
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/NO0EYUK15B90y0rJ4uiA5nWsHK4.roa
File: NO0EYUK15B90y0rJ4uiA5nWsHK4.roa (raw, json)
Hash identifier: sJEij34s9NJ4mStwu6uoIsSyVz7jCYOoIXVA1A6vNB0=
Subject key identifier: 34:ED:04:61:42:B5:E4:1F:74:CB:4A:C9:E2:E8:80:E6:75:AC:1C:AE
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0199E11956D1DBA8F8EE0A9BCCE8FE4F4BBE
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/NO0EYUK15B90y0rJ4uiA5nWsHK4.roa
Signing time: Tue 14 Oct 2025 05:02:38 +0000
ROA not before: Tue 14 Oct 2025 05:02:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9123
IP address blocks: 82.97.240.0/24 maxlen: 24
82.97.241.0/24 maxlen: 24
82.97.242.0/24 maxlen: 24
82.97.243.0/24 maxlen: 24
82.97.244.0/24 maxlen: 24
82.97.245.0/24 maxlen: 24
82.97.247.0/24 maxlen: 24
82.97.248.0/24 maxlen: 24
82.97.249.0/24 maxlen: 24
82.97.250.0/24 maxlen: 24
82.97.251.0/24 maxlen: 24
82.97.252.0/24 maxlen: 24
82.97.253.0/24 maxlen: 24
82.97.254.0/24 maxlen: 24
82.97.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e1:19:56:d1:db:a8:f8:ee:0a:9b:cc:e8:fe:4f:4b:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Oct 14 05:02:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=34ed046142b5e41f74cb4ac9e2e880e675ac1cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:87:70:e1:fa:31:b0:a1:b2:7c:95:25:2b:90:
7c:9a:9e:08:62:a1:73:bc:66:c3:08:a4:01:76:c3:
e8:12:e6:9a:cf:9b:c4:7e:ee:6e:c1:a4:c8:18:45:
eb:cc:05:7e:cc:d3:16:6a:4e:78:57:c6:2a:aa:df:
2c:a3:13:24:0c:83:41:7e:d1:73:36:10:70:89:4a:
a8:0f:30:09:f8:41:b6:06:45:64:34:c5:59:23:9e:
28:b8:da:0a:3c:95:f0:6c:c8:21:36:84:0d:51:00:
d3:68:82:6d:66:c6:0a:5c:de:9f:20:dd:c6:2a:3d:
cf:75:1e:65:0d:69:f3:f0:af:dc:51:9f:82:9b:b6:
c3:6b:1c:03:15:cc:22:25:8a:31:ef:dd:fc:bd:0f:
a2:c3:da:c4:53:24:29:f4:64:6a:a0:fe:9a:1a:73:
f6:d6:cc:86:3c:98:c4:40:1c:2b:e8:80:56:e9:42:
20:fd:db:d7:84:1f:f5:24:40:dd:3c:75:57:70:21:
59:9a:6e:00:81:2e:1e:de:61:08:6c:ab:fe:13:da:
a3:81:a7:e8:64:09:2d:01:36:6f:c0:1a:32:68:a3:
f6:ed:1c:fe:8d:ce:6f:22:07:e3:31:8d:c8:b3:a6:
b2:3d:f6:39:af:e3:51:3c:70:4c:6c:5d:cb:17:f2:
6a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:ED:04:61:42:B5:E4:1F:74:CB:4A:C9:E2:E8:80:E6:75:AC:1C:AE
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/NO0EYUK15B90y0rJ4uiA5nWsHK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.97.240.0-82.97.245.255
