Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/zitHq6RzfYk84KXVUBAABqqVp_0.roa
File: zitHq6RzfYk84KXVUBAABqqVp_0.roa (raw, json)
Hash identifier: EmIm89abu+JsBDL62eLXWK+qfUVPjG2B89cPGCU1K3I=
Subject key identifier: CE:2B:47:AB:A4:73:7D:89:3C:E0:A5:D5:50:10:00:06:AA:95:A7:FD
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01975E3C94B5214371183D26C897F47D85F9
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/zitHq6RzfYk84KXVUBAABqqVp_0.roa
Signing time: Wed 11 Jun 2025 09:05:17 +0000
ROA not before: Wed 11 Jun 2025 09:05:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42216
IP address blocks: 31.210.47.0/24 maxlen: 24
77.92.142.0/24 maxlen: 24
77.92.143.0/24 maxlen: 24
77.92.152.0/24 maxlen: 24
78.135.86.0/24 maxlen: 24
78.135.98.0/24 maxlen: 24
188.132.166.0/24 maxlen: 24
188.132.167.0/24 maxlen: 24
188.132.213.0/24 maxlen: 24
188.132.217.0/24 maxlen: 24
188.132.228.0/24 maxlen: 24
2a10:9440::/48 maxlen: 48
2a10:9440:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:3c:94:b5:21:43:71:18:3d:26:c8:97:f4:7d:85:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jun 11 09:05:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce2b47aba4737d893ce0a5d550100006aa95a7fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:36:16:76:48:2b:a5:cb:d1:19:e6:28:6b:b6:
40:b2:7f:e3:03:32:3e:bd:da:5e:bd:a0:12:f4:a4:
21:27:bb:a1:59:fe:90:9d:71:93:4b:f0:86:fe:f1:
1f:3b:76:4b:3f:b4:81:4f:ee:a5:c8:83:2e:b9:af:
da:43:b1:35:76:91:03:a8:82:c4:6b:c9:e6:37:45:
9b:a7:3e:24:5c:b5:46:f4:d8:13:0b:8a:96:05:70:
81:00:34:0d:24:1e:18:0b:2b:76:59:5a:ee:c5:94:
38:58:23:be:41:21:78:9f:2d:5f:9b:bd:29:cb:e6:
c2:dd:25:1f:f3:e8:fc:89:45:c4:4f:2d:c3:ff:00:
e4:21:41:9e:39:cd:73:20:d0:ce:6b:83:90:c5:08:
2e:14:1b:c8:03:fd:9e:17:9e:f4:47:13:a5:23:94:
bd:e0:36:8d:32:e8:ee:32:9c:b9:f3:e7:ce:31:79:
2a:7b:74:06:e6:02:66:ce:8f:ca:e1:6a:27:25:c0:
98:b6:cb:22:74:5e:15:7e:1a:ce:e1:20:43:ca:50:
db:fe:61:f2:18:09:75:2d:4c:a2:49:8b:77:54:8d:
43:dc:96:54:8a:1c:91:9d:99:13:7e:16:3d:a3:84:
f9:1e:3e:d6:ea:d7:2e:27:42:a8:97:30:3a:87:e3:
fb:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:2B:47:AB:A4:73:7D:89:3C:E0:A5:D5:50:10:00:06:AA:95:A7:FD
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/zitHq6RzfYk84KXVUBAABqqVp_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.47.0/24
77.92.142.0/23
77.92.152.0/24
78.135.86.0/24
78.135.98.0/24
188.132.166.0/23
