Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/ZZ25HR_6wci6bZbt0tac23xCK48.roa
File: ZZ25HR_6wci6bZbt0tac23xCK48.roa (raw, json)
Hash identifier: l/YXWseknjL1JYyKFPnFFDr9zZ+UW2gj9IYkXJFBk5s=
Subject key identifier: 65:9D:B9:1D:1F:FA:C1:C8:BA:6D:96:ED:D2:D6:9C:DB:7C:42:2B:8F
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0199A3C815A62AC52BB2A390EA8DEC55075E
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/ZZ25HR_6wci6bZbt0tac23xCK48.roa
Signing time: Thu 02 Oct 2025 07:17:02 +0000
ROA not before: Thu 02 Oct 2025 07:17:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48955
IP address blocks: 80.96.18.0/23 maxlen: 23
80.96.70.0/23 maxlen: 24
80.96.100.0/23 maxlen: 23
81.180.108.0/23 maxlen: 23
81.181.162.0/23 maxlen: 23
85.122.60.0/23 maxlen: 23
217.156.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a3:c8:15:a6:2a:c5:2b:b2:a3:90:ea:8d:ec:55:07:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Oct 2 07:17:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=659db91d1ffac1c8ba6d96edd2d69cdb7c422b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5a:48:cc:49:cb:39:ec:d7:d2:0a:c9:4d:28:
5d:64:e1:d8:c1:48:9a:b5:14:7b:df:64:24:80:17:
01:84:39:39:c7:ab:1f:2d:0f:73:91:1a:cf:b8:34:
c9:01:40:00:01:63:5c:c2:41:f8:ea:f9:98:bd:fa:
bd:0d:8b:4a:34:e4:43:d3:51:79:c0:d0:67:5d:b5:
39:cf:c7:dc:50:ca:04:40:d5:22:83:5d:3d:d7:88:
12:26:9e:29:24:10:54:d1:09:95:17:36:21:e0:fc:
b6:3f:85:bd:f7:15:f5:a1:cd:6b:78:b1:d5:99:4c:
78:89:51:41:09:0e:bc:eb:53:0d:e8:7a:de:10:3b:
9c:53:20:50:37:2e:c2:a7:d9:01:47:5d:af:12:43:
43:f1:4a:68:d9:0c:3f:6b:cf:8e:ac:d7:24:e0:fb:
f7:6f:ad:cd:b1:c9:48:2a:e6:4c:80:46:34:ab:2e:
77:2f:79:82:60:57:5c:b4:99:d7:1b:e7:ff:bb:03:
5c:c9:00:9c:31:7d:1c:58:6e:74:c5:e2:84:72:cb:
cf:1b:f3:a3:68:01:3c:fb:4c:ea:56:5b:fc:45:92:
7a:f4:65:13:a2:7e:2d:e0:1a:1d:0d:ed:e3:19:5c:
fe:a5:f4:09:ae:84:11:3b:01:58:ab:ca:60:19:55:
98:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:9D:B9:1D:1F:FA:C1:C8:BA:6D:96:ED:D2:D6:9C:DB:7C:42:2B:8F
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/ZZ25HR_6wci6bZbt0tac23xCK48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.18.0/23
80.96.70.0/23
80.96.100.0/23
81.180.108.0/23
81.181.162.0/23
85.122.60.0/23
217.156.32.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:9c:58:0a:8d:1c:12:69:7e:35:41:20:31:a7:96:0b:af:eb:
7a:37:fb:c1:7a:88:e4:6f:a7:27:3e:03:81:bd:60:66:bf:14:
63:3f:13:f4:40:86:08:8e:af:75:01:73:48:97:55:b7:48:dc:
c4:d3:d8:1e:f0:ae:f5:b6:12:67:fa:a0:c3:f5:3d:8d:c5:3c:
c9:7a:1a:36:0f:53:08:af:5d:9b:d1:cc:c8:57:d4:5c:f1:fd:
0e:14:ac:95:e3:93:01:92:e1:bc:89:c2:c3:94:78:63:41:e3:
6e:0b:9b:40:f4:5c:9b:ca:b3:b9:0d:32:38:9b:1d:4a:b3:76:
d7:83:96:dd:43:8c:41:2b:d4:c2:00:71:f3:8a:ae:bd:58:de:
33:0e:07:80:49:1e:07:31:5a:f8:52:6f:14:8f:30:b6:42:10:
24:cb:b0:d9:4b:50:04:0a:80:d2:34:78:5f:48:58:4b:5e:95:
ee:4a:c9:1e:cd:61:3f:f0:3c:4e:58:3b:08:66:f2:c6:80:d7:
36:2f:a4:4c:e3:78:e4:ad:b0:ce:e4:7d:7f:c8:ab:b4:b3:06:
e0:f5:29:66:05:e6:97:e0:0d:ee:6d:d2:36:df:83:e1:20:67:
0a:9a:14:b3:00:50:b2:99:98:a5:12:a5:d4:49:cc:03:0a:2b:
d8:97:26:57
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZmjyBWmKsUrsqOQ6o3sVQdeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjUxMDAyMDcxNzAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTlkYjkxZDFmZmFjMWM4YmE2ZDk2ZWRkMmQ2OWNkYjdjNDIyYjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VpIzEnLOezX0grJTShdZOHYwUia
tRR732QkgBcBhDk5x6sfLQ9zkRrPuDTJAUAAAWNcwkH46vmYvfq9DYtKNORD01F5
wNBnXbU5z8fcUMoEQNUig10914gSJp4pJBBU0QmVFzYh4Py2P4W99xX1oc1reLHV
mUx4iVFBCQ6861MN6HreEDucUyBQNy7Cp9kBR12vEkND8Upo2Qw/a8+OrNck4Pv3
b63NsclIKuZMgEY0qy53L3mCYFdctJnXG+f/uwNcyQCcMX0cWG50xeKEcsvPG/Oj
aAE8+0zqVlv8RZJ69GUTon4t4BodDe3jGVz+pfQJroQROwFYq8pgGVWYcwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFGWduR0f+sHIum2W7dLWnNt8QiuPMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvWloyNUhSXzZ3Y2k2YlpidDB0YWMyM3hDSzQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQBUGASAwQB
UGBGAwQBUGBkAwQBUbRsAwQBUbWiAwQBVXo8AwQA2ZwgMA0GCSqGSIb3DQEBCwUA
A4IBAQAtnFgKjRwSaX41QSAxp5YLr+t6N/vBeojkb6cnPgOBvWBmvxRjPxP0QIYI
jq91AXNIl1W3SNzE09ge8K71thJn+qDD9T2NxTzJeho2D1MIr12b0czIV9Rc8f0O
FKyV45MBkuG8icLDlHhjQeNuC5tA9FybyrO5DTI4mx1Ks3bXg5bdQ4xBK9TCAHHz
iq69WN4zDgeASR4HMVr4Um8UjzC2QhAky7DZS1AECoDSNHhfSFhLXpXuSskezWE/
8DxOWDsIZvLGgNc2L6RM43jkrbDO5H1/yKu0swbg9SlmBeaX4A3ubdI234PhIGcK
mhSzAFCymZilEqXUScwDCivYlyZX
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:55:29 2025 by rpki-client