Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/NIDu_UivXF2VPARoemzSztYH4wM.roa
File: NIDu_UivXF2VPARoemzSztYH4wM.roa (raw, json)
Hash identifier: 1s9mUJ24UuMUK6JmJcMxqbCNdST0Hrq6UQb4GHGIZxg=
Subject key identifier: 34:80:EE:FD:48:AF:5C:5D:95:3C:04:68:7A:6C:D2:CE:D6:07:E3:03
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 0198A8FB164CC6FE32D8938786E38D8594BC
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/NIDu_UivXF2VPARoemzSztYH4wM.roa
Signing time: Thu 14 Aug 2025 14:28:04 +0000
ROA not before: Thu 14 Aug 2025 14:28:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 89.19.56.0/24 maxlen: 24
89.19.57.0/24 maxlen: 24
89.19.58.0/24 maxlen: 24
89.19.59.0/24 maxlen: 24
185.68.245.0/24 maxlen: 24
185.81.174.0/23 maxlen: 24
185.81.184.0/23 maxlen: 23
185.81.186.0/23 maxlen: 23
185.89.104.0/22 maxlen: 22
185.89.108.0/22 maxlen: 22
185.96.38.0/24 maxlen: 24
185.96.132.0/24 maxlen: 24
185.97.0.0/22 maxlen: 24
185.101.203.0/24 maxlen: 24
185.175.224.0/23 maxlen: 24
213.170.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a8:fb:16:4c:c6:fe:32:d8:93:87:86:e3:8d:85:94:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Aug 14 14:28:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3480eefd48af5c5d953c04687a6cd2ced607e303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3d:87:a4:4d:f5:27:f2:a0:1c:02:2f:b2:16:
b4:a8:eb:cc:2e:53:cd:2e:86:b2:e9:82:14:16:74:
fc:60:6a:e1:63:b3:cc:40:64:89:26:ac:1a:8e:e1:
ce:b1:08:6c:60:98:69:06:07:84:08:45:4f:0f:6b:
3f:de:d8:ad:a0:be:cc:ee:05:2c:d7:71:00:6e:8d:
49:c7:40:00:8c:09:9e:fc:44:61:9a:39:ef:d1:98:
4e:47:46:26:91:9f:db:44:a6:e0:1e:a3:ab:12:92:
b7:3b:8b:27:96:f0:72:2a:b5:f8:db:72:f4:61:0e:
cc:51:97:31:7e:97:83:1b:aa:fc:18:72:df:64:c5:
90:11:f8:60:30:65:3b:af:6b:c6:79:73:f5:e6:69:
64:25:f7:13:08:41:c7:b7:20:21:ba:c9:42:85:ae:
64:76:f4:0f:72:82:54:bf:1a:73:74:4e:6a:9c:a4:
66:ef:e2:75:2f:2a:e0:dc:b9:f8:f8:3e:fe:92:d6:
78:a0:33:84:10:4d:a2:50:0e:6a:58:0a:9e:9d:59:
ec:b3:26:26:59:ab:7d:87:b3:12:8c:59:94:fd:34:
81:f8:43:a0:f7:01:a3:14:d6:1f:de:4d:78:b0:42:
00:89:dc:6a:45:09:2a:bb:f0:f6:6c:58:c1:14:b5:
ce:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:80:EE:FD:48:AF:5C:5D:95:3C:04:68:7A:6C:D2:CE:D6:07:E3:03
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/NIDu_UivXF2VPARoemzSztYH4wM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.19.56.0/22
185.68.245.0/24
185.81.174.0/23
185.81.184.0/22
185.89.104.0/21
185.96.38.0/24
185.96.132.0/24
185.97.0.0/22
185.101.203.0/24
185.175.224.0/23
213.170.223.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:6e:b2:d6:80:4c:69:85:2a:dd:83:8e:b8:f2:33:e6:e6:8b:
56:c5:b2:f0:e8:f0:e5:9b:dc:c3:65:46:8b:8e:0a:23:36:b0:
ed:18:cd:af:b8:aa:be:77:62:bd:12:b0:de:99:77:2e:6f:a1:
e5:e2:d5:65:22:b5:7d:4d:88:ff:ad:09:d3:66:b0:4f:23:d8:
d7:83:c6:c6:8f:a4:2e:17:70:99:1e:49:a8:e7:5a:47:ec:93:
87:1e:d7:9e:cf:08:1b:5b:63:cc:1a:da:3b:e2:df:59:82:92:
c8:0c:d6:0d:16:79:34:f8:94:33:f5:05:dc:7f:73:ea:2c:60:
d8:7e:78:3e:82:5d:20:3e:27:77:8c:e4:b0:c1:23:d4:72:d6:
ec:83:93:9d:30:ae:4f:12:e4:e6:32:f6:c2:23:0b:53:5b:23:
22:62:c9:39:1a:c3:c5:3d:91:74:42:3e:46:b3:d8:92:26:1f:
fe:0b:72:b7:f9:b4:fc:0e:0b:97:07:ed:fc:a9:6e:56:73:a3:
3b:45:b6:31:9c:d7:7c:18:72:3e:24:4a:d7:86:d9:a1:16:51:
f9:d4:71:25:fc:03:6e:fc:d3:70:69:ac:20:49:36:bb:76:ce:
51:90:19:cc:5d:3d:27:10:fb:17:8d:cc:65:11:e6:ec:89:45:
78:e5:51:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:23:11 2025 by rpki-client