Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/ZPxgsnjv7jwo30luYis5CI0t_T4.roa
File: ZPxgsnjv7jwo30luYis5CI0t_T4.roa (raw, json)
Hash identifier: EMPPfN7XNvjOmVJeUGZArk1l9zfLaFwM7b+rjzdo6CA=
Subject key identifier: 64:FC:60:B2:78:EF:EE:3C:28:DF:49:6E:62:2B:39:08:8D:2D:FD:3E
Certificate issuer: /CN=80f358b2ce02ba8ff0ba14eec5f337a8da11c0dc
Certificate serial: 019A537BF17D5D7284114C1510D1884E16AE
Authority key identifier: 80:F3:58:B2:CE:02:BA:8F:F0:BA:14:EE:C5:F3:37:A8:DA:11:C0:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPNYss4Cuo_wuhTuxfM3qNoRwNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/ZPxgsnjv7jwo30luYis5CI0t_T4.roa
Signing time: Wed 05 Nov 2025 10:07:02 +0000
ROA not before: Wed 05 Nov 2025 10:07:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60331
IP address blocks: 185.32.96.0/22 maxlen: 24
2a00:c120::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/gPNYss4Cuo_wuhTuxfM3qNoRwNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/gPNYss4Cuo_wuhTuxfM3qNoRwNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gPNYss4Cuo_wuhTuxfM3qNoRwNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:7b:f1:7d:5d:72:84:11:4c:15:10:d1:88:4e:16:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f358b2ce02ba8ff0ba14eec5f337a8da11c0dc
Validity
Not Before: Nov 5 10:07:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64fc60b278efee3c28df496e622b39088d2dfd3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:88:58:a1:40:d6:c9:33:9d:e8:0e:68:7a:db:
57:a9:71:9b:73:81:81:bc:41:0c:64:65:6b:6e:d7:
ba:6c:51:80:03:d9:4c:e1:d0:04:09:14:f3:76:0c:
6b:2b:2e:a3:26:8a:1e:c1:7c:ec:cd:a0:f1:db:1d:
d1:ce:68:c1:5a:c1:4e:dc:40:d4:0d:99:2f:f5:eb:
ee:09:67:9c:80:5d:88:34:d1:aa:12:0b:18:66:4f:
f2:77:6b:ca:ed:24:6f:de:f5:b9:74:e6:b3:61:f0:
82:51:d3:aa:7c:55:21:56:b1:74:62:f0:6b:4d:2d:
ff:79:96:9a:65:ce:fa:65:6d:7a:bb:01:a6:d0:b1:
dc:d1:37:6b:b2:e4:a8:bb:bd:15:8d:6b:cc:c2:2d:
15:8a:ed:8e:e9:10:3b:5b:c1:84:cf:21:71:01:4a:
ee:b2:4b:81:69:e8:7e:a7:22:d2:8f:b9:42:ca:73:
9b:c3:6a:8d:54:2e:68:64:fa:f8:01:bc:2a:9f:1a:
d9:a7:1d:4e:1f:1f:39:6c:72:b9:d0:eb:54:1f:11:
5a:3f:be:16:7c:88:28:70:74:ba:0d:71:c3:2a:b2:
ca:7f:3f:57:8e:c4:bc:85:4f:14:7c:f4:a3:2e:1b:
22:c2:ef:cd:06:5d:3d:da:0c:a4:93:b7:22:1f:26:
cf:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:FC:60:B2:78:EF:EE:3C:28:DF:49:6E:62:2B:39:08:8D:2D:FD:3E
X509v3 Authority Key Identifier:
keyid:80:F3:58:B2:CE:02:BA:8F:F0:BA:14:EE:C5:F3:37:A8:DA:11:C0:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPNYss4Cuo_wuhTuxfM3qNoRwNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/ZPxgsnjv7jwo30luYis5CI0t_T4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/gPNYss4Cuo_wuhTuxfM3qNoRwNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.32.96.0/22
