Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/nSMzFiNQ-480zy8x-99xR6GCzaU.roa
File: nSMzFiNQ-480zy8x-99xR6GCzaU.roa (raw, json)
Hash identifier: xHEb827aQllBCqYL9z6zXBnDxlNIJVoaYvJbnxb3b9c=
Subject key identifier: 9D:23:33:16:23:50:FB:8F:34:CF:2F:31:FB:DF:71:47:A1:82:CD:A5
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019A4F131D17FD79A6C4E53F69BA5C67263D
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/nSMzFiNQ-480zy8x-99xR6GCzaU.roa
Signing time: Tue 04 Nov 2025 13:34:03 +0000
ROA not before: Tue 04 Nov 2025 13:34:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3301
IP address blocks: 192.36.96.0/24 maxlen: 24
192.121.40.0/24 maxlen: 24
192.121.50.0/23 maxlen: 23
192.121.52.0/24 maxlen: 24
192.121.115.0/24 maxlen: 24
192.121.229.0/24 maxlen: 24
192.165.8.0/24 maxlen: 24
192.165.12.0/24 maxlen: 24
192.165.31.0/24 maxlen: 24
192.165.95.0/24 maxlen: 24
192.165.173.0/24 maxlen: 24
192.165.180.0/24 maxlen: 24
192.165.229.0/24 maxlen: 24
192.176.124.0/24 maxlen: 24
193.180.7.0/24 maxlen: 24
193.180.175.0/24 maxlen: 24
193.180.176.0/24 maxlen: 24
193.181.72.0/24 maxlen: 24
193.181.73.0/24 maxlen: 24
193.181.74.0/24 maxlen: 24
193.182.107.0/24 maxlen: 24
193.182.126.0/24 maxlen: 24
193.182.152.0/23 maxlen: 23
193.182.152.0/24 maxlen: 24
193.182.153.0/24 maxlen: 24
193.182.190.0/24 maxlen: 24
193.183.228.0/23 maxlen: 23
193.183.230.0/23 maxlen: 23
193.183.236.0/23 maxlen: 23
193.234.184.0/24 maxlen: 24
193.234.185.0/24 maxlen: 24
193.235.48.0/24 maxlen: 24
193.235.152.0/24 maxlen: 24
194.14.154.0/24 maxlen: 24
194.14.155.0/24 maxlen: 24
194.14.156.0/24 maxlen: 24
194.14.245.0/24 maxlen: 24
194.68.72.0/22 maxlen: 22
194.68.76.0/23 maxlen: 23
194.68.79.0/24 maxlen: 24
194.68.127.0/24 maxlen: 24
194.103.240.0/20 maxlen: 20
194.103.240.0/21 maxlen: 21
194.103.249.0/24 maxlen: 24
194.103.250.0/23 maxlen: 23
194.103.252.0/22 maxlen: 22
194.132.95.0/24 maxlen: 24
194.132.188.0/23 maxlen: 23
194.132.190.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:13:1d:17:fd:79:a6:c4:e5:3f:69:ba:5c:67:26:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Nov 4 13:34:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d2333162350fb8f34cf2f31fbdf7147a182cda5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:76:55:5a:86:2f:3e:cd:2b:b3:22:11:a2:45:
77:f4:80:21:a0:de:7c:c6:52:1b:d7:32:3b:71:85:
70:64:9f:8b:84:ae:72:2a:f2:58:ad:4d:ba:91:73:
f5:a3:b3:2a:47:49:41:f6:57:2a:4a:3b:21:1a:f6:
34:ef:80:bf:d5:db:29:e9:0f:62:ca:e8:fc:6d:f3:
f4:71:d4:8b:c3:32:72:db:ac:cf:53:de:a2:2c:a5:
64:13:81:1c:73:d6:c0:1e:a1:81:6e:0f:10:22:c0:
c1:3b:2f:12:67:31:28:82:e0:cd:e1:10:41:61:a1:
29:40:3c:20:d4:ec:bb:9f:dc:a6:ef:1c:fd:17:4d:
ae:21:79:08:b0:6d:c9:62:0d:94:9b:25:78:71:a7:
d0:ce:88:a4:1f:1d:a0:dd:0d:10:dc:eb:ba:9a:84:
c7:2e:20:75:ff:04:f0:67:98:92:6d:09:a9:a9:dc:
06:66:dc:3c:c8:2c:31:4d:cd:10:c9:49:fd:91:11:
b3:c5:11:7b:25:80:74:69:62:3e:41:3b:e1:25:2b:
63:b9:67:e2:10:57:86:71:13:13:bf:56:98:07:47:
f1:ea:57:bc:b1:f4:0d:20:4d:88:5c:c1:f4:ec:e7:
84:c0:ea:48:9d:ad:1c:a7:e8:0e:e8:04:63:a7:25:
6a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:23:33:16:23:50:FB:8F:34:CF:2F:31:FB:DF:71:47:A1:82:CD:A5
