Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/NZWNUN6SFbISLl_oXjXKemQjJ80.roa
File: NZWNUN6SFbISLl_oXjXKemQjJ80.roa (raw, json)
Hash identifier: dj+DtJpw9egcGyq75CC6K/sXZyCgFtQ8hTYp8M4jY+E=
Subject key identifier: 35:95:8D:50:DE:92:15:B2:12:2E:5F:E8:5E:35:CA:7A:64:23:27:CD
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 019763BCA99DBD1D6D9406FE7BF34FED890B
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/NZWNUN6SFbISLl_oXjXKemQjJ80.roa
Signing time: Thu 12 Jun 2025 10:43:17 +0000
ROA not before: Thu 12 Jun 2025 10:43:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25211
IP address blocks: 45.141.232.0/24 maxlen: 24
45.141.234.0/24 maxlen: 24
45.141.235.0/24 maxlen: 24
78.159.128.0/24 maxlen: 24
78.159.129.0/24 maxlen: 24
78.159.130.0/24 maxlen: 24
78.159.131.0/24 maxlen: 24
78.159.136.0/24 maxlen: 24
78.159.137.0/24 maxlen: 24
78.159.138.0/24 maxlen: 24
78.159.139.0/24 maxlen: 24
78.159.149.0/24 maxlen: 24
78.159.150.0/24 maxlen: 24
78.159.152.0/22 maxlen: 22
78.159.153.0/24 maxlen: 24
78.159.154.0/24 maxlen: 24
78.159.155.0/24 maxlen: 24
78.159.156.0/24 maxlen: 24
78.159.157.0/24 maxlen: 24
78.159.158.0/24 maxlen: 24
78.159.159.0/24 maxlen: 24
91.92.33.0/24 maxlen: 24
91.92.35.0/24 maxlen: 24
91.92.40.0/24 maxlen: 24
91.92.41.0/24 maxlen: 24
91.92.42.0/24 maxlen: 24
91.92.43.0/24 maxlen: 24
91.92.44.0/24 maxlen: 24
91.92.45.0/24 maxlen: 24
91.92.46.0/24 maxlen: 24
91.92.49.0/24 maxlen: 24
91.92.50.0/24 maxlen: 24
91.92.51.0/24 maxlen: 24
91.92.52.0/24 maxlen: 24
91.92.53.0/24 maxlen: 24
93.152.206.0/24 maxlen: 24
93.152.207.0/24 maxlen: 24
93.152.209.0/24 maxlen: 24
93.152.210.0/24 maxlen: 24
93.152.211.0/24 maxlen: 24
93.152.213.0/24 maxlen: 24
93.152.214.0/24 maxlen: 24
93.152.215.0/24 maxlen: 24
93.152.216.0/24 maxlen: 24
93.152.218.0/24 maxlen: 24
93.152.219.0/24 maxlen: 24
93.152.220.0/24 maxlen: 24
93.152.221.0/24 maxlen: 24
93.152.222.0/24 maxlen: 24
93.152.223.0/24 maxlen: 24
93.152.224.0/24 maxlen: 24
93.152.226.0/24 maxlen: 24
93.152.227.0/24 maxlen: 24
93.152.230.0/24 maxlen: 24
93.152.233.0/24 maxlen: 24
94.26.28.0/24 maxlen: 24
94.26.29.0/24 maxlen: 24
94.26.76.0/22 maxlen: 22
94.26.76.0/24 maxlen: 24
94.26.77.0/24 maxlen: 24
94.26.78.0/24 maxlen: 24
94.26.79.0/24 maxlen: 24
94.26.89.0/24 maxlen: 24
94.26.90.0/24 maxlen: 24
94.190.195.0/24 maxlen: 24
185.96.252.0/24 maxlen: 24
185.96.253.0/24 maxlen: 24
185.96.255.0/24 maxlen: 24
212.102.105.0/24 maxlen: 24
