Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/Nd4zcWCzw3-1A_arAnFzFiKe6Go.roa
File: Nd4zcWCzw3-1A_arAnFzFiKe6Go.roa (raw, json)
Hash identifier: EgMjZHetBNx4J/OkDXO51fdcct4Zmu7ztTgWF0Abz/w=
Subject key identifier: 35:DE:33:71:60:B3:C3:7F:B5:03:F6:AB:02:71:73:16:22:9E:E8:6A
Certificate issuer: /CN=8b82433ffe94bf3536fec327543d396158202072
Certificate serial: 0199A3F14775D0982469FF695A88205F9166
Authority key identifier: 8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/Nd4zcWCzw3-1A_arAnFzFiKe6Go.roa
Signing time: Thu 02 Oct 2025 08:02:02 +0000
ROA not before: Thu 02 Oct 2025 08:02:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31514
IP address blocks: 83.217.192.0/21 maxlen: 21
83.217.196.0/24 maxlen: 24
83.217.198.0/24 maxlen: 24
83.217.199.0/24 maxlen: 24
83.217.204.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a3:f1:47:75:d0:98:24:69:ff:69:5a:88:20:5f:91:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b82433ffe94bf3536fec327543d396158202072
Validity
Not Before: Oct 2 08:02:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35de337160b3c37fb503f6ab02717316229ee86a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7d:88:a8:c7:5c:eb:31:39:f6:02:5f:c1:3f:
aa:10:b3:a8:34:17:aa:95:84:76:67:d5:52:ba:35:
a0:0c:70:19:38:b8:fb:80:8d:a1:59:7c:27:ea:b9:
67:bd:7c:41:8f:46:ab:50:ca:06:4a:b6:cb:bd:cd:
a4:c6:16:57:b3:a7:14:72:fb:3b:e4:8d:f3:47:d3:
70:54:79:de:c9:07:69:4a:12:4b:b8:2e:49:f7:5c:
da:86:df:0f:f7:2b:b3:e5:f8:fc:89:04:28:55:9e:
04:54:6a:e5:69:8e:37:5a:a9:6f:5c:90:f8:cb:05:
f3:0b:a8:e7:12:4f:ec:c6:eb:5d:8b:41:ea:dc:8d:
88:56:b7:1d:ff:04:e9:e2:e9:41:d1:d4:88:a2:44:
cd:f2:17:87:8d:5a:de:da:8c:c3:b2:f5:0f:9e:dd:
e2:d5:2d:5e:a5:18:77:bf:f1:66:0e:15:9d:97:cd:
0a:23:c3:a2:ce:7d:e4:6b:a7:d9:d3:60:83:5d:43:
ed:e8:47:49:95:ee:42:ae:2c:23:55:f7:16:77:aa:
54:7d:0d:2e:86:19:57:87:3f:a3:9a:4d:c5:ab:41:
1a:cb:ea:57:6d:19:60:60:d1:95:0a:6b:f1:48:7e:
4b:4c:16:6b:88:b5:0a:89:8c:5e:10:3a:20:db:54:
9f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:DE:33:71:60:B3:C3:7F:B5:03:F6:AB:02:71:73:16:22:9E:E8:6A
X509v3 Authority Key Identifier:
keyid:8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/Nd4zcWCzw3-1A_arAnFzFiKe6Go.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.217.192.0/21
83.217.204.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:fd:e3:b7:8e:c9:bd:da:05:51:64:ce:a0:0c:36:3a:aa:71:
a4:a2:64:f9:06:29:03:71:26:b2:6d:d4:97:9d:9d:c3:c8:28:
