Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/nyslHXPfyz0FM3udFOE-7tndyMk.roa
File: nyslHXPfyz0FM3udFOE-7tndyMk.roa (raw, json)
Hash identifier: gPoCAQJEwCTv4wbyGKoKpT/fwNV2im1/jc8HR0EwRAo=
Subject key identifier: 9F:2B:25:1D:73:DF:CB:3D:05:33:7B:9D:14:E1:3E:EE:D9:DD:C8:C9
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 019726460F94718878B910F689D2FEB6BF5C
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/nyslHXPfyz0FM3udFOE-7tndyMk.roa
Signing time: Sat 31 May 2025 12:16:55 +0000
ROA not before: Sat 31 May 2025 12:16:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199152
IP address blocks: 185.120.56.0/24 maxlen: 24
185.120.57.0/24 maxlen: 24
185.120.58.0/24 maxlen: 24
212.22.75.0/24 maxlen: 24
212.22.77.0/24 maxlen: 24
2a06:c3c0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 21:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:26:46:0f:94:71:88:78:b9:10:f6:89:d2:fe:b6:bf:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: May 31 12:16:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f2b251d73dfcb3d05337b9d14e13eeed9ddc8c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:41:a2:33:54:36:e9:b2:5f:9a:f7:7c:82:4c:
c6:08:7c:88:17:de:49:aa:87:9c:4b:44:1c:40:27:
68:7a:69:1c:ec:93:59:d0:1c:ca:2c:d4:19:3e:36:
24:0a:eb:01:0e:36:07:95:96:4f:1e:1f:ee:4e:94:
61:a6:3b:0f:b8:1e:3f:56:03:3a:5f:01:41:3c:0d:
66:16:06:dd:02:32:e9:fa:bf:c5:c5:dc:b4:3c:99:
df:dd:65:a0:16:70:e5:f0:e7:d7:c2:a3:68:45:05:
97:be:b1:25:c5:47:c5:55:bb:ea:1b:2a:21:56:4f:
03:57:85:c5:97:be:bc:af:4b:47:ba:63:39:fa:60:
7b:a7:1a:a0:75:55:62:7b:8a:57:68:b7:25:93:b0:
b4:89:81:0b:e7:a4:d8:2d:90:7d:58:a3:f3:02:ef:
59:57:13:1a:fb:9c:10:d4:1f:b7:d5:6d:d1:72:91:
13:41:6c:0b:45:dc:83:f5:c8:e6:69:7e:40:b6:04:
57:e2:09:53:7c:74:23:fa:75:62:76:5f:3c:01:fd:
c7:a6:f8:46:89:8b:f0:f6:54:4e:0f:6f:98:56:0c:
ea:a3:89:0b:b1:27:b1:8e:03:f0:dd:21:3b:26:4c:
bb:3d:a7:c9:fe:56:bf:c7:ce:51:43:2b:1b:25:97:
b4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:2B:25:1D:73:DF:CB:3D:05:33:7B:9D:14:E1:3E:EE:D9:DD:C8:C9
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/nyslHXPfyz0FM3udFOE-7tndyMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.56.0-185.120.58.255
212.22.75.0/24
212.22.77.0/24
IPv6:
2a06:c3c0:1::/48
Signature Algorithm: sha256WithRSAEncryption
50:66:52:e5:62:ac:26:92:e8:42:5e:10:2e:25:35:cf:fa:f0:
1f:e4:41:99:f3:3d:c9:8e:69:82:3f:75:2b:bb:15:2d:d0:fd:
65:0c:20:2c:0d:04:d0:78:92:2f:52:8c:0c:e6:ec:45:a3:ca:
06:67:78:8a:a5:2d:9c:91:f5:6e:54:73:93:13:3f:4c:1c:f4:
6d:94:fe:c3:24:4a:f9:c0:b4:85:d8:19:81:6e:3c:37:5b:ef:
5c:da:c5:24:d2:43:82:a1:c9:13:af:d6:00:e0:39:9e:11:08:
db:25:4b:b5:c4:87:a1:1a:4f:5b:7c:24:71:84:f0:14:ec:33:
5b:1d:1b:10:54:c2:f5:9c:9b:63:b2:8f:b3:1e:85:90:f2:b1:
c3:b4:b5:b5:0f:27:16:69:5c:88:2c:3f:1b:79:e6:23:71:40:
18:71:47:d3:7d:93:cb:a9:cb:db:8e:23:bb:7f:93:f8:1b:4f:
79:dd:b9:3d:55:92:69:a4:fa:1e:f5:fb:ab:90:73:21:b1:3f:
37:49:a3:61:95:7d:c3:f4:fa:8d:4b:dd:5b:ff:33:ad:c3:8e:
5f:ab:70:f4:81:63:4c:16:68:39:24:ae:d7:9b:0c:d9:2c:95:
6f:29:d3:38:c0:c0:1f:88:9c:88:58:06:f0:44:86:6a:07:f5:
0c:55:cf:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 08:03:15 2025 by rpki-client