Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/cTZC_iYST0hrQg0t1RWus9HRwQo.roa
File: cTZC_iYST0hrQg0t1RWus9HRwQo.roa (raw, json)
Hash identifier: 7R8gMQhVP4xAa3Ng9vqXfvpMShDEtvZUOHLny0m2nyM=
Subject key identifier: 71:36:42:FE:26:12:4F:48:6B:42:0D:2D:D5:15:AE:B3:D1:D1:C1:0A
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 019A4DCE16D7B709A04F1F4B0FFF51999977
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/cTZC_iYST0hrQg0t1RWus9HRwQo.roa
Signing time: Tue 04 Nov 2025 07:39:03 +0000
ROA not before: Tue 04 Nov 2025 07:39:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202656
IP address blocks: 45.136.206.0/24 maxlen: 24
45.137.52.0/24 maxlen: 24
45.137.53.0/24 maxlen: 24
45.137.55.0/24 maxlen: 24
45.137.191.0/24 maxlen: 24
45.139.28.0/24 maxlen: 24
45.139.31.0/24 maxlen: 24
45.140.171.0/24 maxlen: 24
45.140.173.0/24 maxlen: 24
45.141.186.0/24 maxlen: 24
45.141.187.0/24 maxlen: 24
45.145.162.0/24 maxlen: 24
45.147.1.0/24 maxlen: 24
45.149.83.0/24 maxlen: 24
45.152.225.0/24 maxlen: 24
45.154.162.0/24 maxlen: 24
85.202.166.0/24 maxlen: 24
85.202.167.0/24 maxlen: 24
91.191.186.0/24 maxlen: 24
91.212.82.0/24 maxlen: 24
91.220.84.0/24 maxlen: 24
91.220.90.0/24 maxlen: 24
91.220.126.0/24 maxlen: 24
91.221.38.0/24 maxlen: 24
92.249.13.0/24 maxlen: 24
92.249.14.0/24 maxlen: 24
193.150.98.0/24 maxlen: 24
193.150.170.0/24 maxlen: 24
193.150.171.0/24 maxlen: 24
193.163.199.0/24 maxlen: 24
194.33.8.0/24 maxlen: 24
194.33.9.0/24 maxlen: 24
194.55.103.0/24 maxlen: 24
194.55.104.0/24 maxlen: 24
194.61.76.0/24 maxlen: 24
194.61.233.0/24 maxlen: 24
194.147.84.0/24 maxlen: 24
194.147.85.0/24 maxlen: 24
195.245.110.0/24 maxlen: 24
213.139.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:ce:16:d7:b7:09:a0:4f:1f:4b:0f:ff:51:99:99:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Nov 4 07:39:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=713642fe26124f486b420d2dd515aeb3d1d1c10a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8c:97:ca:4f:50:17:99:40:1f:26:be:f0:67:
a7:43:f5:a7:24:2c:b2:f0:64:74:45:a6:ce:8a:ba:
83:0b:91:05:7b:76:d8:6a:55:20:6b:36:35:7c:f1:
d0:b6:5c:8c:48:90:10:4f:5d:de:d3:8e:07:51:ef:
8b:f3:59:78:7e:3d:32:37:2d:b0:92:d6:2e:9f:55:
2d:93:82:2f:1a:b7:17:bc:f0:34:47:2d:45:2c:1f:
f5:e9:96:f0:df:79:3b:f4:81:23:47:82:d8:d4:ec:
60:e5:35:da:fe:b8:73:05:36:2e:9e:0f:05:d0:eb:
a1:cc:84:34:98:be:73:7c:9c:20:7c:6a:d4:e1:dc:
0e:fb:66:c6:b5:63:c5:a7:1c:8d:7e:ad:09:2a:52:
d6:b7:1d:39:f9:11:c3:76:01:1a:4f:a3:90:50:0d:
1a:02:6f:7b:e2:90:fb:1d:b3:6e:75:89:f3:aa:be:
60:03:e2:d7:92:c3:03:47:c0:f8:1d:3f:da:40:16:
55:f4:f2:d6:79:15:0b:9b:60:19:d2:73:6a:04:52:
de:28:f5:41:0d:61:64:6f:6c:c7:52:d2:d0:3a:53:
3b:d6:fa:65:24:cb:55:7e:a6:f1:76:c1:c0:b3:4d:
3e:d0:94:c4:ed:84:74:81:c5:d8:bf:d8:60:29:5d:
4a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:36:42:FE:26:12:4F:48:6B:42:0D:2D:D5:15:AE:B3:D1:D1:C1:0A
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/cTZC_iYST0hrQg0t1RWus9HRwQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.206.0/24
45.137.52.0/23
45.137.55.0/24
45.137.191.0/24
45.139.28.0/24
45.139.31.0/24
45.140.171.0/24
45.140.173.0/24
45.141.186.0/23
45.145.162.0/24
45.147.1.0/24
45.149.83.0/24
45.152.225.0/24
45.154.162.0/24
85.202.166.0/23
91.191.186.0/24
91.212.82.0/24
91.220.84.0/24
91.220.90.0/24
91.220.126.0/24
91.221.38.0/24
92.249.13.0-92.249.14.255
193.150.98.0/24
193.150.170.0/23
193.163.199.0/24
194.33.8.0/23
194.55.103.0-194.55.104.255
194.61.76.0/24
194.61.233.0/24
194.147.84.0/23
195.245.110.0/24
213.139.194.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:22:7c:f4:6c:1e:c2:76:8c:11:ec:67:f2:f4:1c:8a:53:35:
0b:5c:58:fd:23:60:96:44:4a:72:0d:5d:f1:7e:73:91:70:3b:
35:ac:73:ad:f5:5c:f0:d0:e8:e6:0a:b4:fb:ee:9c:0f:ba:a1:
a0:17:67:b8:75:55:9d:b7:0d:38:32:38:ce:ab:80:52:09:e9:
53:1a:82:9f:b4:42:84:83:0d:c4:fb:8b:6d:db:48:ea:2c:4a:
6c:90:f9:06:06:73:7a:48:83:51:9a:04:f7:e1:da:ac:e7:32:
57:13:27:50:d2:8a:a8:f3:e1:17:a3:50:6c:bb:2a:0d:64:3c:
74:5e:08:95:4a:6b:73:87:94:16:0f:85:bc:69:de:b2:bb:70:
e6:11:0c:3e:46:9e:e7:f2:1a:69:1f:09:3c:d7:ae:05:bc:82:
5b:e1:88:ad:ce:1a:79:e1:51:86:c7:34:4d:3a:8f:54:d0:ee:
16:af:61:8a:34:91:8c:37:72:7b:91:3b:45:50:48:a1:8b:75:
01:03:c2:62:a8:f0:53:3f:4d:2e:1a:0b:80:72:15:ec:c7:3e:
36:45:43:e6:de:3f:fd:36:23:c1:f0:49:ba:88:8d:ec:19:bc:
29:04:5f:01:8a:c1:49:9c:4e:e3:2a:89:38:c1:82:54:12:71:
b2:a2:44:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:24:43 2025 by rpki-client