Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/nBCkRyX1WlWGiDbtpEcZ1yzXCz8.roa
File: nBCkRyX1WlWGiDbtpEcZ1yzXCz8.roa (raw, json)
Hash identifier: N7pYS0DZbvPX9AJ7+c9P/Fy4kdTMZIvg/FrKj/0hE8k=
Subject key identifier: 9C:10:A4:47:25:F5:5A:55:86:88:36:ED:A4:47:19:D7:2C:D7:0B:3F
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 0198A24988267CF6B8794F27792362D94A6C
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/nBCkRyX1WlWGiDbtpEcZ1yzXCz8.roa
Signing time: Wed 13 Aug 2025 07:16:24 +0000
ROA not before: Wed 13 Aug 2025 07:16:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401838
IP address blocks: 37.218.208.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a2:49:88:26:7c:f6:b8:79:4f:27:79:23:62:d9:4a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Aug 13 07:16:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c10a44725f55a55868836eda44719d72cd70b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:01:d6:45:70:02:54:ea:4d:79:60:3b:d6:79:
30:56:9b:0a:ee:6b:35:b9:b0:11:92:61:0d:38:98:
98:0c:0e:c9:6b:dc:88:06:44:8a:b0:c2:6a:06:fc:
46:c1:0a:98:0e:b9:86:41:4a:e0:f9:88:34:6e:e2:
0e:34:fb:67:17:f2:ad:59:17:05:8b:56:f9:d2:f4:
de:99:c8:60:28:35:bb:5b:b7:56:54:38:cf:c9:12:
08:bf:2c:8d:22:76:af:a0:ad:46:05:5d:13:a1:2f:
c1:99:3f:20:e2:43:1f:00:cc:f3:66:23:84:2b:54:
27:3a:ea:f3:a7:36:96:eb:81:ee:0a:13:35:5e:3b:
68:27:e1:ca:fb:8a:08:47:f4:0d:40:6e:1a:16:2a:
ed:f5:21:9b:4d:4a:5c:80:0b:21:73:84:f5:47:34:
a0:1e:3c:e8:97:87:43:1d:fe:6b:ed:0c:5f:cd:86:
46:11:a4:0e:d0:ea:f9:ab:21:df:8f:81:41:5a:8c:
d7:f8:e4:92:09:05:a2:e1:9f:1f:2b:87:4d:a5:c8:
ea:ab:67:9b:fc:cb:2c:04:7f:db:d9:5f:9b:aa:db:
9e:58:df:00:b9:2b:0e:b4:29:29:90:db:2a:1c:9c:
0e:96:6c:75:1b:ff:bc:85:ff:53:90:9f:f5:bc:7e:
d4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:10:A4:47:25:F5:5A:55:86:88:36:ED:A4:47:19:D7:2C:D7:0B:3F
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/nBCkRyX1WlWGiDbtpEcZ1yzXCz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.218.208.0/21
Signature Algorithm: sha256WithRSAEncryption
7d:94:3c:9b:e2:8b:ec:1a:c3:45:17:d8:8b:b3:43:37:fa:eb:
cc:b7:3a:6c:51:f3:ae:d8:4d:d2:d2:e8:a1:23:bb:28:5b:95:
5a:60:04:b1:a0:dd:42:49:0a:8f:b9:12:da:f9:d8:b2:00:0b:
29:86:c0:a7:30:1d:c2:bc:a5:95:51:d3:02:a9:b9:0c:6e:33:
6b:6f:95:c6:70:d6:55:01:e1:1d:e1:5e:e8:08:d8:f1:f1:93:
04:66:48:3b:fa:e6:d9:78:79:f2:8b:2a:f2:21:cc:0d:07:d0:
97:c6:df:8c:7a:be:6d:6f:e8:fb:ef:fb:d7:db:07:ac:fb:cb:
91:f0:c8:2d:db:3c:3d:9a:62:b0:0c:18:d3:ee:69:dd:8e:d0:
52:77:26:10:50:99:57:44:97:2f:1a:4b:26:66:f6:0f:80:7a:
55:2e:27:b8:d1:d1:ed:45:01:47:04:95:61:07:6d:d4:14:7d:
10:e8:2a:0a:75:a3:34:92:e5:91:1d:6c:b4:64:a2:c6:a0:6e:
d2:07:b6:57:4c:59:a2:99:54:82:c3:ca:e1:42:eb:f4:8d:c0:
41:e3:71:ae:c2:b2:20:e3:05:1e:8b:45:72:6c:f0:c6:63:8f:
17:09:d7:c1:5e:f6:95:32:70:5f:90:5b:cf:49:42:4b:99:03:
f6:94:42:6e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZiiSYgmfPa4eU8neSNi2UpsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2Y2NlMDZlNzBkZjk3MGQ5MGFiZmUzY2JlN2ZhODgyZjQ2
N2IxZTQwHhcNMjUwODEzMDcxNjI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YzEwYTQ0NzI1ZjU1YTU1ODY4ODM2ZWRhNDQ3MTlkNzJjZDcwYjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwHWRXACVOpNeWA71nkwVpsK7ms1
ubARkmENOJiYDA7Ja9yIBkSKsMJqBvxGwQqYDrmGQUrg+Yg0buIONPtnF/KtWRcF
i1b50vTemchgKDW7W7dWVDjPyRIIvyyNInavoK1GBV0ToS/BmT8g4kMfAMzzZiOE
K1QnOurzpzaW64HuChM1XjtoJ+HK+4oIR/QNQG4aFirt9SGbTUpcgAshc4T1RzSg
Hjzol4dDHf5r7QxfzYZGEaQO0Or5qyHfj4FBWozX+OSSCQWi4Z8fK4dNpcjqq2eb
/MssBH/b2V+bqtueWN8AuSsOtCkpkNsqHJwOlmx1G/+8hf9TkJ/1vH7UIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJwQpEcl9VpVhog27aRHGdcs1ws/MB8GA1UdIwQY
MBaAFIbM4G5w35cNkKv+PL5/qIL0Z7HkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2Ut
ODk3MTRhN2U4ZDU4LzEvbkJDa1J5WDFXbFdHaURidHBFY1oxeXpYQ3o4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2UtODk3MTRhN2U4ZDU4
LzEvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJdrQMA0G
CSqGSIb3DQEBCwUAA4IBAQB9lDyb4ovsGsNFF9iLs0M3+uvMtzpsUfOu2E3S0uih
I7soW5VaYASxoN1CSQqPuRLa+diyAAsphsCnMB3CvKWVUdMCqbkMbjNrb5XGcNZV
AeEd4V7oCNjx8ZMEZkg7+ubZeHnyiyryIcwNB9CXxt+Mer5tb+j77/vX2wes+8uR
8Mgt2zw9mmKwDBjT7mndjtBSdyYQUJlXRJcvGksmZvYPgHpVLie40dHtRQFHBJVh
B23UFH0Q6CoKdaM0kuWRHWy0ZKLGoG7SB7ZXTFmimVSCw8rhQuv0jcBB43GuwrIg
4wUei0VybPDGY48XCdfBXvaVMnBfkFvPSUJLmQP2lEJu
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:52:38 2025 by rpki-client