Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/NZJDMNeawRRaR2kN6M6VUEMWS6s.roa
File: NZJDMNeawRRaR2kN6M6VUEMWS6s.roa (raw, json)
Hash identifier: 4yyzbuml8orMhWCVhBPIpnlBdZcJZlvRc7XP5PPxwGI=
Subject key identifier: 35:92:43:30:D7:9A:C1:14:5A:47:69:0D:E8:CE:95:50:43:16:4B:AB
Certificate issuer: /CN=fbde12b91cb1f2933a7be8eaff2d3e35deb381a6
Certificate serial: 01976F4D7A5A945E322114893D53D61250A4
Authority key identifier: FB:DE:12:B9:1C:B1:F2:93:3A:7B:E8:EA:FF:2D:3E:35:DE:B3:81:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/NZJDMNeawRRaR2kN6M6VUEMWS6s.roa
Signing time: Sat 14 Jun 2025 16:37:17 +0000
ROA not before: Sat 14 Jun 2025 16:37:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215900
IP address blocks: 185.50.239.0/24 maxlen: 24
2a14:7b00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 10:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:4d:7a:5a:94:5e:32:21:14:89:3d:53:d6:12:50:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbde12b91cb1f2933a7be8eaff2d3e35deb381a6
Validity
Not Before: Jun 14 16:37:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35924330d79ac1145a47690de8ce955043164bab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:04:88:77:65:34:e4:38:cb:43:2c:4e:23:e4:
60:a5:76:bf:c0:7d:0f:5f:29:5d:f1:c7:a5:06:10:
79:76:31:4a:23:ef:93:31:44:19:c2:83:05:fe:23:
d9:7d:66:7a:81:8b:01:7a:cf:a7:f4:ac:59:71:b7:
19:f9:af:4d:43:85:0a:13:7e:a6:71:45:d6:90:bd:
e7:0c:65:89:a5:26:55:a7:47:39:aa:f5:d7:54:8d:
f1:05:9d:cb:f3:7e:db:50:13:1c:c4:e9:93:e8:33:
dc:22:69:1c:1b:87:27:0b:7a:c8:ac:8f:f2:27:eb:
be:9c:75:c6:04:8a:de:fb:f7:65:c9:b1:4a:26:4d:
9f:4e:3d:b4:13:0c:c6:ce:e0:a9:22:ad:af:b7:f6:
d0:53:17:ca:a6:65:98:46:da:2c:0f:56:b4:8f:9c:
fb:9a:93:69:9f:65:08:46:27:80:99:0b:82:59:58:
58:8f:fc:22:48:0f:b4:8f:47:22:e4:eb:91:dc:99:
1d:a6:6c:f3:27:28:91:c9:f5:c9:1f:70:1e:e0:04:
d9:8a:df:3b:35:7c:12:bb:ca:c2:30:b0:14:9f:e1:
45:14:8a:7b:06:62:84:23:fd:b9:c8:af:84:f4:35:
44:7b:0b:64:e8:2f:58:6d:fb:80:e2:03:7c:cb:c5:
54:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:92:43:30:D7:9A:C1:14:5A:47:69:0D:E8:CE:95:50:43:16:4B:AB
X509v3 Authority Key Identifier:
keyid:FB:DE:12:B9:1C:B1:F2:93:3A:7B:E8:EA:FF:2D:3E:35:DE:B3:81:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/NZJDMNeawRRaR2kN6M6VUEMWS6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.239.0/24
IPv6:
2a14:7b00::/29
Signature Algorithm: sha256WithRSAEncryption
3c:fa:17:3a:8d:3c:3f:8a:43:6e:96:d1:b7:d1:c3:67:51:fc:
