Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/NfdXthzhZ_L34HPGrLUJ0q9-LtU.roa
File: NfdXthzhZ_L34HPGrLUJ0q9-LtU.roa (raw, json)
Hash identifier: iAmQ4V4JG26ummlLKO90sg6lAyK0jGsDeoSWyDoF0l4=
Subject key identifier: 35:F7:57:B6:1C:E1:67:F2:F7:E0:73:C6:AC:B5:09:D2:AF:7E:2E:D5
Certificate issuer: /CN=ff40d8a2ea9676369e6e817679490e4e505c89f3
Certificate serial: 0199E2317D068E9181313DAD05A95CC7C092
Authority key identifier: FF:40:D8:A2:EA:96:76:36:9E:6E:81:76:79:49:0E:4E:50:5C:89:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0DYouqWdjaeboF2eUkOTlBcifM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/NfdXthzhZ_L34HPGrLUJ0q9-LtU.roa
Signing time: Tue 14 Oct 2025 10:08:37 +0000
ROA not before: Tue 14 Oct 2025 10:08:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35612
IP address blocks: 5.157.96.0/19 maxlen: 19
49.236.0.0/18 maxlen: 21
77.32.0.0/17 maxlen: 21
78.134.0.0/17 maxlen: 20
78.134.28.0/22 maxlen: 22
78.134.44.0/22 maxlen: 22
78.134.108.0/22 maxlen: 22
81.174.0.0/18 maxlen: 18
81.174.48.0/22 maxlen: 22
84.33.64.0/18 maxlen: 21
84.33.128.0/18 maxlen: 21
88.147.0.0/17 maxlen: 21
88.147.80.0/22 maxlen: 22
88.147.84.0/22 maxlen: 22
88.149.128.0/17 maxlen: 17
88.149.240.0/22 maxlen: 22
88.149.244.0/22 maxlen: 22
128.116.128.0/17 maxlen: 17
146.241.0.0/16 maxlen: 21
147.53.128.0/17 maxlen: 20
185.11.20.0/22 maxlen: 22
212.124.160.0/19 maxlen: 19
216.247.128.0/18 maxlen: 18
2001:4c90::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0DYouqWdjaeboF2eUkOTlBcifM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e2:31:7d:06:8e:91:81:31:3d:ad:05:a9:5c:c7:c0:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff40d8a2ea9676369e6e817679490e4e505c89f3
Validity
Not Before: Oct 14 10:08:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35f757b61ce167f2f7e073c6acb509d2af7e2ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e6:08:49:d1:9c:c5:6d:f8:c2:f7:13:dc:dc:
00:ef:5e:35:35:4e:da:8c:f4:a1:fa:58:d4:0a:c4:
55:f0:71:90:07:fe:fe:ad:8a:f7:d1:cd:e2:c8:99:
4f:37:a4:bb:17:c1:33:85:4e:bb:63:f5:23:81:77:
05:4e:7e:0b:bb:de:64:17:5d:77:b0:ef:5d:1b:35:
cc:af:d4:12:71:ea:ed:be:4a:f5:e4:43:cf:ff:de:
95:90:d0:58:4e:c1:de:49:e2:b1:9b:7a:10:af:ce:
df:3c:0e:4d:dd:e7:16:db:0b:d3:dd:de:d4:e7:a9:
67:a3:8c:d0:e4:59:5b:39:f1:d6:95:39:78:fb:6f:
1a:4a:3b:c7:7c:3f:23:3d:c9:16:08:5b:cb:04:b2:
a3:00:3d:c1:64:07:04:5e:ab:e2:c4:c9:ad:c5:e7:
62:36:f8:e9:45:9e:cc:85:0c:02:ad:74:3c:02:61:
b9:da:b0:61:dc:60:40:34:41:88:78:a4:c0:12:40:
a5:34:52:07:a4:4a:21:de:a6:a7:30:5c:b4:b2:ad:
6e:07:4d:08:e4:ae:d2:84:3f:ae:a7:2f:24:9c:b9:
5e:77:e5:85:7c:66:b6:77:ef:88:58:5b:6f:ce:d8:
76:7d:29:f2:c2:f7:5d:fa:a2:b2:0b:6d:2f:fc:4b:
16:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F7:57:B6:1C:E1:67:F2:F7:E0:73:C6:AC:B5:09:D2:AF:7E:2E:D5
X509v3 Authority Key Identifier:
keyid:FF:40:D8:A2:EA:96:76:36:9E:6E:81:76:79:49:0E:4E:50:5C:89:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0DYouqWdjaeboF2eUkOTlBcifM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/NfdXthzhZ_L34HPGrLUJ0q9-LtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.157.96.0/19
49.236.0.0/18
77.32.0.0/17
78.134.0.0/17
81.174.0.0/18
84.33.64.0-84.33.191.255
88.147.0.0/17
88.149.128.0/17
128.116.128.0/17
146.241.0.0/16
147.53.128.0/17
185.11.20.0/22
212.124.160.0/19
216.247.128.0/18
IPv6:
2001:4c90::/29
Signature Algorithm: sha256WithRSAEncryption
24:56:bf:a0:eb:16:cd:4e:6e:87:be:0d:c9:45:85:d9:fe:6d:
81:4e:f6:86:31:2e:b9:5b:c7:29:02:ad:2d:19:3b:3a:e9:13:
3f:ac:c2:28:ca:3e:91:67:8e:c2:18:c0:4e:55:d1:b7:fe:fe:
4d:c5:57:15:3d:76:a3:10:0c:69:41:ae:07:3b:79:71:df:ff:
03:33:8c:58:a9:77:a6:e8:79:93:2e:b1:bb:a8:f7:45:1d:bd:
9f:bd:ce:f6:88:ac:77:55:63:d0:5c:83:c7:15:ee:9c:b6:61:
7b:ae:cf:ee:15:72:03:c0:b9:75:f9:cf:83:a9:39:3d:b6:cc:
24:89:d4:48:a1:1e:bf:49:3c:8a:39:24:50:6e:1f:a2:9a:ba:
2d:65:83:8c:b7:51:58:d0:1c:31:08:3f:e4:9c:0b:38:1c:7d:
b7:9f:bf:37:6f:66:34:c7:41:97:3b:12:ad:65:bc:3e:8d:44:
20:df:4b:08:66:01:b5:89:8e:f6:bd:f5:9c:b3:6c:5e:53:fb:
4f:e2:67:dc:0e:21:21:d2:50:b6:d6:3c:89:af:38:a1:4c:53:
1b:46:c9:d7:8e:2c:ba:6d:11:fa:f0:17:a8:98:01:8b:6e:5f:
7c:cf:a8:ce:c1:94:9d:84:ed:0e:f1:db:49:ae:da:11:64:11:
0a:07:a1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:48:00 2025 by rpki-client