Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/1-ZAn3Qtlz0s6H8sKz3KAGMVojlQ.roa
File: 1-ZAn3Qtlz0s6H8sKz3KAGMVojlQ.roa (raw, json)
Hash identifier: 1vtVvmn1NKghe/1GEiZ2YPPlg6egHJXC9enaE5kl0Rk=
Subject key identifier: F9:90:27:DD:0B:65:CF:4B:3A:1F:CB:0A:CF:72:80:18:C5:68:8E:54
Certificate issuer: /CN=1860e36e25b1dba1178075c803c29a044cecfde1
Certificate serial: 019A366A8991A4C81BD6DCA429FF377626C7
Authority key identifier: 18:60:E3:6E:25:B1:DB:A1:17:80:75:C8:03:C2:9A:04:4C:EC:FD:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GGDjbiWx26EXgHXIA8KaBEzs_eE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/1-ZAn3Qtlz0s6H8sKz3KAGMVojlQ.roa
Signing time: Thu 30 Oct 2025 18:39:03 +0000
ROA not before: Thu 30 Oct 2025 18:39:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8375
IP address blocks: 195.82.32.0/19 maxlen: 19
195.82.32.0/20 maxlen: 20
195.82.32.0/24 maxlen: 24
195.82.33.0/24 maxlen: 24
195.82.34.0/24 maxlen: 24
195.82.35.0/24 maxlen: 24
195.82.36.0/24 maxlen: 24
195.82.37.0/24 maxlen: 24
195.82.38.0/24 maxlen: 24
195.82.39.0/24 maxlen: 24
195.82.40.0/24 maxlen: 24
195.82.41.0/24 maxlen: 24
195.82.42.0/24 maxlen: 24
195.82.43.0/24 maxlen: 24
195.82.44.0/24 maxlen: 24
195.82.45.0/24 maxlen: 24
195.82.46.0/24 maxlen: 24
195.82.47.0/24 maxlen: 24
195.82.48.0/20 maxlen: 20
195.82.48.0/24 maxlen: 24
195.82.49.0/24 maxlen: 24
195.82.50.0/24 maxlen: 24
195.82.51.0/24 maxlen: 24
195.82.52.0/24 maxlen: 24
195.82.53.0/24 maxlen: 24
195.82.54.0/24 maxlen: 24
195.82.55.0/24 maxlen: 24
195.82.56.0/24 maxlen: 24
195.82.57.0/24 maxlen: 24
195.82.58.0/24 maxlen: 24
195.82.59.0/24 maxlen: 24
195.82.60.0/24 maxlen: 24
195.82.61.0/24 maxlen: 24
195.82.62.0/24 maxlen: 24
195.82.63.0/24 maxlen: 24
2a02:ae0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GGDjbiWx26EXgHXIA8KaBEzs_eE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:36:6a:89:91:a4:c8:1b:d6:dc:a4:29:ff:37:76:26:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1860e36e25b1dba1178075c803c29a044cecfde1
Validity
Not Before: Oct 30 18:39:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f99027dd0b65cf4b3a1fcb0acf728018c5688e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:56:98:e7:ad:9d:c3:27:32:bb:3b:64:b4:26:
4c:f0:3e:5c:12:95:ac:59:dc:32:33:72:64:8b:18:
9d:05:69:2b:69:d2:75:7b:b7:77:e3:44:3d:15:5b:
86:a3:06:0b:cb:80:83:b6:b9:0f:2c:9c:1a:4d:ff:
68:06:65:3e:09:e3:6b:39:e3:07:ce:5a:95:f0:65:
a4:0d:f6:05:41:0d:1f:d9:0d:25:57:b4:51:f7:5e:
c8:0e:c7:29:be:a2:d0:c1:ae:77:d2:e3:72:7b:b8:
ce:4a:28:81:35:a2:e5:49:c2:2d:7b:b9:d4:b3:83:
48:83:00:16:5a:32:e1:bc:13:82:e3:ff:55:52:c0:
f5:33:fa:ee:da:3e:7c:82:77:78:e0:74:47:7b:25:
19:e1:99:7a:74:5c:df:e1:a0:ff:52:93:ea:9f:8c:
7a:34:18:d7:6e:df:21:9b:07:5a:93:d3:79:97:34:
3a:b1:a7:0b:68:89:f3:b1:d3:ad:31:d2:a4:eb:08:
83:4a:29:7c:ce:8a:6c:9a:1c:7b:4c:40:66:ad:60:
83:97:a3:22:22:ba:04:01:ce:06:1f:b2:10:29:36:
45:2d:33:fc:a3:24:ac:e8:3c:31:93:42:54:a6:41:
06:1c:1f:a7:d5:ef:8f:15:26:c1:e4:42:c8:4a:8a:
8d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:90:27:DD:0B:65:CF:4B:3A:1F:CB:0A:CF:72:80:18:C5:68:8E:54
X509v3 Authority Key Identifier:
keyid:18:60:E3:6E:25:B1:DB:A1:17:80:75:C8:03:C2:9A:04:4C:EC:FD:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GGDjbiWx26EXgHXIA8KaBEzs_eE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/1-ZAn3Qtlz0s6H8sKz3KAGMVojlQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.82.32.0/19
IPv6:
2a02:ae0::/32
Signature Algorithm: sha256WithRSAEncryption
a1:0e:bd:8a:b4:6e:dd:56:14:f5:ee:31:91:38:c4:73:64:80:
b4:64:85:e8:90:5e:6a:2f:0f:50:e8:9b:26:78:e3:6d:c4:77:
19:3c:4f:fa:38:6f:d8:8d:59:aa:de:84:46:f6:9f:14:50:99:
f9:ef:42:26:c8:61:49:9e:b7:67:69:28:04:a2:33:31:23:5f:
2b:5e:83:2e:dd:7f:7e:0e:7b:2b:49:e7:12:02:e5:57:fe:8f:
9c:a8:94:70:36:e3:3e:04:af:b1:91:e7:a7:5b:11:66:b9:52:
ce:a1:7e:86:43:44:12:dd:b0:e5:49:69:b4:51:f4:e6:26:49:
f9:63:f3:fd:d3:1b:93:f6:a3:6a:6e:b1:3a:90:7f:99:52:60:
0e:a5:31:2e:f1:5c:bd:ea:76:12:54:92:81:de:c2:44:9a:3f:
65:36:ae:68:1d:21:59:4f:44:d3:0c:8e:63:06:44:72:28:9d:
c1:3b:c9:8b:2e:28:57:be:1f:90:b4:e7:24:ba:a4:42:7b:9a:
63:04:e8:85:81:6a:b9:70:69:01:b3:c8:ad:48:96:7b:5d:c7:
ee:d8:46:03:31:2e:9b:a5:9f:32:32:54:8e:57:1c:f3:60:9d:
68:27:ac:63:3d:a8:98:89:6d:4f:85:cf:da:f1:df:0c:b4:b0:
34:6c:43:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:33:05 2025 by rpki-client