bf:09:9d:4f:1b:3d:03:44:2a:5b:82:1d:a6:80:fb:04:82:5e:
4e:1f:d0:58:85:6b:63:2a:a9:16:86:54:2f:ed:92:47:45:a8:
b7:22:25:fe:1d:d4:6d:34:fd:aa:6c:33:dd:a0:a2:36:32:db:
50:13:51:ae:11:d5:af:1b:49:6a:e8:5e:4d:5a:b8:fa:27:7e:
39:ac:3f:38:f0:c2:eb:50:3f:3b:9a:92:35:d1:9a:6f:0e:e3:
12:96:84:24:93:d0:56:29:ec:12:95:78:8c:29:c0:5c:d5:ba:
fd:54:37:b2:97:0b:c8:25:d2:63:1d:46:0e:a8:c4:2c:29:81:
b7:23:23:a2:25:24:9c:e5:8f:59:3f:2a:72:c7:d4:21:c6:51:
db:a4:b8:08:88:5c:fe:a8:da:b8:5e:91:80:9d:21:0e:a3:a1:
3a:07:4d:f7:b9:d0:ff:e4:49:13:2f:e8:7d:94:69:e9:c1:82:
20:b7:4e:7f:22:74:61:05:10:6f:fe:27:71:36:26:7b:6a:cc:
5a:26:82:7f:10:8e:78:53:29:fe:dc:4d:98:52:0e:7f:8f:aa:
66:ce:d9:c7:f9:3c:28:b7:3c:de:ad:10:72:8d:2e:60:cc:55:
91:23:ed:26
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZdvTXpalF4yIRSJPVPWElCkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiZGUxMmI5MWNiMWYyOTMzYTdiZThlYWZmMmQzZTM1ZGVi
MzgxYTYwHhcNMjUwNjE0MTYzNzE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTkyNDMzMGQ3OWFjMTE0NWE0NzY5MGRlOGNlOTU1MDQzMTY0YmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQSId2U05DjLQyxOI+RgpXa/wH0P
Xyld8celBhB5djFKI++TMUQZwoMF/iPZfWZ6gYsBes+n9KxZcbcZ+a9NQ4UKE36m
cUXWkL3nDGWJpSZVp0c5qvXXVI3xBZ3L837bUBMcxOmT6DPcImkcG4cnC3rIrI/y
J+u+nHXGBIre+/dlybFKJk2fTj20EwzGzuCpIq2vt/bQUxfKpmWYRtosD1a0j5z7
mpNpn2UIRieAmQuCWVhYj/wiSA+0j0ci5OuR3JkdpmzzJyiRyfXJH3Ae4ATZit87
NXwSu8rCMLAUn+FFFIp7BmKEI/25yK+E9DVEewtk6C9YbfuA4gN8y8VUDQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDWSQzDXmsEUWkdpDejOlVBDFkurMB8GA1UdIwQY
MBaAFPveErkcsfKTOnvo6v8tPjXes4GmMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS05NFN1Unl4OHBNNmUtanFfeTAtTmQ2emdhWS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzYvOWYwNTM5LWZkNzQtNGVlYy05MTMx
LTQ5MzE5Yjk0NzlmMy8xL05aSkRNTmVhd1JSYVIya042TTZWVUVNV1M2cy5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzYvOWYwNTM5LWZkNzQtNGVlYy05MTMxLTQ5MzE5Yjk0Nzlm
My8xLzEtOTRTdVJ5eDhwTTZlLWpxX3kwLU5kNnpnYVkuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAC5Mu8w
DQQCAAIwBwMFAyoUewAwDQYJKoZIhvcNAQELBQADggEBADz6FzqNPD+KQ26W0bfR
w2dR/L8JnU8bPQNEKluCHaaA+wSCXk4f0FiFa2MqqRaGVC/tkkdFqLciJf4d1G00
/apsM92gojYy21ATUa4R1a8bSWroXk1auPonfjmsPzjwwutQPzuakjXRmm8O4xKW
hCST0FYp7BKVeIwpwFzVuv1UN7KXC8gl0mMdRg6oxCwpgbcjI6IlJJzlj1k/KnLH
1CHGUdukuAiIXP6o2rhekYCdIQ6joToHTfe50P/kSRMv6H2UaenBgiC3Tn8idGEF
EG/+J3E2JntqzFomgn8QjnhTKf7cTZhSDn+PqmbO2cf5PCi3PN6tEHKNLmDMVZEj
7SY=
-----END CERTIFICATE-----
Generated at Thu Jun 19 15:57:16 2025 by rpki-client