4f:84:ce:98:5d:75:af:96:ed:8d:73:0b:e5:ad:c7:7c:59:50:
5c:50:5c:a2:d3:2b:be:80:2d:6f:3e:56:d3:36:8c:85:a9:90:
22:8b:ea:bd:e4:02:6f:c1:92:71:6d:a9:ff:94:eb:32:5c:ce:
96:d5:d1:79:ff:ef:51:39:67:93:0f:41:c7:de:e7:37:18:13:
7d:01:02:5f:ac:33:65:b5:b5:b6:8b:f9:2f:da:0d:4c:d2:34:
c4:e3:a7:6b:0d:aa:2e:6a:cf:fb:46:60:37:f7:1d:5d:d4:8e:
5d:1a:f4:e9:35:c0:00:83:a3:8a:cd:80:35:5c:a0:a9:a8:52:
e5:1a:c0:71:38:d0:a8:ee:f1:7c:5a:29:82:9c:92:38:bb:7c:
67:42:dc:ce:58:0b:df:c5:31:4b:37:56:ab:93:10:c3:c1:a5:
a5:88:d9:4b:24:ed:c5:e1:4e:86:10:92:de:9b:4a:77:27:ca:
11:51:9e:0a:7c:27:82:02:8c:9c:64:a3:29:97:a5:be:49:7e:
55:e2:0d:3c:7d:94:b8:b2:e3:10:62:b7:11:e8:ef:f3:dd:6b:
e0:9c:56:ad
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZmj8Ud10Jgkaf9pWoggX5FmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiODI0MzNmZmU5NGJmMzUzNmZlYzMyNzU0M2QzOTYxNTgy
MDIwNzIwHhcNMjUxMDAyMDgwMjAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNWRlMzM3MTYwYjNjMzdmYjUwM2Y2YWIwMjcxNzMxNjIyOWVlODZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq32IqMdc6zE59gJfwT+qELOoNBeq
lYR2Z9VSujWgDHAZOLj7gI2hWXwn6rlnvXxBj0arUMoGSrbLvc2kxhZXs6cUcvs7
5I3zR9NwVHneyQdpShJLuC5J91zaht8P9yuz5fj8iQQoVZ4EVGrlaY43WqlvXJD4
ywXzC6jnEk/sxutdi0Hq3I2IVrcd/wTp4ulB0dSIokTN8heHjVre2ozDsvUPnt3i
1S1epRh3v/FmDhWdl80KI8Oizn3ka6fZ02CDXUPt6EdJle5CriwjVfcWd6pUfQ0u
hhlXhz+jmk3Fq0Eay+pXbRlgYNGVCmvxSH5LTBZriLUKiYxeEDog21Sf6QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDXeM3Fgs8N/tQP2qwJxcxYinuhqMB8GA1UdIwQY
MBaAFIuCQz/+lL81Nv7DJ1Q9OWFYICByMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTRKRFBfNlV2elUyX3NNblZEMDVZVmdnSUhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mNTU5M2QtNjg5Yy00ZGZlLThkOTYt
MmRkNzg5MGRjNjg5LzEvTmQ0emNXQ3p3My0xQV9hckFuRnpGaUtlNkdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9mNTU5M2QtNjg5Yy00ZGZlLThkOTYtMmRkNzg5MGRjNjg5
LzEvaTRKRFBfNlV2elUyX3NNblZEMDVZVmdnSUhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDU9nAAwQC
U9nMMA0GCSqGSIb3DQEBCwUAA4IBAQAf/eO3jsm92gVRZM6gDDY6qnGkomT5BikD
cSaybdSXnZ3DyChPhM6YXXWvlu2Ncwvlrcd8WVBcUFyi0yu+gC1vPlbTNoyFqZAi
i+q95AJvwZJxban/lOsyXM6W1dF5/+9ROWeTD0HH3uc3GBN9AQJfrDNltbW2i/kv
2g1M0jTE46drDaouas/7RmA39x1d1I5dGvTpNcAAg6OKzYA1XKCpqFLlGsBxONCo
7vF8WimCnJI4u3xnQtzOWAvfxTFLN1arkxDDwaWliNlLJO3F4U6GEJLem0p3J8oR
UZ4KfCeCAoycZKMpl6W+SX5V4g08fZS4suMQYrcR6O/z3WvgnFat
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:43:31 2025 by rpki-client