Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/Zxsck8v3Betkz2Zy-SZS_1xsuKY.roa
File: Zxsck8v3Betkz2Zy-SZS_1xsuKY.roa (raw, json)
Hash identifier: 9xEL2J47PmBE1FFsCVEJgEYa0GdRd8BC6UCKLAiu2eM=
Subject key identifier: 67:1B:1C:93:CB:F7:05:EB:64:CF:66:72:F9:26:52:FF:5C:6C:B8:A6
Certificate issuer: /CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
Certificate serial: 0198CC5C667B643CA7F109E0B3B1FF8E8002
Authority key identifier: E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/Zxsck8v3Betkz2Zy-SZS_1xsuKY.roa
Signing time: Thu 21 Aug 2025 11:21:04 +0000
ROA not before: Thu 21 Aug 2025 11:21:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 719
IP address blocks: 31.7.16.0/20 maxlen: 20
46.182.112.0/21 maxlen: 21
62.142.0.0/16 maxlen: 16
62.148.192.0/19 maxlen: 19
62.216.96.0/19 maxlen: 19
62.240.64.0/19 maxlen: 19
62.248.128.0/17 maxlen: 17
77.109.192.0/18 maxlen: 18
80.81.160.0/19 maxlen: 19
80.88.176.0/20 maxlen: 20
80.186.0.0/16 maxlen: 16
80.248.96.0/19 maxlen: 19
81.197.0.0/16 maxlen: 16
81.209.0.0/17 maxlen: 17
82.103.192.0/18 maxlen: 18
82.118.192.0/19 maxlen: 19
82.141.64.0/18 maxlen: 18
82.215.192.0/18 maxlen: 18
83.245.128.0/17 maxlen: 17
84.230.0.0/15 maxlen: 15
85.76.0.0/14 maxlen: 14
85.156.0.0/16 maxlen: 16
85.157.0.0/16 maxlen: 16
85.217.0.0/17 maxlen: 17
88.112.0.0/14 maxlen: 14
91.152.0.0/13 maxlen: 13
94.22.0.0/16 maxlen: 16
109.163.248.0/21 maxlen: 21
109.232.80.0/21 maxlen: 21
139.97.0.0/16 maxlen: 16
178.251.56.0/21 maxlen: 21
192.77.120.0/22 maxlen: 22
192.102.36.0/24 maxlen: 24
192.102.37.0/24 maxlen: 24
192.102.38.0/24 maxlen: 24
192.102.39.0/24 maxlen: 24
192.102.40.0/24 maxlen: 24
192.102.41.0/24 maxlen: 24
192.102.42.0/24 maxlen: 24
192.102.49.0/24 maxlen: 24
192.102.50.0/24 maxlen: 24
192.126.1.0/24 maxlen: 24
192.126.23.0/24 maxlen: 24
192.126.24.0/24 maxlen: 24
192.126.35.0/24 maxlen: 24
192.126.44.0/24 maxlen: 24
192.126.46.0/24 maxlen: 24
192.163.32.0/19 maxlen: 19
192.163.64.0/18 maxlen: 18
192.163.128.0/19 maxlen: 19
192.175.45.0/24 maxlen: 24
193.64.0.0/15 maxlen: 15
193.66.0.0/16 maxlen: 16
193.94.0.0/16 maxlen: 16
193.184.0.0/15 maxlen: 15
193.199.0.0/16 maxlen: 16
193.229.0.0/16 maxlen: 16
194.86.0.0/16 maxlen: 16
194.86.35.0/24 maxlen: 24
194.136.0.0/16 maxlen: 16
194.157.0.0/16 maxlen: 16
194.188.0.0/16 maxlen: 16
194.211.0.0/16 maxlen: 16
194.240.0.0/15 maxlen: 15
195.16.192.0/19 maxlen: 19
195.74.0.0/19 maxlen: 19
195.170.128.0/19 maxlen: 19
195.197.0.0/16 maxlen: 16
195.218.64.0/19 maxlen: 19
195.236.0.0/15 maxlen: 15
195.238.192.0/19 maxlen: 19
195.255.0.0/16 maxlen: 16
212.38.224.0/19 maxlen: 19
212.50.192.0/19 maxlen: 19
212.54.0.0/19 maxlen: 19
212.63.0.0/19 maxlen: 19
212.226.0.0/16 maxlen: 16
212.246.0.0/16 maxlen: 16
213.130.224.0/19 maxlen: 19
213.161.32.0/19 maxlen: 19
213.169.0.0/19 maxlen: 19
213.192.128.0/18 maxlen: 18
213.250.64.0/18 maxlen: 18
217.24.96.0/20 maxlen: 20
217.25.96.0/20 maxlen: 20
217.77.192.0/20 maxlen: 20
217.152.0.0/16 maxlen: 16
2001:671::/47 maxlen: 48
2001:998::/29 maxlen: 32
2001:9f0::/29 maxlen: 29
2001:1658::/29 maxlen: 29
2a00:1dd0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cc:5c:66:7b:64:3c:a7:f1:09:e0:b3:b1:ff:8e:80:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
Validity
