Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/z4B_0NPBULYz3CrNWEAyG6UVZvw.roa
File: z4B_0NPBULYz3CrNWEAyG6UVZvw.roa (raw, json)
Hash identifier: o8ZEbQtboKRylpC73PGr77tEXJxG1oMYVP6sQuq/5kI=
Subject key identifier: CF:80:7F:D0:D3:C1:50:B6:33:DC:2A:CD:58:40:32:1B:A5:15:66:FC
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 0199E3F0450A92B77DCF9E599A786EAB0A51
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/z4B_0NPBULYz3CrNWEAyG6UVZvw.roa
Signing time: Tue 14 Oct 2025 18:16:38 +0000
ROA not before: Tue 14 Oct 2025 18:16:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34450
IP address blocks: 86.106.80.0/24 maxlen: 24
86.106.104.0/24 maxlen: 24
89.34.8.0/21 maxlen: 21
89.37.136.0/24 maxlen: 24
89.44.209.0/24 maxlen: 24
93.113.158.0/24 maxlen: 24
93.114.55.0/24 maxlen: 24
93.114.99.0/24 maxlen: 24
93.114.171.0/24 maxlen: 24
188.213.18.0/24 maxlen: 24
188.215.72.0/23 maxlen: 24
188.240.14.0/24 maxlen: 24
2a05:b680:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e3:f0:45:0a:92:b7:7d:cf:9e:59:9a:78:6e:ab:0a:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Oct 14 18:16:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf807fd0d3c150b633dc2acd5840321ba51566fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:be:87:3c:6b:2b:d8:f3:fa:d9:99:03:d9:5c:
7e:0c:73:12:67:bc:e8:0f:bd:4a:42:29:ac:5f:1d:
39:fb:a7:25:63:61:4f:a2:42:6b:99:48:ca:66:4b:
8d:ed:c1:86:92:02:73:31:3e:a1:05:aa:23:f2:04:
77:06:81:be:d6:0c:5d:36:42:89:41:06:3e:54:65:
e8:c5:da:30:c2:f4:13:1b:4d:9f:92:8d:0d:e8:87:
39:86:58:fb:53:7b:d2:73:95:df:1a:b8:2a:34:13:
52:7a:ef:b1:e1:0d:e1:da:12:0c:e3:32:22:48:c4:
f3:e6:fb:f8:30:51:49:82:e9:c5:ab:bd:69:f1:0f:
57:f0:72:2e:63:96:2d:96:23:1c:d8:47:b1:a4:5a:
ad:93:30:6d:e0:d7:83:42:47:77:e0:25:cf:8f:c4:
90:fb:bc:96:51:0f:9c:f1:7f:71:9c:40:14:66:7e:
01:19:7e:1f:fe:31:73:4d:f0:66:93:0a:27:e2:d6:
d4:50:52:04:66:00:19:f3:cf:2e:e4:ca:8e:cd:99:
fa:c1:df:cc:39:c8:fa:4c:15:1e:0c:3a:eb:17:fc:
de:21:d4:85:4b:5d:30:72:b7:78:3e:4f:1d:ab:c7:
b3:03:51:e2:c5:05:97:07:03:75:f2:7e:47:75:c5:
24:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:80:7F:D0:D3:C1:50:B6:33:DC:2A:CD:58:40:32:1B:A5:15:66:FC
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/z4B_0NPBULYz3CrNWEAyG6UVZvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.80.0/24
86.106.104.0/24
89.34.8.0/21
89.37.136.0/24
89.44.209.0/24
93.113.158.0/24
93.114.55.0/24
93.114.99.0/24
93.114.171.0/24
188.213.18.0/24
188.215.72.0/23
188.240.14.0/24
IPv6:
2a05:b680:1::/48
