Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/zYgQ6zYq1fFzzZ64Kmx_bCy2mQ4.roa
File: zYgQ6zYq1fFzzZ64Kmx_bCy2mQ4.roa (raw, json)
Hash identifier: 0BR6bBhAlmW6dosP6nRs78aGzLej0FXdgFU78h2ZtjM=
Subject key identifier: CD:88:10:EB:36:2A:D5:F1:73:CD:9E:B8:2A:6C:7F:6C:2C:B6:99:0E
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 01985F00DE16A48A827FD413BB741D8A3BF1
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/zYgQ6zYq1fFzzZ64Kmx_bCy2mQ4.roa
Signing time: Thu 31 Jul 2025 05:42:28 +0000
ROA not before: Thu 31 Jul 2025 05:42:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 85.115.208.0/23 maxlen: 24
85.115.210.0/23 maxlen: 24
85.115.211.0/24 maxlen: 24
213.145.66.0/24 maxlen: 24
213.145.68.0/23 maxlen: 23
213.145.70.0/23 maxlen: 24
213.145.71.0/24 maxlen: 24
213.145.72.0/21 maxlen: 24
213.145.82.0/23 maxlen: 24
213.145.84.0/23 maxlen: 23
213.145.86.0/23 maxlen: 23
213.145.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5f:00:de:16:a4:8a:82:7f:d4:13:bb:74:1d:8a:3b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Jul 31 05:42:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd8810eb362ad5f173cd9eb82a6c7f6c2cb6990e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:88:93:7f:37:a5:4c:54:14:5e:db:9b:4d:3f:
11:2e:a4:08:7c:eb:4f:67:5d:88:5c:77:65:12:90:
8d:2a:dd:1c:c0:a3:51:15:6d:0a:6c:9c:28:33:6c:
19:ac:f7:e9:7d:6f:c1:28:b5:33:37:0a:b9:87:e1:
4d:d6:d3:41:40:38:0d:ed:58:5a:96:11:04:40:82:
04:b4:83:f1:1e:ed:df:25:2c:de:07:a7:7c:d6:bf:
9e:38:f7:87:5f:b3:e8:e2:8d:03:d0:0f:bf:af:32:
dc:17:3a:cb:48:e1:3f:2f:52:a9:09:78:be:31:80:
38:b4:73:99:7c:b8:a7:13:5f:c1:95:2e:0c:29:8a:
5b:f5:49:8c:5d:b1:a6:b3:e0:61:a2:08:c5:2c:18:
54:b5:8c:18:9b:8e:9d:a9:80:b8:f3:24:12:05:ff:
9e:6d:61:1d:17:10:35:84:fe:42:16:59:de:c1:27:
57:8f:ec:c1:b2:b2:a2:ac:4b:30:e3:78:0c:cc:ee:
7f:d7:38:4b:65:65:74:89:a1:0f:b4:d3:cb:54:35:
72:b0:a5:d2:ec:c1:30:b3:e8:ac:95:c4:9e:4b:70:
a4:5b:12:be:a2:b6:3e:45:60:d0:72:4c:5e:3a:76:
ab:ab:4c:2b:1f:3b:69:18:25:f4:4d:69:ff:7e:3c:
ff:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:88:10:EB:36:2A:D5:F1:73:CD:9E:B8:2A:6C:7F:6C:2C:B6:99:0E
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/zYgQ6zYq1fFzzZ64Kmx_bCy2mQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.208.0/22
213.145.66.0/24
213.145.68.0-213.145.79.255
213.145.82.0-213.145.89.255
Signature Algorithm: sha256WithRSAEncryption
e6:f1:f1:bd:b8:2c:7c:d1:60:66:e9:ff:0e:dc:6d:28:01:c8:
ae:80:83:9c:a3:0f:56:c1:d6:5e:85:27:c9:0a:44:12:02:e5:
a9:5d:5c:88:f7:bd:39:ca:bc:62:1d:50:38:8d:80:f7:2f:40:
27:d9:ee:36:dd:bd:f8:70:bb:7e:e3:12:60:b9:2c:6c:e0:e0:
88:56:3e:ca:96:79:1f:7e:bd:e4:f1:9c:9b:9f:67:ac:f9:b0:
e2:21:f9:e9:6d:2f:1f:b8:0c:79:24:16:0d:7d:99:af:77:dd:
57:2f:1d:20:22:95:6b:12:a5:71:16:8f:6f:6e:c1:c2:c5:f8:
60:99:cc:bf:45:1a:61:14:ba:0f:5e:c0:f8:d4:da:bb:a8:eb:
07:3a:15:90:c9:85:c5:59:bf:09:e5:eb:cc:85:b5:22:b2:6a:
97:8c:25:06:13:94:3e:b9:40:d7:36:f8:1d:42:f8:b3:6b:3b:
45:22:c4:65:32:c6:69:7f:18:00:0d:19:79:e9:37:ab:3f:1e:
32:cb:ad:fb:27:bc:f5:e6:ce:a2:04:32:ab:b5:40:3d:78:0b:
73:0d:5b:d2:61:52:56:72:b8:ab:a4:98:ef:f7:3f:93:75:46:
82:50:2b:f4:e9:4a:83:64:a7:68:e0:e7:cc:78:ba:74:fc:a6:
a5:9a:23:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:44:32 2025 by rpki-client