82.97.247.0-82.97.255.255
Signature Algorithm: sha256WithRSAEncryption
45:56:0b:03:2a:30:7b:00:22:34:45:4f:bb:f6:27:a5:94:c2:
b7:1a:93:95:0e:af:42:a7:a0:d6:8d:e2:6c:8d:13:cd:ec:6b:
d6:17:16:08:5a:f0:a6:b4:3f:f5:9a:ab:09:0a:5c:49:5c:0e:
30:ed:87:fe:a3:83:70:00:63:b3:b4:e3:b4:d1:5a:f4:f7:a0:
c1:00:f1:fd:f7:89:24:ad:9b:18:9f:65:5a:0b:22:0c:f6:ca:
b2:3e:16:3f:02:08:10:9f:ec:6d:26:f5:f9:ab:43:c6:89:94:
71:24:c5:ba:d7:80:c7:de:92:cd:5d:28:09:f5:0d:25:58:d7:
b7:38:33:6b:42:cf:34:34:49:fb:f7:fb:92:37:cc:d9:c1:86:
be:2e:6a:fd:2e:31:a1:09:ee:f2:13:16:4e:4f:97:c8:b3:6c:
60:e4:00:e5:96:3a:76:af:7d:51:1d:6c:2d:d7:1e:2e:2d:61:
7a:aa:08:59:c7:1a:64:10:75:9c:a7:bd:3a:ed:00:4f:d1:2d:
ac:cd:06:8a:df:16:5d:ed:92:9e:5e:41:71:64:9f:0c:59:0c:
50:62:a5:3b:bd:32:bd:42:a7:31:b1:da:b4:4e:6d:c8:c6:39:
cc:24:a7:c4:74:42:10:e8:b4:89:70:69:aa:9d:e7:d4:39:e7:
5d:55:52:47
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZnhGVbR26j47gqbzOj+T0u+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2
NWE0NzgwHhcNMjUxMDE0MDUwMjM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNGVkMDQ2MTQyYjVlNDFmNzRjYjRhYzllMmU4ODBlNjc1YWMxY2FlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnodw4foxsKGyfJUlK5B8mp4IYqFz
vGbDCKQBdsPoEuaaz5vEfu5uwaTIGEXrzAV+zNMWak54V8Yqqt8soxMkDINBftFz
NhBwiUqoDzAJ+EG2BkVkNMVZI54ouNoKPJXwbMghNoQNUQDTaIJtZsYKXN6fIN3G
Kj3PdR5lDWnz8K/cUZ+Cm7bDaxwDFcwiJYox7938vQ+iw9rEUyQp9GRqoP6aGnP2
1syGPJjEQBwr6IBW6UIg/dvXhB/1JEDdPHVXcCFZmm4AgS4e3mEIbKv+E9qjgafo
ZAktATZvwBoyaKP27Rz+jc5vIgfjMY3Is6ayPfY5r+NRPHBMbF3LF/Jq4QIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFDTtBGFCteQfdMtKyeLogOZ1rByuMB8GA1UdIwQY
MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt
ZmUwNjU5MTc2YTU2LzEvTk8wRVlVSzE1QjkweTBySjR1aUE1bldzSEs0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2
LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAATAbMAwDBARSYfAD
BAFSYfQwCwMEAFJh9wMDAVJgMA0GCSqGSIb3DQEBCwUAA4IBAQBFVgsDKjB7ACI0
RU+79iellMK3GpOVDq9Cp6DWjeJsjRPN7GvWFxYIWvCmtD/1mqsJClxJXA4w7Yf+
o4NwAGOztOO00Vr096DBAPH994kkrZsYn2VaCyIM9sqyPhY/AggQn+xtJvX5q0PG
iZRxJMW614DH3pLNXSgJ9Q0lWNe3ODNrQs80NEn79/uSN8zZwYa+Lmr9LjGhCe7y
ExZOT5fIs2xg5ADlljp2r31RHWwt1x4uLWF6qghZxxpkEHWcp7067QBP0S2szQaK
3xZd7ZKeXkFxZJ8MWQxQYqU7vTK9Qqcxsdq0Tm3IxjnMJKfEdEIQ6LSJcGmqnefU
OeddVVJH
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:45:11 2025 by rpki-client