Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ZCpl3UyatQkZjsK8z_IxqXu_Sk0.roa
File: ZCpl3UyatQkZjsK8z_IxqXu_Sk0.roa (raw, json)
Hash identifier: O39VxnKkC8Thbx7rhWEv+PJDcL54U/wq4sE9v+Ry7uQ=
Subject key identifier: 64:2A:65:DD:4C:9A:B5:09:19:8E:C2:BC:CF:F2:31:A9:7B:BF:4A:4D
Certificate issuer: /CN=a205537395a8a40303877e69d389033fe37a64f0
Certificate serial: 019875CF2F3F5FB4062A32B2EB7146953AB1
Authority key identifier: A2:05:53:73:95:A8:A4:03:03:87:7E:69:D3:89:03:3F:E3:7A:64:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogVTc5WopAMDh35p04kDP-N6ZPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ZCpl3UyatQkZjsK8z_IxqXu_Sk0.roa
Signing time: Mon 04 Aug 2025 15:59:28 +0000
ROA not before: Mon 04 Aug 2025 15:59:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50628
IP address blocks: 45.144.92.0/22 maxlen: 22
178.208.0.0/19 maxlen: 19
185.173.68.0/22 maxlen: 22
185.194.156.0/22 maxlen: 22
193.35.98.0/24 maxlen: 24
193.35.101.0/24 maxlen: 24
193.35.145.0/24 maxlen: 24
193.35.156.0/24 maxlen: 24
2a04:3d80::/29 maxlen: 29
2a0b:3b00::/29 maxlen: 29
2a0e:ebc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogVTc5WopAMDh35p04kDP-N6ZPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 09:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:cf:2f:3f:5f:b4:06:2a:32:b2:eb:71:46:95:3a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a205537395a8a40303877e69d389033fe37a64f0
Validity
Not Before: Aug 4 15:59:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=642a65dd4c9ab509198ec2bccff231a97bbf4a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:36:14:98:e4:4d:85:bd:59:0a:46:12:e4:91:
7b:24:cf:03:ea:00:7f:b7:56:4a:47:1b:3e:38:b2:
36:96:e2:db:ee:c6:8b:83:52:11:0b:2f:60:b1:da:
4f:cd:5b:10:12:ca:0e:d5:bf:e1:39:85:66:34:17:
23:11:d7:da:61:37:77:ad:60:24:c9:90:3b:b1:93:
50:44:83:77:0b:6e:b0:c0:ca:90:ac:10:6f:ad:af:
d7:f5:e7:0c:62:6f:ad:5d:fd:b1:b3:d0:7f:3b:b4:
1a:43:b7:b7:af:1c:02:f1:da:bd:65:00:74:32:88:
78:cd:db:78:6a:9e:e8:53:55:a6:37:07:a1:f0:15:
82:a0:47:b4:30:72:a7:80:38:bb:b1:05:6d:41:30:
10:97:c2:2d:a9:b7:12:71:c8:ff:12:5b:db:b4:cf:
36:56:57:5b:50:78:73:69:81:12:ee:b7:de:34:b5:
86:12:af:6a:b2:12:35:06:da:ef:16:b0:79:4c:31:
88:c0:e1:f9:dc:01:a4:11:22:8e:34:ce:9a:a9:c2:
c3:44:16:54:2d:50:ba:f4:9b:92:36:90:7d:3e:e8:
77:16:8c:73:b2:9b:df:04:50:a3:1e:76:d1:a8:0e:
29:eb:bc:5c:a8:75:03:a8:ee:bd:a2:93:35:fa:c3:
ed:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:2A:65:DD:4C:9A:B5:09:19:8E:C2:BC:CF:F2:31:A9:7B:BF:4A:4D
X509v3 Authority Key Identifier:
keyid:A2:05:53:73:95:A8:A4:03:03:87:7E:69:D3:89:03:3F:E3:7A:64:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogVTc5WopAMDh35p04kDP-N6ZPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ZCpl3UyatQkZjsK8z_IxqXu_Sk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.92.0/22
178.208.0.0/19
185.173.68.0/22
185.194.156.0/22
193.35.98.0/24
193.35.101.0/24
193.35.145.0/24
193.35.156.0/24
IPv6:
2a04:3d80::/29
2a0b:3b00::/29
2a0e:ebc0::/29
Signature Algorithm: sha256WithRSAEncryption
10:ed:8b:38:55:08:ba:56:62:fe:5a:36:22:06:95:21:04:ac:
cc:09:c0:04:44:75:c8:40:0a:1a:76:3a:6a:df:f1:42:ff:de:
92:08:d2:7c:3f:67:49:31:14:f3:56:ae:3f:f8:f4:85:cb:c4:
d4:ec:69:25:ed:d6:40:bf:0d:73:53:d7:41:a5:3b:2a:6c:01:
9d:2c:87:64:51:69:f7:bf:3c:bc:94:59:32:e5:c5:50:27:cc:
75:af:81:c9:56:0d:f3:c4:64:29:91:08:73:f0:fe:54:51:2e:
ae:5a:61:5f:cf:a4:09:dd:b9:f0:0d:e3:72:1b:ce:a3:d6:81:
d7:71:6f:6a:28:52:a7:03:a2:ae:58:38:4e:0e:f0:85:8b:0d:
40:5c:34:67:c4:af:72:43:19:85:07:aa:71:0f:b8:c0:39:79:
04:1b:09:92:2b:ab:b5:29:f4:ac:99:b4:75:c9:3c:b4:a5:14:
6b:63:81:63:47:a0:04:89:5b:97:4c:e7:96:7f:5f:ac:de:7c:
48:96:66:8b:da:7f:fa:23:71:bf:a2:32:cc:5c:83:74:0f:27:
43:bd:95:2c:91:e3:10:79:24:2a:d4:13:c2:b4:01:db:14:94:
a3:23:e8:06:07:47:9d:4c:6e:9f:39:b6:30:8b:5a:61:7c:07:
98:a8:9a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:48:05 2025 by rpki-client