Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/nUVJ_oE090Cz5XYsnId6j8EnIzc.roa
File: nUVJ_oE090Cz5XYsnId6j8EnIzc.roa (raw, json)
Hash identifier: hD5Kei2KhQGxpPbNI927Qo91gqrtj/cTH9YeG34uozI=
Subject key identifier: 9D:45:49:FE:81:34:F7:40:B3:E5:76:2C:9C:87:7A:8F:C1:27:23:37
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019A3F072225979683C21C3AAFBB9EF4D75C
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/nUVJ_oE090Cz5XYsnId6j8EnIzc.roa
Signing time: Sat 01 Nov 2025 10:47:03 +0000
ROA not before: Sat 01 Nov 2025 10:47:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19318
IP address blocks: 5.175.194.0/24 maxlen: 24
89.144.53.0/24 maxlen: 24
89.144.54.0/24 maxlen: 24
94.249.178.0/24 maxlen: 24
94.249.179.0/24 maxlen: 24
94.249.180.0/24 maxlen: 24
94.249.181.0/24 maxlen: 24
94.249.182.0/24 maxlen: 24
94.249.184.0/24 maxlen: 24
94.249.185.0/24 maxlen: 24
94.249.186.0/24 maxlen: 24
94.249.187.0/24 maxlen: 24
94.249.188.0/24 maxlen: 24
94.249.198.0/24 maxlen: 24
94.249.199.0/24 maxlen: 24
94.249.200.0/24 maxlen: 24
94.249.201.0/24 maxlen: 24
94.249.202.0/24 maxlen: 24
94.249.203.0/24 maxlen: 24
94.249.204.0/24 maxlen: 24
94.249.206.0/24 maxlen: 24
94.249.225.0/24 maxlen: 24
94.249.226.0/24 maxlen: 24
94.249.227.0/24 maxlen: 24
178.18.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3f:07:22:25:97:96:83:c2:1c:3a:af:bb:9e:f4:d7:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 1 10:47:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d4549fe8134f740b3e5762c9c877a8fc1272337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:5a:cd:1c:b5:6c:31:a0:45:a5:6f:7a:f5:7e:
93:a1:ec:82:96:bf:52:f6:b2:32:28:fb:79:1f:ab:
d1:bf:37:03:0a:30:17:c6:50:3e:18:30:e5:16:75:
fc:06:c7:1f:00:b2:5f:1b:c2:ec:06:e5:c1:3e:be:
23:22:c7:14:2d:76:59:c1:dd:88:0d:5e:c6:9c:eb:
87:fc:f9:1c:60:ca:de:15:f4:64:67:0e:23:0e:fc:
30:a3:18:eb:3c:ae:d4:57:73:0b:1b:54:e0:5d:f6:
5a:d8:20:a9:a6:ee:34:21:82:fb:42:50:c0:8e:21:
95:4d:e4:a5:7c:9a:23:d8:48:69:74:72:df:a9:d9:
7f:fa:c6:b2:71:7c:67:57:c7:60:52:ad:55:54:76:
f9:35:d0:64:6a:a6:fa:7b:ed:16:77:62:71:51:b2:
70:3d:d9:be:94:b7:95:59:65:ce:a0:52:90:7a:d8:
ee:61:79:d0:d7:f6:88:01:39:c1:ce:f8:6c:6b:c9:
13:23:03:69:00:8a:ba:40:88:9d:ed:98:6c:80:ec:
fc:08:9a:dd:e1:95:9e:65:df:90:98:2c:e6:4c:a5:
8d:13:58:d8:3b:ce:e6:6b:79:84:2c:dd:71:12:1e:
c2:a8:1e:ca:a8:da:33:d2:44:20:8a:46:49:cc:52:
f6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:45:49:FE:81:34:F7:40:B3:E5:76:2C:9C:87:7A:8F:C1:27:23:37
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/nUVJ_oE090Cz5XYsnId6j8EnIzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.194.0/24
89.144.53.0-89.144.54.255
94.249.178.0-94.249.182.255
94.249.184.0-94.249.188.255
94.249.198.0-94.249.204.255
94.249.206.0/24
94.249.225.0-94.249.227.255
178.18.149.0/24
Signature Algorithm: sha256WithRSAEncryption
da:d8:3e:1b:dc:62:de:59:64:56:8b:a2:a3:26:93:94:60:a7:
01:46:b3:0c:78:c4:b8:94:93:92:a0:eb:d3:0a:23:dd:2d:13:
c0:02:01:9d:d7:f7:e1:7a:ce:e2:5d:a5:d1:cf:5c:4e:48:c5:
55:00:00:7d:b0:1e:33:ef:79:27:10:e5:60:51:71:78:7c:64:
f3:70:c4:af:53:d2:fb:62:88:db:55:67:de:76:cf:1e:21:04:
e3:50:ea:b2:fe:e4:9a:6d:4f:04:d1:8a:71:69:c7:b8:21:80:
a0:21:84:88:48:9e:f5:44:d9:a4:be:d9:ed:16:b5:fa:ae:8c:
24:bc:be:93:5b:28:05:22:7e:0b:48:5f:99:a9:30:cb:02:e1:
9f:7f:72:fc:78:36:f7:21:dc:c1:d8:82:64:f6:61:50:91:ec:
1d:08:1d:03:0b:e3:24:45:e4:11:8e:78:7c:db:6a:f3:cf:fb:
96:83:06:c7:cf:e8:a1:8b:bb:00:49:34:11:3f:4c:77:cc:d5:
cc:9d:86:92:62:ec:d5:f2:3e:99:ed:b7:0a:cd:a0:db:e2:2c:
de:56:e6:c6:4d:ed:db:aa:1b:c4:46:ab:a6:2c:96:1f:08:23:
06:c7:c2:86:37:55:0b:6c:c3:02:54:2f:b0:c0:0f:fb:c7:5d:
a2:f4:53:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:24:45 2025 by rpki-client