Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/nc9IHl-76nH3LBEiGITY6Sq-VwE.roa
File: nc9IHl-76nH3LBEiGITY6Sq-VwE.roa (raw, json)
Hash identifier: oAT6Am/Rvg4guNKjbfvDMf0lwZlTL1IbXeXsKUw0t/4=
Subject key identifier: 9D:CF:48:1E:5F:BB:EA:71:F7:2C:11:22:18:84:D8:E9:2A:BE:57:01
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0199AB27DF17AFBAE448150F719AA4D12942
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/nc9IHl-76nH3LBEiGITY6Sq-VwE.roa
Signing time: Fri 03 Oct 2025 17:39:00 +0000
ROA not before: Fri 03 Oct 2025 17:39:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215540
IP address blocks: 80.253.251.0/24 maxlen: 24
113.30.152.0/24 maxlen: 24
185.99.96.0/24 maxlen: 24
185.214.74.0/24 maxlen: 24
185.242.247.0/24 maxlen: 24
193.8.127.0/24 maxlen: 24
195.66.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ab:27:df:17:af:ba:e4:48:15:0f:71:9a:a4:d1:29:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 3 17:39:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9dcf481e5fbbea71f72c11221884d8e92abe5701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:03:1c:e8:75:7e:7d:c0:ac:1c:b9:7c:ad:f8:
e4:6a:68:4b:7d:bd:48:57:92:56:9d:64:0f:71:6b:
58:1b:bf:a7:95:e1:0a:5a:bd:6c:f7:fd:7d:84:10:
93:3b:eb:d3:c7:a6:7c:05:48:76:fa:76:26:86:61:
93:87:d8:44:cd:3c:02:ff:d5:ba:f9:f8:78:74:96:
56:4b:0f:64:79:68:70:6c:9a:46:af:51:2c:c5:0e:
c6:76:97:4d:6d:19:78:5a:01:9d:34:7d:ea:f8:a2:
d3:59:88:e4:11:20:e7:1a:bf:a4:c6:cd:3c:e2:e6:
1e:09:3e:cc:89:0c:ad:ad:52:fe:24:8a:fc:48:99:
50:21:cf:cd:93:68:f8:e2:90:84:57:fd:7d:13:e1:
d1:35:6c:39:87:13:27:5b:17:ec:3a:15:bc:13:ba:
a1:5e:03:03:e7:c8:72:5a:9c:94:60:1f:ef:c2:0f:
61:bc:23:7c:f9:7d:06:a7:a7:e2:b3:06:c7:4b:0e:
09:ad:1d:92:54:35:d8:70:55:aa:d3:4d:8a:b4:eb:
b6:40:a0:14:7f:d7:cf:f9:c6:53:e4:89:51:05:b8:
d9:d0:62:da:c7:1e:0f:28:36:c7:15:35:06:f5:4a:
f6:5b:d3:a1:54:f1:48:f4:61:bf:77:33:3c:bb:4e:
f0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:CF:48:1E:5F:BB:EA:71:F7:2C:11:22:18:84:D8:E9:2A:BE:57:01
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/nc9IHl-76nH3LBEiGITY6Sq-VwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.251.0/24
113.30.152.0/24
185.99.96.0/24
185.214.74.0/24
185.242.247.0/24
193.8.127.0/24
195.66.25.0/24
Signature Algorithm: sha256WithRSAEncryption
83:e9:37:b9:ed:8a:27:ad:4f:dd:3e:eb:ea:ed:90:31:8b:62:
50:2a:96:88:2b:b1:c8:1d:06:91:ea:14:98:0e:33:15:06:d8:
70:20:77:be:c8:f4:42:e1:aa:89:80:7c:dc:e1:2a:7c:dc:27:
0e:9c:c6:33:d1:8b:4b:38:06:86:cf:e6:1d:04:c4:4a:b3:99:
c5:17:5c:25:48:c1:eb:d0:2e:98:09:01:44:de:73:9f:74:27:
94:c9:94:4c:d7:51:d4:51:2c:20:ea:10:7a:08:22:15:f6:47:
c3:e7:41:28:e1:c6:d3:83:f0:39:cf:d8:61:4c:87:69:d8:3a:
f9:99:59:8c:7b:b2:c1:7c:8f:22:0c:ba:47:d9:06:a9:fe:77:
14:b9:ad:60:38:3c:b6:44:fc:4f:49:db:e6:13:0c:03:ad:b1:
f5:68:a1:de:a3:87:fa:5e:92:0a:35:43:a9:5a:dd:5f:67:6a:
20:bb:47:c6:67:f4:d5:fd:b4:13:c9:82:71:08:3d:c6:40:55:
af:27:b1:d4:f9:3d:9e:77:53:44:d6:62:b4:77:2a:70:75:aa:
2a:f4:a5:af:66:59:4d:e0:59:a3:3d:4c:3c:7e:11:8f:9a:42:
a6:9a:3d:10:1b:ab:02:fa:fb:86:fd:7f:2e:2c:f0:75:0f:95:
cf:89:07:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:55:03 2025 by rpki-client