Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/nMVZDWf1O32dYKhQqmsuTwojMeQ.roa
File: nMVZDWf1O32dYKhQqmsuTwojMeQ.roa (raw, json)
Hash identifier: Tk9BLkL53wM9pn+SCDaQzRopBx3VKUEIRUuqKoGe+DY=
Subject key identifier: 9C:C5:59:0D:67:F5:3B:7D:9D:60:A8:50:AA:6B:2E:4F:0A:23:31:E4
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 0199DCC7623C887C7F0F83A51FA8DC3C1F3E
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/nMVZDWf1O32dYKhQqmsuTwojMeQ.roa
Signing time: Mon 13 Oct 2025 08:54:38 +0000
ROA not before: Mon 13 Oct 2025 08:54:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 195.40.16.0/23 maxlen: 24
195.40.88.0/23 maxlen: 24
195.40.152.0/24 maxlen: 24
195.40.184.0/23 maxlen: 24
212.135.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:dc:c7:62:3c:88:7c:7f:0f:83:a5:1f:a8:dc:3c:1f:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 13 08:54:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9cc5590d67f53b7d9d60a850aa6b2e4f0a2331e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3c:30:30:a5:ad:6d:bc:51:54:b6:64:d7:cf:
fb:5c:98:f1:8b:10:e6:f5:c0:de:1e:d2:3b:4e:97:
4a:65:8c:f9:ae:f1:aa:6d:eb:d8:09:8f:28:93:08:
a1:e7:22:0c:6d:21:8b:cf:08:91:63:8b:93:f0:f0:
bd:58:0c:0c:45:75:b9:ec:3c:d1:df:5f:5d:1d:42:
6d:da:7e:20:ca:22:f8:f0:cd:b3:5e:f5:da:20:1d:
5c:6b:52:b6:36:89:f0:55:4c:e5:f5:08:53:48:c5:
64:10:c6:7d:6d:30:c6:72:38:03:99:3b:29:27:42:
b4:34:ca:64:27:ab:6a:7a:c8:67:b5:df:0a:09:2a:
fe:aa:5a:e2:0c:fa:9b:d8:fc:dc:cf:83:10:5b:9f:
18:ba:e7:66:4d:53:36:39:98:c0:c3:48:72:9a:6c:
80:c5:04:43:66:93:78:98:d1:a8:b0:aa:55:38:b2:
b4:58:03:61:ad:7a:06:23:59:3f:96:ea:c5:74:72:
09:db:34:56:0b:e2:08:b5:83:b6:7f:a0:84:ef:df:
73:2d:06:ee:22:d1:51:bf:18:25:17:8b:c2:57:02:
a3:b6:ea:bf:65:9a:80:05:b6:14:c2:de:11:04:25:
00:c0:dc:6b:a1:c1:cc:a1:79:ee:0b:c0:f2:e1:76:
93:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C5:59:0D:67:F5:3B:7D:9D:60:A8:50:AA:6B:2E:4F:0A:23:31:E4
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/nMVZDWf1O32dYKhQqmsuTwojMeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.40.16.0/23
195.40.88.0/23
195.40.152.0/24
195.40.184.0/23
212.135.9.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:fe:da:c8:b4:e6:5b:aa:44:74:c6:77:cd:fc:58:67:54:00:
e9:31:fc:f9:6b:e8:bd:41:d8:2b:f0:60:57:6b:54:04:f2:4a:
aa:87:82:01:c1:6c:52:76:37:09:21:e4:e0:0a:13:7c:90:d5:
43:75:ec:93:53:d6:b3:fd:2c:99:89:3c:b8:e2:99:9c:63:8d:
fd:5f:f0:76:bf:5d:75:14:fb:85:0e:9f:d4:2f:0a:eb:59:bb:
1a:d9:15:34:8a:4e:7a:aa:95:94:97:ab:ec:f3:d2:a1:02:ae:
ab:f2:dd:07:9d:e0:81:d8:9c:f5:79:7f:e5:4b:34:92:84:de:
92:08:2c:99:39:ea:09:7d:fc:b1:ae:39:a3:a9:0d:ff:f7:39:
94:69:8d:3f:71:21:d0:77:4d:42:3c:fd:ae:bc:b1:22:5f:0e:
91:76:31:26:ff:ac:15:99:ba:f5:60:3f:3c:01:86:d5:18:c5:
c5:ad:c1:e3:0c:ac:9b:03:ec:eb:e6:68:88:ad:ab:b8:db:bd:
cf:c0:a4:3f:5c:88:95:4d:d0:e6:2b:21:a9:a4:5c:09:14:16:
2f:64:1c:25:cb:ed:bd:ba:fc:f2:03:ca:98:3c:eb:97:18:40:
3c:3b:61:45:b2:50:11:89:34:d8:78:8e:8b:1b:ea:8a:e1:6f:
9b:c3:7a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:07:11 2025 by rpki-client