Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/ZaVHu31VAXDQEgbg1hmbQOB4eOg.roa
File: ZaVHu31VAXDQEgbg1hmbQOB4eOg.roa (raw, json)
Hash identifier: EYijjQcoYf+HyMImzsoFjLR79h1EVyZb4ZUwNqCaoig=
Subject key identifier: 65:A5:47:BB:7D:55:01:70:D0:12:06:E0:D6:19:9B:40:E0:78:78:E8
Certificate issuer: /CN=0c0f7a04dd7249a5d14b7de0542a4197380006cc
Certificate serial: 01975D8F8ACFD05208DE4F575F613ACB693D
Authority key identifier: 0C:0F:7A:04:DD:72:49:A5:D1:4B:7D:E0:54:2A:41:97:38:00:06:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DA96BN1ySaXRS33gVCpBlzgABsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/ZaVHu31VAXDQEgbg1hmbQOB4eOg.roa
Signing time: Wed 11 Jun 2025 05:56:17 +0000
ROA not before: Wed 11 Jun 2025 05:56:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21277
IP address blocks: 93.91.192.0/20 maxlen: 20
93.91.192.0/24 maxlen: 24
93.91.193.0/24 maxlen: 24
93.91.195.0/24 maxlen: 24
93.91.196.0/24 maxlen: 24
93.91.197.0/24 maxlen: 24
93.91.200.0/24 maxlen: 24
93.91.201.0/24 maxlen: 24
93.91.204.0/24 maxlen: 24
95.170.192.0/19 maxlen: 19
95.170.192.0/24 maxlen: 24
95.170.193.0/24 maxlen: 24
95.170.194.0/24 maxlen: 24
95.170.196.0/24 maxlen: 24
95.170.199.0/24 maxlen: 24
95.170.200.0/24 maxlen: 24
95.170.201.0/24 maxlen: 24
95.170.202.0/24 maxlen: 24
95.170.203.0/24 maxlen: 24
95.170.204.0/24 maxlen: 24
95.170.205.0/24 maxlen: 24
95.170.206.0/24 maxlen: 24
95.170.207.0/24 maxlen: 24
95.170.208.0/24 maxlen: 24
95.170.214.0/24 maxlen: 24
95.170.215.0/24 maxlen: 24
95.170.216.0/24 maxlen: 24
95.170.217.0/24 maxlen: 24
95.170.218.0/24 maxlen: 24
95.170.219.0/24 maxlen: 24
95.170.220.0/24 maxlen: 24
95.170.221.0/24 maxlen: 24
95.170.222.0/24 maxlen: 24
95.170.223.0/24 maxlen: 24
109.127.64.0/18 maxlen: 18
109.127.64.0/20 maxlen: 20
109.127.64.0/21 maxlen: 21
109.127.72.0/21 maxlen: 21
109.127.80.0/24 maxlen: 24
109.127.82.0/24 maxlen: 24
109.127.85.0/24 maxlen: 24
109.127.86.0/24 maxlen: 24
109.127.88.0/24 maxlen: 24
109.127.89.0/24 maxlen: 24
109.127.90.0/24 maxlen: 24
109.127.91.0/24 maxlen: 24
109.127.92.0/24 maxlen: 24
109.127.93.0/24 maxlen: 24
109.127.94.0/24 maxlen: 24
109.127.95.0/24 maxlen: 24
109.127.107.0/24 maxlen: 24
130.193.128.0/17 maxlen: 17
130.193.128.0/19 maxlen: 19
130.193.131.0/24 maxlen: 24
130.193.132.0/22 maxlen: 22
130.193.144.0/24 maxlen: 24
130.193.145.0/24 maxlen: 24
130.193.146.0/24 maxlen: 24
130.193.147.0/24 maxlen: 24
130.193.148.0/24 maxlen: 24
130.193.149.0/24 maxlen: 24
130.193.150.0/23 maxlen: 23
130.193.150.0/24 maxlen: 24
130.193.151.0/24 maxlen: 24
130.193.152.0/23 maxlen: 23
130.193.154.0/23 maxlen: 23
130.193.160.0/20 maxlen: 20
130.193.160.0/23 maxlen: 23
130.193.160.0/24 maxlen: 24
130.193.161.0/24 maxlen: 24
130.193.165.0/24 maxlen: 24
130.193.166.0/24 maxlen: 24
130.193.176.0/20 maxlen: 20
130.193.176.0/21 maxlen: 21
130.193.184.0/21 maxlen: 21
130.193.192.0/20 maxlen: 20