Signature Algorithm: sha256WithRSAEncryption
03:5d:d5:54:7f:7b:7a:74:00:35:cb:ff:c0:a2:09:cf:b2:98:
ca:09:fc:4a:57:d6:13:77:bb:f7:27:3d:bb:d4:92:28:5d:ca:
55:31:db:20:d0:c1:c6:07:82:78:ad:71:ab:35:75:3e:00:d6:
fa:7f:51:69:dd:8b:75:b3:1f:1c:09:49:a7:b3:14:55:4d:13:
42:f0:c7:2e:28:4e:5d:b6:0c:4b:f7:42:5a:f2:49:03:69:e9:
30:6d:26:31:3a:0b:91:71:a2:e4:13:6b:d4:54:96:a7:7d:57:
89:e3:50:73:1a:da:a6:d2:b6:26:d4:86:12:7b:d3:7c:d4:59:
ab:f2:90:de:18:b1:a3:95:8e:99:d3:be:61:cb:ba:31:dc:92:
7b:c9:3e:0a:8c:9e:e8:fb:7e:89:3c:b6:b9:00:40:95:99:f6:
fc:cf:18:97:09:ba:a9:8c:d5:e3:fe:5c:76:d3:79:6b:e3:ba:
fb:5a:a7:b2:81:af:9f:f7:1e:68:8d:27:f4:e1:93:4e:d4:36:
1e:f9:65:3c:dc:d6:df:20:1c:1f:b3:34:ae:f9:02:8c:66:35:
51:22:a5:e5:7d:64:a6:e0:9b:64:09:04:eb:49:fd:94:e7:96:
e9:fb:81:52:4a:6f:c4:28:3c:a6:d0:f7:64:80:25:e3:f5:fa:
35:e4:7f:e6
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgISAZnj8EUKkrd9z55ZmnhuqwpRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNTg5NTJkMzkzOTM1ZjBkM2JjZTgxNGZkOTE3OGQwNDY5
M2FlYjkwHhcNMjUxMDE0MTgxNjM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjgwN2ZkMGQzYzE1MGI2MzNkYzJhY2Q1ODQwMzIxYmE1MTU2NmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA776HPGsr2PP62ZkD2Vx+DHMSZ7zo
D71KQimsXx05+6clY2FPokJrmUjKZkuN7cGGkgJzMT6hBaoj8gR3BoG+1gxdNkKJ
QQY+VGXoxdowwvQTG02fko0N6Ic5hlj7U3vSc5XfGrgqNBNSeu+x4Q3h2hIM4zIi
SMTz5vv4MFFJgunFq71p8Q9X8HIuY5YtliMc2EexpFqtkzBt4NeDQkd34CXPj8SQ
+7yWUQ+c8X9xnEAUZn4BGX4f/jFzTfBmkwon4tbUUFIEZgAZ888u5MqOzZn6wd/M
Ocj6TBUeDDrrF/zeIdSFS10wcrd4Pk8dq8ezA1HixQWXBwN18n5HdcUknQIDAQAB
o4ICXDCCAlgwHQYDVR0OBBYEFM+Af9DTwVC2M9wqzVhAMhulFWb8MB8GA1UdIwQY
MBaAFP5YlS05OTXw07zoFP2ReNBGk665MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUt
NWQ0OGI2NWNlNTczLzEvejRCXzBOUEJVTFl6M0NyTldFQXlHNlVWWnZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUtNWQ0OGI2NWNlNTcz
LzEvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHIGCCsGAQUFBwEHAQH/BGMwYTBOBAIAATBIAwQAVmpQAwQA
VmpoAwQDWSIIAwQAWSWIAwQAWSzRAwQAXXGeAwQAXXI3AwQAXXJjAwQAXXKrAwQA
vNUSAwQBvNdIAwQAvPAOMA8EAgACMAkDBwAqBbaAAAEwDQYJKoZIhvcNAQELBQAD
ggEBAANd1VR/e3p0ADXL/8CiCc+ymMoJ/EpX1hN3u/cnPbvUkihdylUx2yDQwcYH
gnitcas1dT4A1vp/UWndi3WzHxwJSaezFFVNE0Lwxy4oTl22DEv3QlrySQNp6TBt
JjE6C5FxouQTa9RUlqd9V4njUHMa2qbStibUhhJ703zUWavykN4YsaOVjpnTvmHL
ujHcknvJPgqMnuj7fok8trkAQJWZ9vzPGJcJuqmM1eP+XHbTeWvjuvtap7KBr5/3
HmiNJ/Thk07UNh75ZTzc1t8gHB+zNK75AoxmNVEipeV9ZKbgm2QJBOtJ/ZTnlun7
gVJKb8QoPKbQ92SAJeP1+jXkf+Y=
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:08:56 2025 by rpki-client