Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Z56wz9s-yA71TOQ3V7HmB0iZlE0.roa
File: Z56wz9s-yA71TOQ3V7HmB0iZlE0.roa (raw, json)
Hash identifier: DwyslAfs3QgOyERfkmn0OYGStc2kCKpsEIT1p+3pYB0=
Subject key identifier: 67:9E:B0:CF:DB:3E:C8:0E:F5:4C:E4:37:57:B1:E6:07:48:99:94:4D
Certificate issuer: /CN=260f1087ccd06e6b47643c4ebe78bccf5f3ce5d2
Certificate serial: 01976903108CCD0280A678D528FD7CA28905
Authority key identifier: 26:0F:10:87:CC:D0:6E:6B:47:64:3C:4E:BE:78:BC:CF:5F:3C:E5:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jg8Qh8zQbmtHZDxOvni8z1885dI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Z56wz9s-yA71TOQ3V7HmB0iZlE0.roa
Signing time: Fri 13 Jun 2025 11:18:17 +0000
ROA not before: Fri 13 Jun 2025 11:18:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201735
IP address blocks: 37.152.80.0/21 maxlen: 21
77.220.200.0/22 maxlen: 22
85.204.146.0/24 maxlen: 24
86.106.88.0/24 maxlen: 24
89.33.160.0/23 maxlen: 23
89.35.24.0/24 maxlen: 24
89.35.134.0/24 maxlen: 24
89.35.205.0/24 maxlen: 24
109.232.64.0/21 maxlen: 21
146.66.136.0/21 maxlen: 21
185.15.148.0/22 maxlen: 22
185.65.64.0/22 maxlen: 22
185.201.72.0/22 maxlen: 22
185.247.180.0/22 maxlen: 22
185.249.60.0/22 maxlen: 22
185.249.84.0/22 maxlen: 22
188.214.56.0/24 maxlen: 24
194.36.28.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jg8Qh8zQbmtHZDxOvni8z1885dI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:03:10:8c:cd:02:80:a6:78:d5:28:fd:7c:a2:89:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260f1087ccd06e6b47643c4ebe78bccf5f3ce5d2
Validity
Not Before: Jun 13 11:18:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=679eb0cfdb3ec80ef54ce43757b1e6074899944d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a6:a3:b1:98:61:ba:bb:da:dd:23:43:e9:0e:
38:b6:4c:e7:8f:c6:2b:dd:cf:45:6e:f6:95:87:8b:
1e:ea:ed:32:4b:18:6d:cc:b8:25:83:87:82:35:fd:
31:ed:72:d8:61:76:a2:a1:5b:c6:11:eb:71:63:3a:
b0:d2:c6:5f:03:8c:7b:1a:37:f4:83:16:43:35:b3:
0e:8c:7b:34:cd:fc:17:64:0f:a5:c2:c6:f5:b8:2f:
79:7b:f9:3e:94:a3:55:37:6d:41:e1:ae:fa:4c:07:
88:93:70:f8:fc:9a:88:d0:19:be:b7:3f:5c:6b:d6:
26:63:80:2a:19:c0:bc:8f:62:c2:0a:3b:80:ea:c4:
58:83:e0:05:43:89:4e:dd:d8:8f:82:c8:56:b9:37:
0f:14:29:d3:15:80:ec:8b:e6:cc:52:69:83:fc:02:
2e:b8:9f:07:25:df:b9:ad:d9:2d:04:d7:ab:32:7f:
72:e1:51:eb:1d:e5:f6:50:d8:37:87:de:b8:33:a1:
8b:c3:ee:40:35:0c:2b:22:8d:a3:ce:75:db:06:fc:
5f:2c:02:ee:03:fb:43:3c:33:e1:e4:be:46:eb:61:
e9:d4:d8:03:6f:72:44:f0:22:fa:81:0b:f9:6b:8e:
4c:b9:b7:82:c9:65:4f:10:55:49:50:ca:0f:5d:ff:
0f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:9E:B0:CF:DB:3E:C8:0E:F5:4C:E4:37:57:B1:E6:07:48:99:94:4D
X509v3 Authority Key Identifier:
keyid:26:0F:10:87:CC:D0:6E:6B:47:64:3C:4E:BE:78:BC:CF:5F:3C:E5:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jg8Qh8zQbmtHZDxOvni8z1885dI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Z56wz9s-yA71TOQ3V7HmB0iZlE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.152.80.0/21
77.220.200.0/22
