
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/NicO7X1eeOmGxSSK_nbDJZV9Pdo.roa
File: NicO7X1eeOmGxSSK_nbDJZV9Pdo.roa (raw, json)
Hash identifier: brCTvgHrTley7WUwp/kIypsM1wDTrMGgNla9liJHlp4=
Subject key identifier: 36:27:0E:ED:7D:5E:78:E9:86:C5:24:8A:FE:76:C3:25:95:7D:3D:DA
Certificate issuer: /CN=7e0423211f49b1335e94b8bdbbb1168664f6804f
Certificate serial: 0198749D65AA1313A91B0974BFF45430B4EA
Authority key identifier: 7E:04:23:21:1F:49:B1:33:5E:94:B8:BD:BB:B1:16:86:64:F6:80:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgQjIR9JsTNelLi9u7EWhmT2gE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/NicO7X1eeOmGxSSK_nbDJZV9Pdo.roa
Signing time: Mon 04 Aug 2025 10:25:28 +0000
ROA not before: Mon 04 Aug 2025 10:25:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204213
IP address blocks: 86.106.142.0/24 maxlen: 24
86.107.47.0/24 maxlen: 24
86.107.184.0/24 maxlen: 24
89.32.248.0/24 maxlen: 24
89.32.249.0/24 maxlen: 24
89.32.250.0/24 maxlen: 24
89.32.251.0/24 maxlen: 24
89.33.87.0/24 maxlen: 24
89.35.172.0/24 maxlen: 24
89.39.208.0/24 maxlen: 24
89.40.65.0/24 maxlen: 24
89.42.208.0/24 maxlen: 24
89.42.209.0/24 maxlen: 24
89.42.210.0/24 maxlen: 24
89.42.211.0/24 maxlen: 24
89.45.89.0/24 maxlen: 24
185.94.96.0/24 maxlen: 24
185.94.97.0/24 maxlen: 24
185.94.98.0/24 maxlen: 24
185.94.99.0/24 maxlen: 24
188.212.22.0/24 maxlen: 24
217.144.104.0/24 maxlen: 24
217.144.105.0/24 maxlen: 24
217.144.106.0/24 maxlen: 24
217.144.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgQjIR9JsTNelLi9u7EWhmT2gE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:9d:65:aa:13:13:a9:1b:09:74:bf:f4:54:30:b4:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e0423211f49b1335e94b8bdbbb1168664f6804f
Validity
Not Before: Aug 4 10:25:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=36270eed7d5e78e986c5248afe76c325957d3dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b1:b1:34:ed:66:2e:3b:c6:28:f1:8a:0a:5a:
e0:2d:52:c0:ca:fb:49:62:99:88:84:5b:08:f5:41:
53:18:33:0e:af:11:2e:49:e0:96:ba:09:ad:86:27:
27:a8:3f:63:07:62:66:ee:53:b4:b1:f7:ac:d3:00:
38:78:4d:bb:7a:5b:50:4b:94:88:a8:a5:8e:8d:b3:
78:b0:e8:a3:57:2b:59:b8:65:e9:61:5f:2c:37:1a:
d8:c4:35:1a:f4:68:69:03:22:95:3f:17:da:ac:52:
a4:09:d5:3a:ec:a2:19:90:28:42:04:d5:69:bd:60:
b9:fb:f3:5c:db:05:b9:72:44:f9:fc:25:28:79:bf:
4e:6d:67:d3:a8:9e:79:66:ae:ac:9f:d2:53:c9:ff:
41:8c:87:16:67:30:bf:63:bd:36:ed:9b:26:13:1f:
f7:13:02:7d:e8:b6:06:6b:3b:0c:bd:35:8b:d0:10:
89:af:a0:7e:e0:e2:df:52:70:83:af:34:a2:70:3f:
0b:56:7b:ff:97:44:12:10:e5:da:91:67:46:0c:47:
cb:72:9e:c9:6f:4b:9d:e8:5b:16:d4:87:84:d7:af:
64:e3:c9:8f:c9:50:e4:68:74:0a:9d:fd:03:a3:cc:
64:4a:c9:da:fc:27:6b:bf:5d:a5:be:d4:8f:64:7e:
89:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:27:0E:ED:7D:5E:78:E9:86:C5:24:8A:FE:76:C3:25:95:7D:3D:DA
X509v3 Authority Key Identifier:
keyid:7E:04:23:21:1F:49:B1:33:5E:94:B8:BD:BB:B1:16:86:64:F6:80:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgQjIR9JsTNelLi9u7EWhmT2gE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/NicO7X1eeOmGxSSK_nbDJZV9Pdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.142.0/24
86.107.47.0/24
86.107.184.0/24
89.32.248.0/22
89.33.87.0/24
89.35.172.0/24
89.39.208.0/24
89.40.65.0/24
89.42.208.0/22
89.45.89.0/24
185.94.96.0/22
188.212.22.0/24
217.144.104.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:5a:56:85:fc:b8:7b:e2:17:df:ff:fc:f5:a9:4c:24:25:86:
1c:3c:45:97:f0:81:f4:3f:3b:d2:bd:ca:b9:fc:60:9c:5a:71:
1b:27:5c:80:67:af:eb:a5:2c:f8:5d:20:aa:5a:35:03:d3:75:
f3:84:63:da:e5:67:41:93:53:bd:f8:41:5b:e6:a3:58:45:a4:
69:b6:87:6c:f5:ae:24:72:b0:56:f6:8a:a4:d6:3b:29:80:8d:
db:db:2f:4a:c9:a0:06:69:e2:d1:dd:b7:49:59:ab:cb:1b:00:
71:fa:a5:2f:64:00:71:d0:2c:77:87:de:ad:bf:fb:c9:bf:fc:
59:f0:d5:5f:0b:45:6e:be:b6:8d:78:e5:b9:9a:5e:53:90:8d:
cc:0e:30:65:3f:bf:6b:0a:8c:61:9a:ca:f0:83:ca:45:27:e1:
ba:f3:c5:54:80:c4:c9:83:1d:af:f3:12:24:27:28:0d:14:08:
40:fe:57:ff:bc:81:8a:1a:54:77:ce:e1:bf:58:9e:4f:50:61:
d2:3b:6c:76:02:6d:c3:1e:ea:9f:b4:63:29:ee:a5:41:07:f9:
f9:37:15:1a:8e:73:4c:64:d4:ba:27:5d:7a:77:15:2b:03:12:
bb:10:e2:60:03:ab:fc:a8:89:f1:4f:da:7b:0f:6e:e0:5d:5f:
e2:b6:b4:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:49:35 2025 by rpki-client