Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/zzxDA_jaGZ-licmX7_8AfzWVEg4.roa
File: zzxDA_jaGZ-licmX7_8AfzWVEg4.roa (raw, json)
Hash identifier: yQZb/wWXMNaCLJYPnwrZFiYxI3PMack8phKpUQ0e+Bg=
Subject key identifier: CF:3C:43:03:F8:DA:19:9F:A5:89:C9:97:EF:FF:00:7F:35:95:12:0E
Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045
Certificate serial: 0198666C9637D2CA4A0D74D8CAAD57D11853
Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/zzxDA_jaGZ-licmX7_8AfzWVEg4.roa
Signing time: Fri 01 Aug 2025 16:17:28 +0000
ROA not before: Fri 01 Aug 2025 16:17:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136258
IP address blocks: 46.16.128.0/24 maxlen: 24
46.16.129.0/24 maxlen: 24
46.16.130.0/24 maxlen: 24
46.16.131.0/24 maxlen: 24
109.104.152.0/24 maxlen: 24
109.104.153.0/24 maxlen: 24
109.104.155.0/24 maxlen: 24
147.78.0.0/24 maxlen: 24
147.78.1.0/24 maxlen: 24
147.78.2.0/24 maxlen: 24
147.78.3.0/24 maxlen: 24
185.126.236.0/24 maxlen: 24
185.126.237.0/24 maxlen: 24
185.126.238.0/24 maxlen: 24
185.126.239.0/24 maxlen: 24
185.213.20.0/24 maxlen: 24
185.213.21.0/24 maxlen: 24
185.213.23.0/24 maxlen: 24
2a11:840:1::/48 maxlen: 48
2a11:840:3::/48 maxlen: 48
2a11:840:5::/48 maxlen: 48
2a11:840:6::/48 maxlen: 48
2a11:840:7::/48 maxlen: 48
2a11:840:8::/48 maxlen: 48
2a11:840:10::/48 maxlen: 48
2a11:840:11::/48 maxlen: 48
2a11:840:12::/48 maxlen: 48
2a11:840:13::/48 maxlen: 48
2a11:840:14::/48 maxlen: 48
2a11:840:16::/48 maxlen: 48
2a11:840:17::/48 maxlen: 48
2a11:840:18::/48 maxlen: 48
2a11:840:19::/48 maxlen: 48
2a11:840:20::/48 maxlen: 48
2a11:840:21::/48 maxlen: 48
2a11:840:22::/48 maxlen: 48
2a11:840:23::/48 maxlen: 48
2a11:840:24::/48 maxlen: 48
2a11:840:25::/48 maxlen: 48
2a11:840:26::/48 maxlen: 48
2a11:840:28::/48 maxlen: 48
2a11:840:30::/48 maxlen: 48
2a11:840:33::/48 maxlen: 48
2a11:840:40::/48 maxlen: 48
2a11:840:41::/48 maxlen: 48
2a11:840:47::/48 maxlen: 48
2a11:840:48::/48 maxlen: 48
2a11:840:54::/48 maxlen: 48
2a11:840:57::/48 maxlen: 48
2a11:840:60::/48 maxlen: 48
2a11:840:61::/48 maxlen: 48
2a11:840:62::/48 maxlen: 48
2a11:840:63::/48 maxlen: 48
2a11:840:64::/48 maxlen: 48
2a11:840:65::/48 maxlen: 48
2a11:840:66::/48 maxlen: 48
2a11:840:67::/48 maxlen: 48
2a11:840:68::/48 maxlen: 48
2a11:840:69::/48 maxlen: 48
2a11:840:70::/48 maxlen: 48
2a11:840:71::/48 maxlen: 48
2a11:840:72::/48 maxlen: 48
2a11:840:73::/48 maxlen: 48
2a11:840:73:1b::/64 maxlen: 64
2a11:840:74::/48 maxlen: 48
2a11:840:75::/48 maxlen: 48
2a11:840:76::/48 maxlen: 48
2a11:840:77::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:66:6c:96:37:d2:ca:4a:0d:74:d8:ca:ad:57:d1:18:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045
Validity