130.193.208.0/20 maxlen: 20
130.193.224.0/20 maxlen: 20
130.193.240.0/20 maxlen: 20
2a04:a040::/29 maxlen: 29
2a04:a040::/32 maxlen: 32
2a04:a041::/32 maxlen: 32
2a04:a042::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DA96BN1ySaXRS33gVCpBlzgABsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 17:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:8f:8a:cf:d0:52:08:de:4f:57:5f:61:3a:cb:69:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c0f7a04dd7249a5d14b7de0542a4197380006cc
Validity
Not Before: Jun 11 05:56:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65a547bb7d550170d01206e0d6199b40e07878e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a4:5d:b4:1e:04:4d:02:a5:81:8b:e8:87:a1:
4e:97:c3:11:4a:d1:67:50:a3:6d:45:7d:b6:74:01:
bc:18:92:f0:09:a2:24:19:b1:39:6b:5e:78:50:25:
b6:0f:a2:54:a3:5e:ec:0e:88:8e:c0:47:fd:fd:d9:
0a:44:5b:db:da:a0:f8:0b:81:1a:8f:8e:64:e0:71:
6e:e8:2d:53:cc:9e:21:ae:d4:30:75:d0:17:3b:95:
55:e0:a5:1e:85:68:f1:16:af:0e:30:42:e6:03:d9:
f5:dd:75:a6:78:0e:c0:1e:fb:79:fa:20:77:62:06:
88:c0:f1:16:7f:ca:e0:31:5f:0c:86:cb:68:cf:76:
09:ce:7a:1e:c4:12:15:dd:72:19:a7:09:b4:b4:8a:
0e:5a:37:14:19:65:ed:2f:39:24:b6:38:ec:a8:5f:
19:03:3a:b7:4e:0a:de:b7:f5:dc:e9:ac:96:c0:92:
05:1b:ed:f4:b9:34:c3:9d:88:a6:1d:a3:26:39:2f:
76:ca:1e:00:1d:4e:97:85:29:1f:6d:89:1d:1e:ac:
6e:a2:f1:17:47:10:8d:ae:0b:8f:62:ea:73:d3:09:
1a:91:d0:0c:4e:9c:0a:78:c3:c7:6a:8a:78:a2:2d:
7a:70:14:18:e1:df:47:75:e4:c3:b4:49:a5:5c:fe:
cb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A5:47:BB:7D:55:01:70:D0:12:06:E0:D6:19:9B:40:E0:78:78:E8
X509v3 Authority Key Identifier:
keyid:0C:0F:7A:04:DD:72:49:A5:D1:4B:7D:E0:54:2A:41:97:38:00:06:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DA96BN1ySaXRS33gVCpBlzgABsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/ZaVHu31VAXDQEgbg1hmbQOB4eOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.91.192.0/20
95.170.192.0/19
109.127.64.0/18
130.193.128.0/17
IPv6:
2a04:a040::/29
Signature Algorithm: sha256WithRSAEncryption
0c:2c:c0:a7:9a:60:3c:f7:06:7f:21:c1:6c:6c:57:75:4d:fe:
22:d1:39:42:63:88:62:d4:98:9e:f2:b0:9c:40:0a:ca:db:bb:
cc:53:a7:26:e1:3a:bc:b7:da:66:6f:df:a3:47:4b:fe:76:12:
dc:6f:c4:c8:c8:33:e0:c5:1a:86:f8:6d:6f:2a:48:e9:3c:f5:
a9:35:57:65:dd:3d:31:2b:72:6c:bb:ce:1c:32:5a:20:28:c6:
d5:b0:62:29:73:ad:5a:47:75:d2:60:29:a6:15:41:f5:f6:6e:
c9:1e:0c:b3:87:3e:2a:0d:8f:d2:b9:1f:58:7a:87:43:d0:2c:
cd:b0:a9:6d:fb:26:cf:ed:12:8a:2f:e5:e2:5e:73:f1:bf:ea:
4c:aa:57:9e:4c:f2:c1:d1:7b:be:26:a4:b0:46:88:6d:e4:85:
ee:0c:34:b4:69:1c:98:ad:a6:25:97:4e:82:74:db:34:bf:2b:
04:0d:43:5c:6d:f2:76:c2:b5:70:48:ae:11:3a:9a:c7:a7:76:
94:02:03:15:0b:55:75:06:2b:03:39:29:62:62:b2:e2:90:1b:
af:2f:a8:1d:b5:59:35:c0:75:c1:82:a3:c5:0c:99:01:a4:9c:
e5:63:c2:e9:6f:cb:55:53:a7:f0:9f:2c:56:3d:af:11:2a:fc:
43:18:2e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:45:46 2025 by rpki-client