212.102.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:bc:a9:9d:bd:1d:6d:94:06:fe:7b:f3:4f:ed:89:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Jun 12 10:43:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35958d50de9215b2122e5fe85e35ca7a642327cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:60:b2:32:69:a0:54:a2:c7:85:bc:ba:a6:0b:
6d:2c:5f:e8:49:d3:0b:4f:94:51:9c:1d:79:87:5b:
ba:dd:11:3a:67:ad:68:74:38:e4:f3:02:01:f0:77:
1e:9a:87:1f:0f:29:27:59:e3:d2:1e:3d:42:02:5e:
37:a1:8a:85:ae:de:d6:68:6e:78:03:6d:d0:3b:87:
f7:4e:09:c5:c2:39:e6:54:c3:9f:99:6a:09:16:6b:
6d:a5:63:c1:ad:01:bf:77:0c:63:27:9f:57:ab:2c:
3e:b6:1b:03:02:6f:77:9b:29:2a:b3:61:0c:f8:f6:
4b:84:a4:d2:0b:15:87:4f:30:dc:86:81:a1:1a:82:
41:8a:f9:f4:63:00:56:a0:fa:c0:54:86:b3:9e:78:
b9:51:7d:54:a6:a7:9a:87:aa:ed:11:7b:29:3c:7d:
bf:02:d4:82:98:1d:6c:25:b9:ec:48:d9:80:c5:00:
c4:69:b7:ac:21:7a:d0:e7:fd:65:3f:a0:99:3a:c6:
db:b8:b1:b8:b7:81:84:c1:82:c3:9f:2f:24:c5:be:
d6:5f:e2:45:05:22:37:43:e4:4b:16:4a:48:2c:06:
0b:6d:88:bb:a0:a1:9c:35:0a:ee:c1:9f:d5:63:6e:
45:95:26:df:e8:3e:ce:04:08:95:c6:0b:da:bc:4c:
56:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:95:8D:50:DE:92:15:B2:12:2E:5F:E8:5E:35:CA:7A:64:23:27:CD
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/NZWNUN6SFbISLl_oXjXKemQjJ80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.232.0/24
45.141.234.0/23
78.159.128.0/22
78.159.136.0/22
78.159.149.0-78.159.150.255
78.159.152.0/21
91.92.33.0/24
91.92.35.0/24
91.92.40.0-91.92.46.255
91.92.49.0-91.92.53.255
93.152.206.0/23
93.152.209.0-93.152.211.255
93.152.213.0-93.152.216.255
93.152.218.0-93.152.224.255
93.152.226.0/23
93.152.230.0/24
93.152.233.0/24
94.26.28.0/23
94.26.76.0/22
94.26.89.0-94.26.90.255
94.190.195.0/24
185.96.252.0/23
185.96.255.0/24
212.102.105.0/24
212.102.107.0/24
Signature Algorithm: sha256WithRSAEncryption
05:c2:f6:d5:e3:a5:2c:d8:fc:e2:5f:b1:7d:80:66:0d:70:c3:
c1:ca:28:b4:8b:89:cd:2f:e8:a6:49:35:f2:05:65:1f:46:8b:
2a:23:a6:a3:5a:bb:bd:00:b0:41:f7:f4:a7:8d:ea:95:ba:14:
27:81:e9:da:1c:63:84:e6:00:b2:5e:c1:15:a5:5f:3d:f9:3a:
7b:c7:89:3f:ba:cf:ee:e5:87:50:c8:a1:53:a3:40:35:d1:8e:
11:8b:96:4e:ab:f2:4d:5b:0e:3e:79:14:72:46:5e:10:27:ec:
2a:0c:94:d6:79:c0:92:32:8f:3b:e8:98:8d:87:33:66:b8:f8:
21:26:a0:24:e4:a7:a3:ff:7d:ed:ab:92:ae:7b:b5:89:8a:e8:
2f:98:03:1a:e4:00:34:a3:d8:17:48:84:21:e3:34:71:b8:43:
9c:e8:8a:ca:d1:70:45:f5:ce:6f:af:60:0f:48:00:3a:2b:02:
ba:0c:91:af:33:48:14:8f:48:22:0f:dd:a9:9f:4d:5d:70:63:
93:bd:b7:5c:f5:d5:5a:5f:a5:be:10:21:31:ed:54:a7:00:8f:
bb:53:9a:c5:00:b4:db:0f:12:43:ef:58:16:21:7a:be:6d:b6:
e8:cc:e8:57:4e:4f:f9:6a:bf:38:b6:7f:a4:3a:48:e7:87:52:
c0:ae:94:03
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:41:51 2025 by rpki-client