Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/NM_JDNwVUUnzOl0tjo8YI633ZWU.roa
File: NM_JDNwVUUnzOl0tjo8YI633ZWU.roa (raw, json)
Hash identifier: e84RFw9kFr0ryyp9DHwJELh/R+0NFS7flRn3J1wRzak=
Subject key identifier: 34:CF:C9:0C:DC:15:51:49:F3:3A:5D:2D:8E:8F:18:23:AD:F7:65:65
Certificate issuer: /CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Certificate serial: 019A302607E786C2339A0CD2B179684987E6
Authority key identifier: 54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/NM_JDNwVUUnzOl0tjo8YI633ZWU.roa
Signing time: Wed 29 Oct 2025 13:26:30 +0000
ROA not before: Wed 29 Oct 2025 13:26:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9121
IP address blocks: 188.125.160.0/24 maxlen: 24
188.125.163.0/24 maxlen: 24
188.125.168.0/24 maxlen: 24
188.125.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:30:26:07:e7:86:c2:33:9a:0c:d2:b1:79:68:49:87:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Validity
Not Before: Oct 29 13:26:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=34cfc90cdc155149f33a5d2d8e8f1823adf76565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1a:f1:e0:84:9c:92:a0:84:9e:08:e5:e5:5a:
be:31:ae:f3:44:a9:2a:7d:7e:f0:22:88:d2:ea:b8:
52:f8:c5:98:44:46:c7:9f:14:a9:61:7c:46:6d:a5:
a7:92:81:9c:28:8a:f9:3b:e1:90:99:10:5e:83:19:
e5:6b:14:b1:53:4a:86:2a:45:4a:b0:b2:50:74:f5:
0a:37:4d:ab:95:12:cc:c6:02:a8:c1:29:b6:0c:f5:
48:38:32:76:15:eb:93:0b:9d:68:2a:95:c4:a1:ec:
4e:72:e2:4b:c0:79:95:83:3d:10:a8:cb:2e:bb:3b:
a2:6a:94:4c:1f:34:42:25:cf:47:43:fb:06:96:91:
67:90:0f:a3:a4:5a:86:ee:f1:e2:43:6d:71:41:d2:
fc:9d:be:62:2d:24:84:ec:f2:b2:81:14:21:d6:5b:
9b:76:51:3c:6f:d8:1d:f9:f3:26:3b:dc:8c:99:2b:
3f:a9:35:45:0f:7c:7d:c0:6b:c6:c6:9c:d1:5f:a9:
59:a1:67:df:f0:f7:ef:bf:e0:94:98:ec:52:02:08:
d3:43:32:53:00:7d:9f:3d:4b:24:f8:f6:d3:72:97:
65:b3:b6:04:55:9d:d4:b3:d9:fd:ed:5e:63:19:e6:
c8:e4:85:23:b7:56:57:4b:7e:8e:07:93:5c:86:25:
54:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:CF:C9:0C:DC:15:51:49:F3:3A:5D:2D:8E:8F:18:23:AD:F7:65:65
X509v3 Authority Key Identifier:
keyid:54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/NM_JDNwVUUnzOl0tjo8YI633ZWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.125.160.0/24
188.125.163.0/24
188.125.168.0/24
188.125.170.0/24
Signature Algorithm: sha256WithRSAEncryption
75:9a:7f:8e:56:ea:99:ce:e4:7c:79:c9:ea:0f:a9:6e:0d:71:
34:92:06:a7:3f:20:c7:09:b7:2b:ae:aa:4e:ec:f1:e0:cf:b5:
a3:c3:2a:45:f5:8e:22:10:6f:7c:a5:74:61:86:89:72:ad:1c:
5d:c9:bc:ef:95:7e:68:99:d8:4d:cc:12:6a:04:6a:88:86:a7:
fb:a5:b4:4c:5e:a3:16:7e:f5:ee:d1:44:c4:70:fb:0e:22:54:
c7:0b:77:ff:bd:92:13:7a:48:d8:99:c8:a0:f8:2a:1d:46:90:
54:0d:f3:f2:07:40:d3:2e:37:a7:d6:a5:ad:ec:2c:1d:25:74:
ed:dc:87:da:b5:e3:34:1f:fd:dd:ce:5f:3a:3c:b9:0c:29:07:
7f:7d:e6:3e:d0:d9:f0:06:50:e2:86:65:21:db:ae:fb:f7:37:
ec:19:94:32:be:0a:59:1a:d2:8c:e2:62:7b:b7:12:de:d9:98:
fe:1b:e6:af:49:40:bc:4b:3a:04:9f:81:e7:9b:3f:5f:0c:9a:
9b:78:af:39:c7:30:9d:bf:8e:1d:4a:a4:d5:dd:cd:76:19:03:
84:b4:91:cd:d0:be:6e:5d:59:f5:43:c0:0c:f6:cd:eb:80:70:
cd:0f:7f:eb:37:b7:22:d7:4c:8a:a1:4e:54:3d:22:0f:77:26:
0f:20:b6:ee
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZowJgfnhsIzmgzSsXloSYfmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MmY2MzNmNzZlOGQ4YWFlYWEzMmI1YWNlMTZhM2RiMzk0
M2Q4MGMwHhcNMjUxMDI5MTMyNjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNGNmYzkwY2RjMTU1MTQ5ZjMzYTVkMmQ4ZThmMTgyM2FkZjc2NTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxrx4ISckqCEngjl5Vq+Ma7zRKkq
fX7wIojS6rhS+MWYREbHnxSpYXxGbaWnkoGcKIr5O+GQmRBegxnlaxSxU0qGKkVK
sLJQdPUKN02rlRLMxgKowSm2DPVIODJ2FeuTC51oKpXEoexOcuJLwHmVgz0QqMsu
uzuiapRMHzRCJc9HQ/sGlpFnkA+jpFqG7vHiQ21xQdL8nb5iLSSE7PKygRQh1lub
dlE8b9gd+fMmO9yMmSs/qTVFD3x9wGvGxpzRX6lZoWff8Pfvv+CUmOxSAgjTQzJT
AH2fPUsk+PbTcpdls7YEVZ3Us9n97V5jGebI5IUjt1ZXS36OB5NchiVUSQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFDTPyQzcFVFJ8zpdLY6PGCOt92VlMB8GA1UdIwQY
MBaAFFQvYz926Niq6qMrWs4Wo9s5Q9gMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkM5alAzYm8yS3Jxb3l0YXpoYWoyemxEMkF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9kNmI4NzQtYWVhOC00YjdlLWIwZDIt
NjliOTUzYzlkNWFhLzEvTk1fSkROd1ZVVW56T2wwdGpvOFlJNjMzWldVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9kNmI4NzQtYWVhOC00YjdlLWIwZDItNjliOTUzYzlkNWFh
LzEvVkM5alAzYm8yS3Jxb3l0YXpoYWoyemxEMkF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAvH2gAwQA
vH2jAwQAvH2oAwQAvH2qMA0GCSqGSIb3DQEBCwUAA4IBAQB1mn+OVuqZzuR8ecnq
D6luDXE0kganPyDHCbcrrqpO7PHgz7WjwypF9Y4iEG98pXRhholyrRxdybzvlX5o
mdhNzBJqBGqIhqf7pbRMXqMWfvXu0UTEcPsOIlTHC3f/vZITekjYmcig+CodRpBU
DfPyB0DTLjen1qWt7CwdJXTt3IfateM0H/3dzl86PLkMKQd/feY+0NnwBlDihmUh
26779zfsGZQyvgpZGtKM4mJ7txLe2Zj+G+avSUC8SzoEn4Hnmz9fDJqbeK85xzCd
v44dSqTV3c12GQOEtJHN0L5uXVn1Q8AM9s3rgHDND3/rN7ci10yKoU5UPSIPdyYP
ILbu
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:03:51 2025 by rpki-client