Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/rNTIvqbNKxxJtGWChfe4Dqw9tgw.roa
File: rNTIvqbNKxxJtGWChfe4Dqw9tgw.roa (raw, json)
Hash identifier: CJ6pfwFz9zw3PaH1WC3tO5GAbQu9B8MKzIYwz13JpcI=
Subject key identifier: AC:D4:C8:BE:A6:CD:2B:1C:49:B4:65:82:85:F7:B8:0E:AC:3D:B6:0C
Certificate issuer: /CN=34b0c5a403e2dad3c47b791fda2042cf715009cf
Certificate serial: 019A3A5B72C9F727ADFAD760A7C9C4D06E31
Authority key identifier: 34:B0:C5:A4:03:E2:DA:D3:C4:7B:79:1F:DA:20:42:CF:71:50:09:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLDFpAPi2tPEe3kf2iBCz3FQCc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/rNTIvqbNKxxJtGWChfe4Dqw9tgw.roa
Signing time: Fri 31 Oct 2025 13:01:02 +0000
ROA not before: Fri 31 Oct 2025 13:01:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216188
IP address blocks: 31.47.238.0/24 maxlen: 24
31.47.239.0/24 maxlen: 24
45.10.24.0/24 maxlen: 24
45.133.9.0/24 maxlen: 24
88.218.227.0/24 maxlen: 24
91.210.224.0/24 maxlen: 24
152.89.239.0/24 maxlen: 24
185.45.149.0/24 maxlen: 24
185.245.96.0/24 maxlen: 24
185.248.140.0/24 maxlen: 24
193.135.10.0/24 maxlen: 24
2a13:fd40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLDFpAPi2tPEe3kf2iBCz3FQCc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3a:5b:72:c9:f7:27:ad:fa:d7:60:a7:c9:c4:d0:6e:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b0c5a403e2dad3c47b791fda2042cf715009cf
Validity
Not Before: Oct 31 13:01:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=acd4c8bea6cd2b1c49b4658285f7b80eac3db60c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:18:1a:fb:1d:ca:12:35:99:73:c8:bd:f6:0e:
f4:25:c1:3d:16:63:b8:a0:79:7f:b7:2e:c2:c4:8f:
a2:b4:40:40:6f:1e:4b:f1:41:77:99:52:f0:77:33:
38:f7:3d:72:84:8f:9b:09:ac:24:95:c2:6f:01:04:
9e:88:5f:52:a1:98:89:eb:74:14:e7:55:03:aa:b8:
98:78:d4:7b:63:03:d0:0e:ae:79:72:b9:c7:e1:36:
06:fa:e6:2f:87:94:81:6f:a5:fa:a1:a1:4f:04:39:
31:56:4d:85:8e:41:09:81:ba:96:24:c6:71:9e:70:
5f:f8:70:39:e5:ad:16:ad:cf:50:61:f8:6e:db:05:
4a:2d:5e:77:53:54:cc:9a:a8:29:e8:4c:48:5a:8e:
30:38:19:ab:a5:ec:0d:b5:2d:9e:5c:a1:9f:95:e1:
9e:db:5a:6a:e1:4c:d7:c1:b8:f7:11:53:b9:b5:34:
73:97:da:bc:84:d8:86:57:92:58:f1:a9:a3:4f:d1:
b0:02:47:7d:64:99:1a:a0:7b:4d:39:27:40:a6:00:
25:c1:ba:ec:2e:a0:c7:5a:d4:91:b0:4b:ad:53:28:
af:8c:cf:02:fe:1c:5a:23:20:93:28:a4:51:1d:8c:
ce:84:a4:d2:dd:2a:eb:ed:5b:22:e2:40:3a:00:14:
7a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D4:C8:BE:A6:CD:2B:1C:49:B4:65:82:85:F7:B8:0E:AC:3D:B6:0C
X509v3 Authority Key Identifier:
keyid:34:B0:C5:A4:03:E2:DA:D3:C4:7B:79:1F:DA:20:42:CF:71:50:09:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLDFpAPi2tPEe3kf2iBCz3FQCc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/rNTIvqbNKxxJtGWChfe4Dqw9tgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.47.238.0/23
45.10.24.0/24
45.133.9.0/24
88.218.227.0/24
91.210.224.0/24
152.89.239.0/24
185.45.149.0/24
185.245.96.0/24
185.248.140.0/24
193.135.10.0/24
IPv6:
2a13:fd40::/29
Signature Algorithm: sha256WithRSAEncryption
4a:81:8f:b7:e0:4f:ab:ce:fd:f6:98:24:7f:c6:a6:c5:eb:bb:
6a:86:1f:aa:54:5c:74:06:8a:82:8c:0d:4d:cc:0d:f1:0b:54:
ee:21:c7:0d:cc:54:b2:37:6e:88:8d:3b:b4:95:ef:c4:3c:98:
a1:b7:f1:33:82:5d:92:16:bb:8e:07:3d:21:17:7d:66:6b:10:
3a:43:b4:32:f1:92:00:41:fb:97:8c:db:4d:0b:e0:37:a8:9c:
5b:ca:ab:87:51:ad:23:14:1a:c7:b4:69:4f:df:45:05:f0:7f:
2a:ab:9d:28:01:55:0c:8e:cb:ac:7e:bf:4a:d8:72:3a:88:ea:
de:74:61:4b:42:05:24:94:b5:1f:e6:ba:a8:b4:b1:db:b2:b7:
01:8f:e1:94:d5:95:7b:14:df:82:16:fe:61:af:db:67:c9:c0:
32:e3:9b:b6:e6:58:4d:b0:33:0c:eb:3c:43:f2:e4:49:82:57:
fc:56:a4:20:98:db:07:ec:16:b8:d1:62:4a:08:39:09:62:11:
76:dc:40:08:8b:09:88:6a:c3:f3:98:c9:19:0c:40:95:38:ad:
b1:11:78:27:e2:b1:27:ef:06:12:b8:02:a9:6a:6c:e8:e6:d5:
aa:79:35:27:39:a7:ad:3e:34:43:39:13:26:48:68:1f:30:e3:
7f:48:52:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:59:02 2025 by rpki-client