85.204.146.0/24
86.106.88.0/24
89.33.160.0/23
89.35.24.0/24
89.35.134.0/24
89.35.205.0/24
109.232.64.0/21
146.66.136.0/21
185.15.148.0/22
185.65.64.0/22
185.201.72.0/22
185.247.180.0/22
185.249.60.0/22
185.249.84.0/22
188.214.56.0/24
194.36.28.0/22
Signature Algorithm: sha256WithRSAEncryption
91:67:8e:6c:1d:9d:60:c0:ba:cc:6e:ea:98:76:fe:0d:d0:04:
33:ce:f0:50:d0:05:77:05:05:0b:d6:0f:c6:1c:15:08:3c:31:
32:e8:0b:85:e2:c8:aa:b2:1e:f4:2f:10:3c:b2:6b:69:2a:97:
44:b7:15:f2:80:ba:07:f3:47:d9:8b:f9:e8:3b:37:c0:fe:11:
8e:5f:a6:44:72:cd:79:86:99:90:d2:e0:a6:09:b4:31:90:73:
43:54:66:e7:16:80:51:b0:df:80:9d:e5:1f:bf:e8:a1:bc:2b:
f7:8f:0e:5c:4a:4e:11:c2:79:00:3a:ac:cc:4d:47:cd:c3:0d:
a5:4d:1e:89:f4:4d:7b:d1:9b:c6:85:03:e7:e6:53:fc:ef:9b:
d3:76:70:cc:db:b9:90:7a:cf:42:3b:e5:ec:68:97:fc:87:38:
7a:46:7a:47:3a:ca:a1:b2:9e:0e:b1:f3:34:fc:67:d2:59:65:
17:8e:66:f3:2d:5d:a0:5c:aa:3a:47:76:e7:1d:5e:10:65:6c:
09:37:a5:84:b3:22:c2:f7:cf:90:73:81:de:69:48:ad:52:d0:
6c:dc:b3:22:a1:c6:0e:c6:03:79:ce:9d:00:a3:bc:ed:93:d4:
b5:24:67:58:4e:85:47:64:93:79:f4:61:07:b8:fc:3e:08:0f:
43:b6:07:1f
-----BEGIN CERTIFICATE-----
MIIFZDCCBEygAwIBAgISAZdpAxCMzQKApnjVKP18ookFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2MGYxMDg3Y2NkMDZlNmI0NzY0M2M0ZWJlNzhiY2NmNWYz
Y2U1ZDIwHhcNMjUwNjEzMTExODE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzllYjBjZmRiM2VjODBlZjU0Y2U0Mzc1N2IxZTYwNzQ4OTk5NDRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16ajsZhhurva3SND6Q44tkznj8Yr
3c9FbvaVh4se6u0ySxhtzLglg4eCNf0x7XLYYXaioVvGEetxYzqw0sZfA4x7Gjf0
gxZDNbMOjHs0zfwXZA+lwsb1uC95e/k+lKNVN21B4a76TAeIk3D4/JqI0Bm+tz9c
a9YmY4AqGcC8j2LCCjuA6sRYg+AFQ4lO3diPgshWuTcPFCnTFYDsi+bMUmmD/AIu
uJ8HJd+5rdktBNerMn9y4VHrHeX2UNg3h964M6GLw+5ANQwrIo2jznXbBvxfLALu
A/tDPDPh5L5G62Hp1NgDb3JE8CL6gQv5a45MubeCyWVPEFVJUMoPXf8PMQIDAQAB
o4ICcDCCAmwwHQYDVR0OBBYEFGeesM/bPsgO9UzkN1ex5gdImZRNMB8GA1UdIwQY
MBaAFCYPEIfM0G5rR2Q8Tr54vM9fPOXSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmc4UWg4elFibXRIWkR4T3ZuaTh6MTg4NWRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy84NTM2ODItMzAzNS00NGZiLWI3YWUt
MTliMTJhOTU1MDY1LzEvWjU2d3o5cy15QTcxVE9RM1Y3SG1CMGlabEUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy84NTM2ODItMzAzNS00NGZiLWI3YWUtMTliMTJhOTU1MDY1
LzEvSmc4UWg4elFibXRIWkR4T3ZuaTh6MTg4NWRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGFBggrBgEFBQcBBwEB/wR2MHQwcgQCAAEwbAMEAyWYUAME
Ak3cyAMEAFXMkgMEAFZqWAMEAVkhoAMEAFkjGAMEAFkjhgMEAFkjzQMEA23oQAME
A5JCiAMEArkPlAMEArlBQAMEArnJSAMEArn3tAMEArn5PAMEArn5VAMEALzWOAME
AsIkHDANBgkqhkiG9w0BAQsFAAOCAQEAkWeObB2dYMC6zG7qmHb+DdAEM87wUNAF
dwUFC9YPxhwVCDwxMugLheLIqrIe9C8QPLJraSqXRLcV8oC6B/NH2Yv56Ds3wP4R
jl+mRHLNeYaZkNLgpgm0MZBzQ1Rm5xaAUbDfgJ3lH7/oobwr948OXEpOEcJ5ADqs
zE1HzcMNpU0eifRNe9GbxoUD5+ZT/O+b03ZwzNu5kHrPQjvl7GiX/Ic4ekZ6RzrK
obKeDrHzNPxn0lllF45m8y1doFyqOkd25x1eEGVsCTelhLMiwvfPkHOB3mlIrVLQ
bNyzIqHGDsYDec6dAKO87ZPUtSRnWE6FR2STefRhB7j8PggPQ7YHHw==
-----END CERTIFICATE-----
Generated at Tue Jun 17 22:11:58 2025 by rpki-client