Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/kZ7eyrCVE9sgtqrKRokEj4qTgAo.roa
File: kZ7eyrCVE9sgtqrKRokEj4qTgAo.roa (raw, json)
Hash identifier: +7Bcl0ExuY0MXzkJn8UI65AlETMnOzrxtQ5UBzKR/Pk=
Subject key identifier: 91:9E:DE:CA:B0:95:13:DB:20:B6:AA:CA:46:89:04:8F:8A:93:80:0A
Certificate issuer: /CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300
Certificate serial: 01985D3D8302D7288200AB0E21497177ABB8
Authority key identifier: CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/kZ7eyrCVE9sgtqrKRokEj4qTgAo.roa
Signing time: Wed 30 Jul 2025 21:29:28 +0000
ROA not before: Wed 30 Jul 2025 21:29:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9123
IP address blocks: 62.113.36.0/23 maxlen: 24
62.113.41.0/24 maxlen: 24
62.113.42.0/23 maxlen: 24
62.113.44.0/24 maxlen: 24
185.171.80.0/24 maxlen: 24
185.171.81.0/24 maxlen: 24
185.171.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5d:3d:83:02:d7:28:82:00:ab:0e:21:49:71:77:ab:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300
Validity
Not Before: Jul 30 21:29:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=919edecab09513db20b6aaca4689048f8a93800a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:48:70:ef:a3:c8:51:9a:62:22:98:a6:71:04:
35:0e:41:29:02:32:12:bf:94:6f:29:4f:c9:8e:09:
8d:4b:13:ef:57:b6:8b:29:8c:1e:86:bb:e2:2d:6a:
a4:44:c0:7d:c1:0f:c9:97:5b:96:9d:60:ed:9c:9d:
13:11:b0:59:3f:99:46:e3:74:37:60:67:af:05:87:
78:5b:f4:2d:6d:53:bb:e7:12:97:ce:7c:1c:20:97:
e7:55:67:d7:66:15:79:72:55:c0:57:82:2b:70:aa:
3d:a1:88:6a:9f:00:fa:e8:6e:90:08:ab:d4:5e:e1:
c2:64:7f:21:e0:f3:3b:7b:a2:b1:6e:3a:d4:37:86:
c4:16:5f:2d:41:a0:be:33:b8:3f:75:68:aa:3c:a9:
39:a2:80:46:08:91:81:8a:e1:08:54:eb:b7:b0:d2:
50:9b:52:18:71:79:93:e4:94:26:14:cc:52:62:44:
78:26:18:9b:66:e8:f9:21:b7:7b:a2:f3:3c:db:e7:
0e:ae:8e:a9:b3:f8:57:fd:42:8f:ee:4d:0e:ce:8f:
1d:d0:91:44:74:6b:8b:03:f9:60:50:b7:c3:e1:6b:
f8:fc:96:2d:28:fd:e2:cc:bb:8c:4f:17:a0:99:4c:
55:af:3d:5b:f1:1c:5f:7b:ad:02:12:1b:36:4b:95:
4b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:9E:DE:CA:B0:95:13:DB:20:B6:AA:CA:46:89:04:8F:8A:93:80:0A
X509v3 Authority Key Identifier:
keyid:CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/kZ7eyrCVE9sgtqrKRokEj4qTgAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.113.36.0/23
62.113.41.0-62.113.44.255
185.171.80.0-185.171.82.255
Signature Algorithm: sha256WithRSAEncryption
28:66:56:e1:72:ce:ad:b7:b1:e1:d8:9a:93:24:f9:df:2f:8d:
37:fe:cc:ed:27:92:9a:c8:db:3f:dc:70:a1:72:81:de:59:16:
