Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/nsdSvu8QVYLeRG_duM0hEwZ_S3c.roa
File: nsdSvu8QVYLeRG_duM0hEwZ_S3c.roa (raw, json)
Hash identifier: Q+FFailA5D7jITJfDzJRz0aRsf01rKpan1WtbuKeD58=
Subject key identifier: 9E:C7:52:BE:EF:10:55:82:DE:44:6F:DD:B8:CD:21:13:06:7F:4B:77
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 019934BE12C51AD1B5868C3D133CFB668348
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/nsdSvu8QVYLeRG_duM0hEwZ_S3c.roa
Signing time: Wed 10 Sep 2025 17:48:15 +0000
ROA not before: Wed 10 Sep 2025 17:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209847
IP address blocks: 45.153.230.0/24 maxlen: 24
193.38.54.0/24 maxlen: 24
193.38.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:be:12:c5:1a:d1:b5:86:8c:3d:13:3c:fb:66:83:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Sep 10 17:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ec752beef105582de446fddb8cd2113067f4b77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d8:44:45:86:54:ba:90:e0:18:e0:be:74:80:
a5:e5:54:7d:7b:ef:63:cb:78:c4:d1:3f:98:31:2f:
dd:3b:b5:95:15:7c:86:5d:35:14:71:7d:72:32:11:
c6:08:f5:28:31:d3:9a:5d:86:b9:d1:ea:40:fe:96:
48:3a:26:32:b4:9c:b2:a9:cf:5b:44:f2:bd:6f:c1:
c4:b8:96:74:4e:d6:1f:07:ea:8f:1e:6d:64:f5:22:
4c:89:fa:77:0a:c3:df:67:9f:a6:6d:aa:59:f3:00:
ad:9f:0c:20:7a:b6:db:40:77:48:b7:3e:8c:4d:35:
86:5d:62:7f:a1:97:f1:db:ec:03:78:ba:08:e4:29:
d7:ad:56:23:f2:90:f1:ad:c6:06:62:f4:28:bb:80:
9c:e7:97:32:ce:93:7d:b4:bb:c7:65:6d:8f:73:76:
04:8f:c1:95:4c:35:30:87:f8:d6:b3:c6:2f:41:aa:
2d:c6:88:16:21:95:f1:73:e6:99:5b:de:db:b2:01:
c7:88:bf:3d:7a:7b:b1:e4:ac:4e:d9:e5:45:66:28:
cf:4a:24:00:97:6c:2e:e1:f8:92:35:65:5d:bd:68:
53:99:2b:59:82:e8:96:64:9a:17:9f:65:eb:fd:b1:
58:ef:3a:b0:76:45:98:f2:8a:2c:20:e6:92:60:df:
82:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C7:52:BE:EF:10:55:82:DE:44:6F:DD:B8:CD:21:13:06:7F:4B:77
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/nsdSvu8QVYLeRG_duM0hEwZ_S3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.230.0/24
193.38.54.0/23
Signature Algorithm: sha256WithRSAEncryption
81:a9:7f:47:fc:fa:e9:92:5a:e5:0a:dc:3c:69:95:f0:a8:e0:
1e:46:fe:4b:8a:a3:72:45:8f:8d:8f:1c:84:b5:97:5f:bc:a1:
69:fd:6b:18:bb:1d:27:27:1b:f6:73:89:0f:92:40:7e:c3:89:
48:85:cc:23:e8:ec:71:04:36:41:9e:c8:9c:b6:07:9a:45:e5:
36:26:ea:0b:d0:fd:6b:ad:63:c1:eb:41:51:84:97:eb:15:14:
ec:50:39:07:97:64:f6:de:74:a9:b6:5f:e5:7a:01:a2:f4:26:
29:3f:f9:fc:56:4b:6b:a9:ce:8f:e9:77:47:dc:8e:99:05:20:
31:ba:b5:2b:3e:66:eb:a1:23:f7:f9:38:f5:e4:62:33:4a:02:
1e:1c:27:d2:0c:44:42:b8:74:06:81:c5:ca:a7:c3:e5:9f:8d:
e6:be:f4:69:2e:ef:54:9e:4e:02:8e:d3:cc:14:d9:81:a2:6f:
80:85:c7:3c:85:58:a7:4e:2c:a0:1c:3a:00:e2:a2:ab:5b:ea:
5d:eb:d8:28:a2:9b:16:c1:74:5b:0c:ee:1b:fb:49:78:c7:69:
fa:bd:29:b3:fa:d3:d3:40:4e:c2:39:8b:95:8d:22:09:e6:f2:
f0:5a:7c:55:05:6e:a8:8a:3b:15:d6:94:d8:cd:14:5a:55:17:
7f:19:9d:9d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZk0vhLFGtG1how9Ezz7ZoNIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4
YWJjYzUwHhcNMjUwOTEwMTc0ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZWM3NTJiZWVmMTA1NTgyZGU0NDZmZGRiOGNkMjExMzA2N2Y0Yjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNhERYZUupDgGOC+dICl5VR9e+9j
y3jE0T+YMS/dO7WVFXyGXTUUcX1yMhHGCPUoMdOaXYa50epA/pZIOiYytJyyqc9b
RPK9b8HEuJZ0TtYfB+qPHm1k9SJMifp3CsPfZ5+mbapZ8wCtnwwgerbbQHdItz6M
TTWGXWJ/oZfx2+wDeLoI5CnXrVYj8pDxrcYGYvQou4Cc55cyzpN9tLvHZW2Pc3YE
j8GVTDUwh/jWs8YvQaotxogWIZXxc+aZW97bsgHHiL89enux5KxO2eVFZijPSiQA
l2wu4fiSNWVdvWhTmStZguiWZJoXn2Xr/bFY7zqwdkWY8oosIOaSYN+CTQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJ7HUr7vEFWC3kRv3bjNIRMGf0t3MB8GA1UdIwQY
MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt
NmZlOWJmNjA1NjFjLzEvbnNkU3Z1OFFWWUxlUkdfZHVNMGhFd1pfUzNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj
LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZnmAwQB
wSY2MA0GCSqGSIb3DQEBCwUAA4IBAQCBqX9H/PrpklrlCtw8aZXwqOAeRv5LiqNy
RY+NjxyEtZdfvKFp/WsYux0nJxv2c4kPkkB+w4lIhcwj6OxxBDZBnsictgeaReU2
JuoL0P1rrWPB60FRhJfrFRTsUDkHl2T23nSptl/legGi9CYpP/n8Vktrqc6P6XdH
3I6ZBSAxurUrPmbroSP3+Tj15GIzSgIeHCfSDERCuHQGgcXKp8Pln43mvvRpLu9U
nk4CjtPMFNmBom+Ahcc8hVinTiygHDoA4qKrW+pd69goopsWwXRbDO4b+0l4x2n6
vSmz+tPTQE7COYuVjSIJ5vLwWnxVBW6oijsV1pTYzRRaVRd/GZ2d
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:47:48 2025 by rpki-client