188.132.213.0/24
188.132.217.0/24
188.132.228.0/24
IPv6:
2a10:9440::/47
Signature Algorithm: sha256WithRSAEncryption
30:b8:b3:2a:f6:bc:be:5a:0c:89:35:5d:84:17:15:4b:60:5d:
43:cf:62:67:b2:a5:a3:89:6a:7f:ae:ab:6e:9e:14:eb:a2:10:
de:43:cf:c0:49:7e:7b:9f:6b:ec:b2:c9:1b:35:0f:a3:10:c1:
82:b9:47:8e:e4:de:9c:b3:c4:68:41:99:16:11:71:62:59:33:
25:62:93:3f:f5:76:9f:02:1e:2c:20:98:74:a3:ed:ec:dd:9c:
50:d9:33:ef:83:d5:aa:cc:81:04:f1:3b:df:a5:6c:c2:6a:f9:
65:9c:41:d4:97:a7:6d:87:70:e9:79:d4:7f:3a:d9:1c:2e:52:
85:38:89:ff:67:5e:36:59:b8:85:ca:18:60:67:30:66:13:1c:
a5:5e:6c:01:2c:02:1a:df:3c:f8:f2:05:08:84:d1:2f:66:12:
39:e0:d8:c1:a6:3e:77:ee:1c:94:d6:53:68:5e:5a:37:c8:06:
6a:97:87:39:aa:fe:bc:7d:71:56:3b:eb:35:2a:fa:f8:cd:0d:
b8:69:ff:20:6b:0e:8a:a3:e0:6b:bf:f3:e2:62:dd:ff:d8:ea:
97:c3:c1:70:27:fb:18:25:63:ce:26:67:bf:c5:7f:ef:fc:2c:
df:65:19:eb:26:4b:e1:37:4b:d5:df:73:8c:ad:5a:bb:ec:87:
e8:d2:a0:12
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgISAZdePJS1IUNxGD0myJf0fYX5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjUwNjExMDkwNTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZTJiNDdhYmE0NzM3ZDg5M2NlMGE1ZDU1MDEwMDAwNmFhOTVhN2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TYWdkgrpcvRGeYoa7ZAsn/jAzI+
vdpevaAS9KQhJ7uhWf6QnXGTS/CG/vEfO3ZLP7SBT+6lyIMuua/aQ7E1dpEDqILE
a8nmN0Wbpz4kXLVG9NgTC4qWBXCBADQNJB4YCyt2WVruxZQ4WCO+QSF4ny1fm70p
y+bC3SUf8+j8iUXETy3D/wDkIUGeOc1zINDOa4OQxQguFBvIA/2eF570RxOlI5S9
4DaNMujuMpy58+fOMXkqe3QG5gJmzo/K4WonJcCYtssidF4VfhrO4SBDylDb/mHy
GAl1LUyiSYt3VI1D3JZUihyRnZkTfhY9o4T5Hj7W6tcuJ0KolzA6h+P7AQIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFM4rR6ukc32JPOCl1VAQAAaqlaf9MB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEveml0SHE2UnpmWWs4NEtYVlVCQUFCcXFWcF8wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGAGCCsGAQUFBwEHAQH/BFEwTzA8BAIAATA2AwQAH9IvAwQB
TVyOAwQATVyYAwQATodWAwQATodiAwQBvISmAwQAvITVAwQAvITZAwQAvITkMA8E
AgACMAkDBwEqEJRAAAAwDQYJKoZIhvcNAQELBQADggEBADC4syr2vL5aDIk1XYQX
FUtgXUPPYmeypaOJan+uq26eFOuiEN5Dz8BJfnufa+yyyRs1D6MQwYK5R47k3pyz
xGhBmRYRcWJZMyVikz/1dp8CHiwgmHSj7ezdnFDZM++D1arMgQTxO9+lbMJq+WWc
QdSXp22HcOl51H862RwuUoU4if9nXjZZuIXKGGBnMGYTHKVebAEsAhrfPPjyBQiE
0S9mEjng2MGmPnfuHJTWU2heWjfIBmqXhzmq/rx9cVY76zUq+vjNDbhp/yBrDoqj
4Gu/8+Ji3f/Y6pfDwXAn+xglY84mZ7/Ff+/8LN9lGesmS+E3S9Xfc4ytWrvsh+jS
oBI=
-----END CERTIFICATE-----
Generated at Sat Jun 14 22:14:58 2025 by rpki-client