Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/Zlv36tamJaq47lwqLQAW7Q_sruY.roa
File: Zlv36tamJaq47lwqLQAW7Q_sruY.roa (raw, json)
Hash identifier: RBo/eHSfbmefKIl9bg9PN8r5kAZ1Jas9KS3eVZMLdlc=
Subject key identifier: 66:5B:F7:EA:D6:A6:25:AA:B8:EE:5C:2A:2D:00:16:ED:0F:EC:AE:E6
Certificate issuer: /CN=c27358682df3df8bdc7024507f92ecfc5ae097bb
Certificate serial: 0199F1A04F13A712AF521D3C0C14BE59BAE8
Authority key identifier: C2:73:58:68:2D:F3:DF:8B:DC:70:24:50:7F:92:EC:FC:5A:E0:97:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/Zlv36tamJaq47lwqLQAW7Q_sruY.roa
Signing time: Fri 17 Oct 2025 10:03:59 +0000
ROA not before: Fri 17 Oct 2025 10:03:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15703
IP address blocks: 80.247.208.0/20 maxlen: 24
87.233.0.0/16 maxlen: 24
193.28.152.0/24 maxlen: 24
213.193.192.0/21 maxlen: 24
213.193.208.0/21 maxlen: 24
213.193.209.0/24 maxlen: 24
213.193.212.0/24 maxlen: 24
213.193.216.0/22 maxlen: 24
213.193.220.0/22 maxlen: 24
213.193.232.0/21 maxlen: 24
213.193.232.0/24 maxlen: 24
213.193.240.0/21 maxlen: 24
213.193.252.0/23 maxlen: 24
213.193.254.0/23 maxlen: 24
213.239.128.0/19 maxlen: 24
2001:990::/32 maxlen: 32
2001:9a8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f1:a0:4f:13:a7:12:af:52:1d:3c:0c:14:be:59:ba:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c27358682df3df8bdc7024507f92ecfc5ae097bb
Validity
Not Before: Oct 17 10:03:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=665bf7ead6a625aab8ee5c2a2d0016ed0fecaee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:fb:8c:ae:6a:20:a1:76:59:a5:81:8f:95:ef:
76:b6:b9:da:a2:2e:6a:c2:9f:3a:5e:4d:40:33:8f:
cb:0a:93:b4:17:13:5e:c9:c1:e0:45:d8:9f:1c:33:
e4:77:51:67:5c:ea:de:3f:4e:70:7f:69:64:5d:27:
ce:03:22:28:1f:69:60:9e:ec:c2:14:42:c6:86:c4:
73:c3:38:83:71:26:82:e1:43:f1:43:99:4c:cb:28:
0e:f0:07:8b:ef:1d:7c:5e:f1:8c:83:6e:9c:1a:97:
49:e3:03:69:6a:71:d0:02:70:e2:ed:27:db:3f:27:
78:9f:a8:b9:46:0f:6e:fe:40:77:af:d0:89:90:8d:
1e:08:ae:4b:a4:43:c1:07:67:a7:e6:08:e2:95:3c:
0a:ef:8f:89:e3:74:54:07:47:74:11:14:1e:1b:83:
da:9c:a1:89:56:3d:ee:24:a6:7a:25:b7:05:64:e1:
87:71:34:61:85:14:fa:9b:bd:f3:d0:5a:c3:54:73:
5f:74:3c:4c:a0:d0:33:2a:e5:5f:11:3d:3b:fb:53:
10:d5:c6:1a:70:34:32:dc:f1:b6:d2:dc:d5:23:8e:
45:31:98:61:fa:09:88:06:91:7c:97:3c:1e:c5:cb:
2c:c9:31:8c:84:69:a7:fe:de:f2:02:12:ae:cd:7f:
d2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:5B:F7:EA:D6:A6:25:AA:B8:EE:5C:2A:2D:00:16:ED:0F:EC:AE:E6
X509v3 Authority Key Identifier:
keyid:C2:73:58:68:2D:F3:DF:8B:DC:70:24:50:7F:92:EC:FC:5A:E0:97:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/Zlv36tamJaq47lwqLQAW7Q_sruY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.247.208.0/20
87.233.0.0/16
193.28.152.0/24
213.193.192.0/21
213.193.208.0/20
213.193.232.0-213.193.247.255
213.193.252.0/22
213.239.128.0/19
IPv6:
2001:990::/32
2001:9a8::/32
Signature Algorithm: sha256WithRSAEncryption
2b:2c:5a:3a:c5:4d:83:51:ba:00:0d:12:c8:02:a0:86:1e:8b:
91:0f:4f:64:07:c0:2d:94:18:b4:4e:ef:6e:cf:46:3e:a9:c8:
91:e6:ab:28:9a:cf:85:94:eb:32:ec:82:a9:0d:71:52:d6:16:
49:1d:4f:47:c1:06:be:90:1a:ee:60:0b:00:9f:b0:cd:96:82:
8e:3c:de:52:69:1d:2d:36:9a:6f:ff:f0:09:b8:cc:ff:68:ce:
a6:da:66:28:95:12:f1:30:8d:2f:a7:5b:21:86:cc:8a:bc:30:
5c:c2:78:1c:08:01:40:4c:8c:b3:41:84:43:c0:05:22:aa:bc:
d8:9e:f6:55:40:a3:cf:67:22:15:07:a4:90:98:bc:a3:bb:f6:
a2:62:82:46:19:68:18:99:fd:c4:49:d4:af:a1:e5:d2:6f:14:
0c:11:f7:dc:b2:31:cf:ae:3b:84:94:22:8b:6f:eb:33:8f:73:
ec:fc:65:03:a4:b1:e6:01:fd:53:7f:55:c9:35:25:fb:ba:31:
b1:87:7f:9f:bb:1e:0b:2f:5e:05:42:4e:fc:a1:23:a8:34:02:
79:09:f2:f7:2d:a6:65:8a:a9:98:dc:b0:65:cf:3a:c1:1e:5c:
11:3b:04:ef:4e:77:10:e2:dd:da:8e:1a:cd:40:a8:a8:b6:04:
b2:3a:ee:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:46:16 2025 by rpki-client