Not Before: Aug 21 11:21:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=671b1c93cbf705eb64cf6672f92652ff5c6cb8a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1b:42:65:c6:d0:c9:d8:aa:37:47:3b:b5:3f:
71:92:b7:aa:77:fa:0c:0c:f7:0c:74:ee:29:83:ca:
ff:1f:8c:a8:cc:76:84:56:65:88:10:48:9e:43:0c:
a4:e4:aa:df:39:a4:45:34:22:3b:59:20:59:83:5b:
95:f6:4a:fd:2d:7f:b4:c9:56:18:f2:fa:c1:43:63:
04:14:12:4f:7b:1d:c7:04:3c:ab:63:60:a2:b7:e1:
52:15:75:40:f7:3a:a9:d6:be:f7:5e:2b:00:e4:82:
e0:d7:51:d2:8d:10:e7:21:72:8d:f3:b2:c5:97:4f:
9e:e2:97:84:04:35:40:bb:6f:f3:10:b5:83:9a:08:
73:ac:93:22:b9:53:ae:82:cb:56:e6:77:14:73:c9:
fd:01:60:a0:57:f9:9c:96:e8:65:a1:f6:bf:c1:16:
28:1d:87:84:f6:2f:2f:ee:e2:f6:5d:fd:12:50:40:
98:fd:a1:9c:66:7b:88:aa:a0:75:69:43:4e:5c:a1:
7f:37:e0:57:4b:de:3b:0e:69:44:b6:83:7a:92:0f:
7c:29:41:5c:e7:4d:0f:ad:98:a0:ee:87:81:6a:ee:
71:b8:0e:91:53:99:ba:7e:67:8a:32:a2:36:33:e3:
7e:3e:a3:08:01:23:f0:0d:6c:2f:a2:5b:3c:41:2f:
f3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:1B:1C:93:CB:F7:05:EB:64:CF:66:72:F9:26:52:FF:5C:6C:B8:A6
X509v3 Authority Key Identifier:
keyid:E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/Zxsck8v3Betkz2Zy-SZS_1xsuKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.7.16.0/20
46.182.112.0/21
62.142.0.0/16
62.148.192.0/19
62.216.96.0/19
62.240.64.0/19
62.248.128.0/17
77.109.192.0/18
80.81.160.0/19
80.88.176.0/20
80.186.0.0/16
80.248.96.0/19
81.197.0.0/16
81.209.0.0/17
82.103.192.0/18
82.118.192.0/19
82.141.64.0/18
82.215.192.0/18
83.245.128.0/17
84.230.0.0/15
85.76.0.0/14
85.156.0.0/15
85.217.0.0/17
88.112.0.0/14
91.152.0.0/13
94.22.0.0/16
109.163.248.0/21
109.232.80.0/21
139.97.0.0/16
178.251.56.0/21
192.77.120.0/22
192.102.36.0-192.102.42.255
192.102.49.0-192.102.50.255
192.126.1.0/24
192.126.23.0-192.126.24.255
192.126.35.0/24
192.126.44.0/24
192.126.46.0/24
192.163.32.0-192.163.159.255
192.175.45.0/24
193.64.0.0-193.66.255.255
193.94.0.0/16
193.184.0.0/15
193.199.0.0/16
193.229.0.0/16
194.86.0.0/16
194.136.0.0/16
194.157.0.0/16
194.188.0.0/16
194.211.0.0/16
194.240.0.0/15
195.16.192.0/19
195.74.0.0/19
195.170.128.0/19
195.197.0.0/16
195.218.64.0/19
195.236.0.0/15
195.238.192.0/19
195.255.0.0/16
212.38.224.0/19
212.50.192.0/19
212.54.0.0/19
212.63.0.0/19
212.226.0.0/16
212.246.0.0/16
213.130.224.0/19
213.161.32.0/19
213.169.0.0/19
213.192.128.0/18
213.250.64.0/18
217.24.96.0/20
217.25.96.0/20
217.77.192.0/20
217.152.0.0/16
IPv6:
2001:671::/47
2001:998::/29
2001:9f0::/29
2001:1658::/29
2a00:1dd0::/29
Signature Algorithm: sha256WithRSAEncryption
9f:0b:48:1a:86:ce:5a:cb:fd:78:a9:ed:ac:e5:1b:12:2b:54:
32:7e:f4:b8:a8:c3:7e:16:7b:0d:8e:0e:6d:86:69:14:bd:ac:
d0:0f:71:c8:98:43:b1:e9:64:fb:03:2b:2f:9e:99:45:cc:22:
6d:23:08:0b:35:29:9d:a6:62:73:24:9b:88:f1:85:41:cf:c1:
76:56:29:31:a7:8a:97:aa:98:ca:bb:ba:a0:2f:9f:be:0f:aa:
a5:56:2e:d3:6c:f6:ae:3e:0d:df:23:f9:05:81:71:e8:62:4d:
17:d1:d1:8b:2b:24:e2:3b:4d:6c:6c:ed:64:89:52:3a:aa:ea:
55:7e:53:fe:2c:c6:d3:03:0e:b8:4e:84:af:95:62:ac:14:97:
d0:53:4e:3c:e1:9b:24:66:6c:3c:05:a3:3e:5f:35:de:bc:92:
6c:2e:54:8d:21:4e:a9:88:db:68:e4:bc:1b:8e:70:f0:98:ff:
c1:f6:db:93:5d:d9:cc:3d:f1:b2:cd:45:bb:ef:b9:ff:e2:c3:
53:bb:b0:bc:43:aa:48:ce:49:35:c9:24:a6:fc:2d:cb:92:58:
af:14:42:49:2a:70:4e:05:04:d0:67:e8:5f:2f:c4:a7:8a:9d:
c7:0d:3a:2e:a6:4a:b3:40:08:89:6b:2a:df:f1:75:1f:0d:f2:
92:df:3d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:31:08 2025 by rpki-client