Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/ZtDCJODtY7tlGUY4mI_YRwWJbRY.roa
File: ZtDCJODtY7tlGUY4mI_YRwWJbRY.roa (raw, json)
Hash identifier: Yeg65Usz9zdCfiKTUR//qasZbCYjIaaB9OcLvlxhcWk=
Subject key identifier: 66:D0:C2:24:E0:ED:63:BB:65:19:46:38:98:8F:D8:47:05:89:6D:16
Certificate issuer: /CN=b8b3d4ace735613ecbc591dffc2985f3417667d3
Certificate serial: 019A35BAC217BB74451BAA0CC027B97D2895
Authority key identifier: B8:B3:D4:AC:E7:35:61:3E:CB:C5:91:DF:FC:29:85:F3:41:76:67:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uLPUrOc1YT7LxZHf_CmF80F2Z9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/ZtDCJODtY7tlGUY4mI_YRwWJbRY.roa
Signing time: Thu 30 Oct 2025 15:27:03 +0000
ROA not before: Thu 30 Oct 2025 15:27:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206075
IP address blocks: 31.41.249.0/24 maxlen: 24
91.218.20.0/24 maxlen: 24
185.153.55.0/24 maxlen: 24
188.239.191.0/24 maxlen: 24
193.36.132.0/24 maxlen: 24
195.72.60.0/22 maxlen: 22
2a07:e040::/32 maxlen: 32
2a07:e041::/32 maxlen: 32
2a07:e042::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/uLPUrOc1YT7LxZHf_CmF80F2Z9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:35:ba:c2:17:bb:74:45:1b:aa:0c:c0:27:b9:7d:28:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8b3d4ace735613ecbc591dffc2985f3417667d3
Validity
Not Before: Oct 30 15:27:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66d0c224e0ed63bb65194638988fd84705896d16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:59:67:54:6c:8d:a0:14:2f:e5:6a:53:17:9d:
45:8f:9c:96:ac:4d:44:47:40:e2:79:12:0a:55:63:
1b:a9:75:bb:34:1a:4e:d3:6c:86:0c:21:c5:67:a1:
fd:b1:67:05:31:4f:28:be:e2:33:d8:35:e8:48:5b:
f2:1b:b6:02:83:ad:40:14:bc:4f:65:47:84:77:1f:
da:c5:b3:f1:8b:6f:c4:f6:46:8c:df:2b:3d:b8:b2:
06:c1:4c:9e:18:85:ee:0b:d0:0f:d9:df:9c:94:fd:
1c:d6:72:a5:aa:4a:5b:3b:e6:14:e9:e2:a9:26:04:
74:14:23:9c:a0:68:2a:8b:be:02:07:dc:54:74:41:
f2:50:b0:a3:a8:dd:58:b0:87:8e:50:36:79:63:1d:
b9:51:d2:7e:0e:a3:f2:ea:1f:57:1e:f6:71:ce:1b:
f3:70:83:a2:5e:48:68:fa:33:50:45:0e:de:ef:19:
00:4a:d1:f3:90:63:fa:53:72:a8:3d:ec:04:93:d3:
b8:9d:1a:21:3a:69:a8:3c:4e:ce:be:7b:a0:8b:ca:
a6:4e:8a:44:86:34:b3:a0:38:34:b5:48:3a:1e:0e:
de:b7:d7:f8:83:30:47:26:cb:26:3b:6a:28:07:eb:
54:96:f2:72:c2:d1:03:34:bd:9f:20:d4:31:75:2a:
d9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D0:C2:24:E0:ED:63:BB:65:19:46:38:98:8F:D8:47:05:89:6D:16
X509v3 Authority Key Identifier:
keyid:B8:B3:D4:AC:E7:35:61:3E:CB:C5:91:DF:FC:29:85:F3:41:76:67:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uLPUrOc1YT7LxZHf_CmF80F2Z9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/ZtDCJODtY7tlGUY4mI_YRwWJbRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.249.0/24
91.218.20.0/24
185.153.55.0/24
188.239.191.0/24
193.36.132.0/24
195.72.60.0/22
IPv6:
2a07:e040::-2a07:e042:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
29:6b:54:97:47:30:26:af:cd:ba:5a:d8:fc:b6:0a:86:d2:f3:
bf:8d:69:3b:46:80:da:76:78:e8:c2:93:09:7e:ab:8a:19:a1:
c1:bb:19:d6:83:3f:14:c3:c9:4c:43:15:aa:01:aa:86:38:01:
d9:6a:b7:87:5d:c7:f4:8e:bf:8c:84:54:3e:55:17:2c:88:9d:
22:47:93:ee:38:89:78:fb:d9:1f:95:8b:42:c1:d1:a8:a3:0a:
36:32:b2:da:fb:e1:9f:dd:0a:a9:b1:40:07:f3:45:98:87:e9:
99:b9:e5:f8:6a:a1:e9:69:dd:b0:5f:bc:3d:e8:4d:46:c9:cb:
51:4e:c8:f9:f6:c4:06:f5:75:0d:75:b7:3d:df:72:d4:24:0c:
96:9e:48:93:e8:9b:3c:a9:c8:b3:ed:bd:66:f3:24:31:ee:cd:
27:3d:6c:1b:09:57:f9:8e:9c:dc:a6:86:ee:53:e4:07:22:25:
48:56:20:c4:fc:20:7a:20:89:74:7d:6d:ba:5a:de:ad:2e:0d:
83:e9:6d:89:e8:a5:84:8b:56:7e:c5:f0:68:83:b6:18:4b:6d:
b6:8e:13:a8:f4:07:84:45:27:fd:e2:ea:f5:99:53:d3:45:cf:
14:87:2c:76:35:b0:85:9b:de:1f:b0:63:6b:b8:47:6e:76:dc:
40:71:8d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:05:12 2025 by rpki-client