IPv6:
2a00:c120::/32
Signature Algorithm: sha256WithRSAEncryption
4b:d2:3b:5e:46:33:a6:37:79:8e:6a:ae:74:a9:f2:f8:0d:74:
83:33:18:df:e2:e0:82:b2:53:5d:62:d5:e7:6a:1c:35:5d:fa:
e6:64:98:bd:5b:b2:47:03:3c:41:94:19:10:a1:55:de:09:8c:
fa:2e:53:20:40:71:10:43:22:8b:c1:19:66:53:1c:a1:ae:f5:
c6:5f:fc:ed:a9:68:8e:dd:a6:50:6f:ce:47:30:94:fb:f4:08:
ad:9d:2d:47:8d:54:7e:f4:6c:70:9b:bf:b7:cc:3c:3d:29:07:
ac:dd:92:b2:7c:c3:4b:f1:c8:57:21:2b:95:04:4b:59:ed:fb:
00:9c:7b:43:19:60:f5:a1:e3:70:8e:4b:16:cb:b2:84:93:da:
84:8d:d9:a9:b1:01:a9:0f:fa:60:82:a8:9a:68:67:e2:76:e5:
b1:3f:7d:23:56:2c:24:13:78:11:6f:9c:8e:75:a5:14:8d:6f:
07:3d:17:06:a8:31:bd:c0:6b:bb:81:ed:44:ce:28:55:3f:72:
ea:17:7e:8a:22:78:4f:54:90:d8:80:1b:67:3e:9e:f6:d8:25:
1b:5b:12:32:6b:89:ba:1c:2d:f3:48:a2:fb:3b:a8:88:3d:64:
c1:a0:05:f3:42:eb:34:c1:8d:b3:ff:c8:49:dd:30:4a:47:23:
0c:e5:07:6e
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZpTe/F9XXKEEUwVENGIThauMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZjM1OGIyY2UwMmJhOGZmMGJhMTRlZWM1ZjMzN2E4ZGEx
MWMwZGMwHhcNMjUxMTA1MTAwNzAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NGZjNjBiMjc4ZWZlZTNjMjhkZjQ5NmU2MjJiMzkwODhkMmRmZDNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4hYoUDWyTOd6A5oettXqXGbc4GB
vEEMZGVrbte6bFGAA9lM4dAECRTzdgxrKy6jJooewXzszaDx2x3RzmjBWsFO3EDU
DZkv9evuCWecgF2INNGqEgsYZk/yd2vK7SRv3vW5dOazYfCCUdOqfFUhVrF0YvBr
TS3/eZaaZc76ZW16uwGm0LHc0TdrsuSou70VjWvMwi0Viu2O6RA7W8GEzyFxAUru
skuBaeh+pyLSj7lCynObw2qNVC5oZPr4AbwqnxrZpx1OHx85bHK50OtUHxFaP74W
fIgocHS6DXHDKrLKfz9XjsS8hU8UfPSjLhsiwu/NBl092gykk7ciHybP4wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFGT8YLJ47+48KN9JbmIrOQiNLf0+MB8GA1UdIwQY
MBaAFIDzWLLOArqP8LoU7sXzN6jaEcDcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1BOWXNzNEN1b193dWhUdXhmTTNxTm9Sd053LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9kODc5M2QtNDdkOC00ZDc4LTlhZGUt
MzUxYmZkODNmY2MxLzEvWlB4Z3NuanY3andvMzBsdVlpczVDSTB0X1Q0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9kODc5M2QtNDdkOC00ZDc4LTlhZGUtMzUxYmZkODNmY2Mx
LzEvZ1BOWXNzNEN1b193dWhUdXhmTTNxTm9Sd053LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuSBgMA0E
AgACMAcDBQAqAMEgMA0GCSqGSIb3DQEBCwUAA4IBAQBL0jteRjOmN3mOaq50qfL4
DXSDMxjf4uCCslNdYtXnahw1XfrmZJi9W7JHAzxBlBkQoVXeCYz6LlMgQHEQQyKL
wRlmUxyhrvXGX/ztqWiO3aZQb85HMJT79AitnS1HjVR+9Gxwm7+3zDw9KQes3ZKy
fMNL8chXISuVBEtZ7fsAnHtDGWD1oeNwjksWy7KEk9qEjdmpsQGpD/pggqiaaGfi
duWxP30jViwkE3gRb5yOdaUUjW8HPRcGqDG9wGu7ge1EzihVP3LqF36KInhPVJDY
gBtnPp722CUbWxIya4m6HC3zSKL7O6iIPWTBoAXzQus0wY2z/8hJ3TBKRyMM5Qdu
-----END CERTIFICATE-----
Generated at Wed Nov 5 20:41:37 2025 by rpki-client