Not Before: Aug 1 16:17:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf3c4303f8da199fa589c997efff007f3595120e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:92:bf:6d:f5:7e:80:5b:c1:93:a1:80:1b:48:
d5:02:91:11:59:1e:95:6b:5e:e4:19:2f:c5:db:48:
71:41:0b:26:da:d3:75:54:e2:4f:dc:37:b5:6e:50:
1c:92:7d:cb:56:40:9e:f7:53:c7:4a:ae:e1:b0:30:
02:5b:86:c2:67:89:d6:d3:44:6d:a3:45:c6:97:d6:
33:c0:ce:c8:fd:25:96:5e:81:db:68:06:15:1b:a3:
fa:c4:df:52:b1:d1:63:1c:5d:d8:af:02:0b:ba:3d:
4c:3f:69:c1:82:2b:17:66:b7:51:37:ba:7a:5e:a3:
67:de:a1:76:5c:3f:7c:64:ec:c7:5f:7f:bd:d8:35:
7e:76:8e:d9:c7:93:92:d4:52:0f:1f:77:a0:0c:f5:
86:fa:44:69:34:82:3b:65:bb:92:b5:5b:27:87:df:
1a:c3:7b:9d:d6:45:f2:89:f7:b5:0c:47:f0:4e:29:
4b:0b:c7:08:d1:56:cd:f6:7e:ce:9d:57:56:79:2d:
d6:f8:c7:3b:89:71:81:cb:64:6f:1b:06:68:ea:32:
1e:bb:77:b5:9e:56:00:d4:7a:28:81:7e:0f:64:ed:
54:ba:87:bb:23:29:94:6c:bd:91:eb:90:61:4e:87:
6f:c9:be:9c:84:5f:d6:e8:fc:b9:16:05:9e:89:3b:
fd:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3C:43:03:F8:DA:19:9F:A5:89:C9:97:EF:FF:00:7F:35:95:12:0E
X509v3 Authority Key Identifier:
keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/zzxDA_jaGZ-licmX7_8AfzWVEg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.128.0/22
109.104.152.0/23
109.104.155.0/24
147.78.0.0/22
185.126.236.0/22
185.213.20.0/23
185.213.23.0/24
IPv6:
2a11:840:1::/48
2a11:840:3::/48
2a11:840:5::-2a11:840:8:ffff:ffff:ffff:ffff:ffff
2a11:840:10::-2a11:840:14:ffff:ffff:ffff:ffff:ffff
2a11:840:16::-2a11:840:19:ffff:ffff:ffff:ffff:ffff
2a11:840:20::-2a11:840:26:ffff:ffff:ffff:ffff:ffff
2a11:840:28::/48
2a11:840:30::/48
2a11:840:33::/48
2a11:840:40::/47
2a11:840:47::-2a11:840:48:ffff:ffff:ffff:ffff:ffff
2a11:840:54::/48
2a11:840:57::/48
2a11:840:60::-2a11:840:69:ffff:ffff:ffff:ffff:ffff
2a11:840:70::/45
Signature Algorithm: sha256WithRSAEncryption
87:52:34:0e:7a:92:ee:3a:9e:b2:6d:05:c3:23:9b:53:1f:50:
53:4b:5a:c9:46:d4:2f:00:69:a5:9d:b0:89:23:a0:90:5f:f0:
f2:c1:71:d9:27:c5:33:d1:ce:b4:44:8a:b2:e8:e1:dd:4f:db:
9b:7d:03:e0:56:72:7a:b0:70:29:06:98:45:ec:9a:ac:20:54:
cb:26:97:5e:af:b3:bb:c5:fe:f4:7b:4c:17:d0:08:c5:37:92:
dd:9b:f2:40:b1:32:cf:f0:cf:f4:64:1d:1e:59:d1:92:bf:67:
de:1d:b0:12:a2:e7:c3:f9:7d:9c:cb:7d:ac:6a:ec:e0:d5:14:
e7:62:de:63:bb:30:80:d6:4e:46:4b:e0:56:90:cf:3c:f5:df:
cc:01:85:8c:9c:ca:0a:fb:42:96:55:5f:2f:6a:6b:5d:53:1c:
20:9f:a0:1d:14:cc:37:2f:96:6d:31:20:e0:a6:3f:99:1d:4b:
0d:6e:45:ca:5f:ac:e5:f0:3d:e3:06:62:48:87:6a:54:0f:48:
6f:e9:45:16:db:14:d5:80:07:55:e0:02:06:5b:9a:f4:83:24:
dc:67:c3:13:c9:61:32:64:44:a6:ed:b6:c9:18:92:73:78:73:
12:62:f2:a0:16:a3:f5:31:22:91:aa:ed:a5:7c:5a:44:c5:45:
c4:2d:2b:53
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Aug 4 16:02:46 2025 by rpki-client