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/nSMzFiNQ-480zy8x-99xR6GCzaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.96.0/24
192.121.40.0/24
192.121.50.0-192.121.52.255
192.121.115.0/24
192.121.229.0/24
192.165.8.0/24
192.165.12.0/24
192.165.31.0/24
192.165.95.0/24
192.165.173.0/24
192.165.180.0/24
192.165.229.0/24
192.176.124.0/24
193.180.7.0/24
193.180.175.0-193.180.176.255
193.181.72.0-193.181.74.255
193.182.107.0/24
193.182.126.0/24
193.182.152.0/23
193.182.190.0/24
193.183.228.0/22
193.183.236.0/23
193.234.184.0/23
193.235.48.0/24
193.235.152.0/24
194.14.154.0-194.14.156.255
194.14.245.0/24
194.68.72.0-194.68.77.255
194.68.79.0/24
194.68.127.0/24
194.103.240.0/20
194.132.95.0/24
194.132.188.0/22
Signature Algorithm: sha256WithRSAEncryption
bc:6e:45:45:bc:f5:56:fa:9f:8f:49:d6:af:13:5d:48:86:16:
5c:7a:5f:86:90:12:28:da:92:4e:00:60:ee:d7:07:61:e0:bd:
f3:c8:be:47:6a:f6:61:a5:28:a6:e8:cd:48:ea:a1:71:8d:e6:
37:9d:50:6e:e5:60:d1:e1:42:fa:c0:4f:41:7e:1b:b9:d9:1c:
10:8e:09:cf:37:a2:2f:0b:8e:29:c5:c3:96:31:32:89:8d:6c:
37:31:03:cb:a4:6f:c7:8a:fe:07:0b:3d:52:a3:93:aa:5e:3a:
6c:9a:7f:62:18:c1:43:1c:08:e0:f8:b4:59:dd:e6:59:9b:b5:
a6:42:f7:5e:e3:6d:21:43:1e:99:b4:70:cb:5b:ef:01:13:24:
e0:c3:05:20:47:09:82:b7:33:26:bf:e0:56:e9:14:bf:73:9e:
86:e6:62:3e:26:ba:68:d8:7d:e6:1c:97:b5:f3:52:f4:43:62:
78:4c:93:bb:6b:68:eb:83:6f:f4:26:b4:4b:a3:76:23:40:2b:
0f:9c:90:e8:5f:f0:3c:5d:fd:44:55:b9:53:94:35:ea:48:98:
2a:3e:90:80:21:78:b8:04:97:04:d6:78:55:0b:ce:50:b7:8c:
9b:57:fb:e8:7e:cd:df:1f:b8:43:47:bb:7c:5b:aa:46:6d:1d:
bd:8d:9a:be
-----BEGIN CERTIFICATE-----
MIIF6zCCBNOgAwIBAgISAZpPEx0X/XmmxOU/abpcZyY9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjUxMTA0MTMzNDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDIzMzMxNjIzNTBmYjhmMzRjZjJmMzFmYmRmNzE0N2ExODJjZGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnZVWoYvPs0rsyIRokV39IAhoN58
xlIb1zI7cYVwZJ+LhK5yKvJYrU26kXP1o7MqR0lB9lcqSjshGvY074C/1dsp6Q9i
yuj8bfP0cdSLwzJy26zPU96iLKVkE4Ecc9bAHqGBbg8QIsDBOy8SZzEoguDN4RBB
YaEpQDwg1Oy7n9ym7xz9F02uIXkIsG3JYg2UmyV4cafQzoikHx2g3Q0Q3Ou6moTH
LiB1/wTwZ5iSbQmpqdwGZtw8yCwxTc0QyUn9kRGzxRF7JYB0aWI+QTvhJStjuWfi
EFeGcRMTv1aYB0fx6le8sfQNIE2IXMH07OeEwOpIna0cp+gO6ARjpyVqcQIDAQAB
o4IC9zCCAvMwHQYDVR0OBBYEFJ0jMxYjUPuPNM8vMfvfcUehgs2lMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvblNNekZpTlEtNDgwenk4eC05OXhSNkdDemFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBCwYIKwYBBQUHAQcBAf8EgfswgfgwgfUEAgABMIHuAwQA
wCRgAwQAwHkoMAwDBAHAeTIDBADAeTQDBADAeXMDBADAeeUDBADApQgDBADApQwD
BADApR8DBADApV8DBADApa0DBADApbQDBADApeUDBADAsHwDBADBtAcwDAMEAMG0
rwMEAMG0sDAMAwQDwbVIAwQAwbVKAwQAwbZrAwQAwbZ+AwQBwbaYAwQAwba+AwQC
wbfkAwQBwbfsAwQBweq4AwQAweswAwQAweuYMAwDBAHCDpoDBADCDpwDBADCDvUw
DAMEA8JESAMEAcJETAMEAMJETwMEAMJEfwMEBMJn8AMEAMKEXwMEAsKEvDANBgkq
hkiG9w0BAQsFAAOCAQEAvG5FRbz1Vvqfj0nWrxNdSIYWXHpfhpASKNqSTgBg7tcH
YeC988i+R2r2YaUopujNSOqhcY3mN51QbuVg0eFC+sBPQX4budkcEI4JzzeiLwuO
KcXDljEyiY1sNzEDy6Rvx4r+Bws9UqOTql46bJp/YhjBQxwI4Pi0Wd3mWZu1pkL3
XuNtIUMembRwy1vvARMk4MMFIEcJgrczJr/gVukUv3OehuZiPia6aNh95hyXtfNS
9ENieEyTu2to64Nv9Ca0S6N2I0ArD5yQ6F/wPF39RFW5U5Q16kiYKj6QgCF4uASX
BNZ4VQvOULeMm1f76H7N3x+4Q0e7fFuqRm0dvY2avg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:14:20 2025 by rpki-client