06:03:
c0:98:ae:33:51:99:f5:c0:31:d1:a9:bc:67:4a:9c:d7:76:f0:
a3:f5:0b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:14:26 2025 by rpki-client