8d:d6:35:9b:7a:10:52:06:0c:38:a7:2f:69:74:9b:f5:ce:fb:
a6:78:39:49:0e:0f:5d:5a:29:c7:54:fc:85:bc:55:9b:c1:7e:
65:b8:e5:71:94:e9:90:48:fa:59:93:1d:63:be:c9:a3:37:ae:
cd:74:d4:74:1b:88:63:a6:e5:fa:63:01:47:43:ab:43:02:83:
5a:25:8f:e7:3a:19:99:da:77:d0:01:38:2b:dd:1e:88:03:a0:
6e:d1:a4:d5:76:8b:e0:60:95:18:bd:fa:f9:3f:4f:5a:02:79:
2d:5d:c5:41:3c:97:6e:51:21:00:01:0f:1f:f1:0f:86:a8:ea:
d5:80:c6:73:32:09:d9:17:05:7d:95:ce:18:c7:9e:b1:0c:2a:
b6:b5:76:38:63:e1:92:45:7a:35:c6:a7:20:8a:2f:d5:7d:a5:
6b:44:76:85:19:d6:33:be:c0:88:4f:3b:f2:81:7d:dd:9b:85:
b8:39:ea:64:9f:82:46:9c:8e:e6:37:b5:ff:12:e2:8c:50:70:
37:59:0c:15:f2:9e:69:03:0a:06:9f:4b:91:99:cd:4e:e2:8d:
93:79:f2:3d
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZhdPYMC1yiCAKsOIUlxd6u4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNTYzNjA2MjRjYzFiNGM0OWRhNzJiYzMyNWY1YmI2YWI0
ZDgzMDAwHhcNMjUwNzMwMjEyOTI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MTllZGVjYWIwOTUxM2RiMjBiNmFhY2E0Njg5MDQ4ZjhhOTM4MDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEhw76PIUZpiIpimcQQ1DkEpAjIS
v5RvKU/JjgmNSxPvV7aLKYwehrviLWqkRMB9wQ/Jl1uWnWDtnJ0TEbBZP5lG43Q3
YGevBYd4W/QtbVO75xKXznwcIJfnVWfXZhV5clXAV4IrcKo9oYhqnwD66G6QCKvU
XuHCZH8h4PM7e6KxbjrUN4bEFl8tQaC+M7g/dWiqPKk5ooBGCJGBiuEIVOu3sNJQ
m1IYcXmT5JQmFMxSYkR4JhibZuj5Ibd7ovM82+cOro6ps/hX/UKP7k0Ozo8d0JFE
dGuLA/lgULfD4Wv4/JYtKP3izLuMTxegmUxVrz1b8Rxfe60CEhs2S5VL1wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFJGe3sqwlRPbILaqykaJBI+Kk4AKMB8GA1UdIwQY
MBaAFM5WNgYkzBtMSdpyvDJfW7arTYMAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemxZMkJpVE1HMHhKMm5LOE1sOWJ0cXROZ3dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi85NTc3ZjgtYjhiOC00OTk0LWI4NTUt
YTk4ZWYzMDA4NTgwLzEva1o3ZXlyQ1ZFOXNndHFyS1Jva0VqNHFUZ0FvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi85NTc3ZjgtYjhiOC00OTk0LWI4NTUtYTk4ZWYzMDA4NTgw
LzEvemxZMkJpVE1HMHhKMm5LOE1sOWJ0cXROZ3dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiAwQBPnEkMAwD
BAA+cSkDBAA+cSwwDAMEBLmrUAMEALmrUjANBgkqhkiG9w0BAQsFAAOCAQEAKGZW
4XLOrbex4diakyT53y+NN/7M7SeSmsjbP9xwoXKB3lkWjdY1m3oQUgYMOKcvaXSb
9c77png5SQ4PXVopx1T8hbxVm8F+ZbjlcZTpkEj6WZMdY77JozeuzXTUdBuIY6bl
+mMBR0OrQwKDWiWP5zoZmdp30AE4K90eiAOgbtGk1XaL4GCVGL36+T9PWgJ5LV3F
QTyXblEhAAEPH/EPhqjq1YDGczIJ2RcFfZXOGMeesQwqtrV2OGPhkkV6NcanIIov
1X2la0R2hRnWM77AiE878oF93ZuFuDnqZJ+CRpyO5je1/xLijFBwN1kMFfKeaQMK
Bp9LkZnNTuKNk3nyPQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 02:50:54 2025 by rpki-client