Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ALZz4PWOpR2ZGqV7usTuwMdtXTA.roa
File: ALZz4PWOpR2ZGqV7usTuwMdtXTA.roa (raw, json)
Hash identifier: PAbjDcZzSgSyMcLBBR95ObCpOSfIZNBE47p795+B8ak=
Subject key identifier: 00:B6:73:E0:F5:8E:A5:1D:99:1A:A5:7B:BA:C4:EE:C0:C7:6D:5D:30
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019A0ACAF1917D1FB71AB409B39C9A0E7FC4
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ALZz4PWOpR2ZGqV7usTuwMdtXTA.roa
Signing time: Wed 22 Oct 2025 07:21:03 +0000
ROA not before: Wed 22 Oct 2025 07:21:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30058
IP address blocks: 195.40.3.0/24 maxlen: 24
195.40.14.0/23 maxlen: 23
195.40.64.0/23 maxlen: 23
195.40.66.0/23 maxlen: 23
195.40.68.0/23 maxlen: 23
195.40.79.0/24 maxlen: 24
195.40.81.0/24 maxlen: 24
195.40.84.0/24 maxlen: 24
195.40.90.0/24 maxlen: 24
195.40.93.0/24 maxlen: 24
195.40.98.0/23 maxlen: 23
195.40.102.0/23 maxlen: 23
195.40.124.0/23 maxlen: 23
195.40.126.0/23 maxlen: 23
195.40.164.0/23 maxlen: 23
195.40.168.0/23 maxlen: 23
195.40.170.0/23 maxlen: 23
195.40.172.0/23 maxlen: 23
195.40.174.0/23 maxlen: 23
195.40.190.0/23 maxlen: 23
195.172.126.0/23 maxlen: 23
195.172.148.0/23 maxlen: 23
195.172.208.0/23 maxlen: 23
212.135.14.0/23 maxlen: 23
212.135.176.0/23 maxlen: 24
212.135.182.0/23 maxlen: 23
212.135.184.0/23 maxlen: 23
212.135.186.0/23 maxlen: 23
212.135.188.0/24 maxlen: 24
212.135.216.0/23 maxlen: 23
212.135.224.0/23 maxlen: 23
212.135.226.0/23 maxlen: 23
212.135.229.0/24 maxlen: 24
212.135.230.0/23 maxlen: 23
212.135.232.0/23 maxlen: 23
212.135.238.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 08:03:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0a:ca:f1:91:7d:1f:b7:1a:b4:09:b3:9c:9a:0e:7f:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 22 07:21:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=00b673e0f58ea51d991aa57bbac4eec0c76d5d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:89:fb:08:aa:79:81:54:5f:0d:04:f3:fa:e2:
e7:12:0e:51:90:15:6e:ab:b5:e9:db:67:fe:0c:a5:
6d:94:40:1b:28:e1:70:e5:86:23:71:82:a6:d7:e0:
ff:be:5d:7e:fa:ed:f1:61:ec:b8:ad:37:e1:b8:ca:
c3:3c:66:cd:9f:ff:ae:e0:e6:a3:14:bd:60:87:57:
ed:b8:ba:16:05:4f:10:80:2c:bc:c5:6c:37:45:6f:
74:30:4a:e8:42:ca:2b:4f:39:44:7f:0e:e7:0d:58:
e4:c1:4b:51:2a:ef:0a:6f:e1:ed:f2:8e:b6:03:a4:
b6:c2:85:b3:09:15:0f:5d:57:cc:49:f7:63:71:70:
bb:a7:c2:fe:3c:84:28:56:02:ae:c9:90:a7:89:c6:
4a:25:b8:d8:46:e6:ff:c8:9a:e1:21:0a:16:fc:d8:
e8:ac:5f:d2:80:8e:77:c6:25:b0:f2:a3:1b:69:c0:
0b:e0:46:eb:a3:24:48:7c:30:45:26:7f:de:47:de:
75:43:22:bd:74:aa:b2:8d:0a:9f:4f:53:7e:dc:87:
b0:99:1d:39:ff:14:c4:4f:37:91:7e:ad:98:fa:30:
5b:f8:39:3a:f2:f6:c7:fe:c4:d2:6b:1c:81:df:3e:
7a:b9:9b:8a:8d:42:66:5e:52:b0:07:4f:d3:7b:a4:
46:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B6:73:E0:F5:8E:A5:1D:99:1A:A5:7B:BA:C4:EE:C0:C7:6D:5D:30
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ALZz4PWOpR2ZGqV7usTuwMdtXTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.40.3.0/24
195.40.14.0/23
195.40.64.0-195.40.69.255
195.40.79.0/24
195.40.81.0/24
195.40.84.0/24
195.40.90.0/24
195.40.93.0/24
195.40.98.0/23
195.40.102.0/23
195.40.124.0/22
195.40.164.0/23
195.40.168.0/21
195.40.190.0/23
195.172.126.0/23
195.172.148.0/23
195.172.208.0/23
212.135.14.0/23
212.135.176.0/23
212.135.182.0-212.135.188.255
212.135.216.0/23
212.135.224.0/22
212.135.229.0-212.135.233.255
212.135.238.0/23
Signature Algorithm: sha256WithRSAEncryption
39:5f:97:a5:9c:d2:04:83:86:fc:49:45:bd:d1:48:c6:06:16:
2c:d2:e6:eb:76:1f:4c:66:de:56:8d:32:55:63:05:e5:97:ae:
67:ea:f7:76:c9:1e:69:05:47:8f:18:7a:03:51:eb:85:85:fd:
21:a5:3e:c0:7b:00:c1:be:a2:57:00:d9:65:7e:e4:9e:f2:fd:
a7:61:a3:f2:d3:b6:41:a6:e5:80:e8:ea:17:b0:e5:d2:28:a8:
5d:87:56:aa:64:9c:25:52:af:af:4d:ba:f7:2c:be:f9:d2:eb:
1d:bd:cd:15:9c:eb:74:cf:85:9e:94:e8:c1:b4:36:0a:86:3d:
45:6c:82:df:b5:84:77:95:58:71:88:2d:21:48:e3:80:8b:4e:
4c:6b:d8:6a:1a:53:4b:66:9b:69:69:45:77:35:db:08:ec:4d:
70:50:e4:ef:ed:5c:b8:3f:05:12:58:7c:a0:7e:d9:07:60:00:
56:82:da:68:43:f5:2e:95:2b:3f:87:ba:fb:44:91:b8:b3:80:
c6:53:ad:9f:dd:53:c5:fe:8f:2b:be:e9:d7:20:8b:ea:99:35:
a8:14:c8:69:47:d0:b3:14:4a:4c:1a:69:ff:7b:17:b8:01:7a:
90:00:a5:ac:20:18:51:41:42:c1:4f:96:f2:90:f8:9f:a5:ac:
37:10:aa:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:30:06 2025 by rpki-client