
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/0ZwVYpJfrbJyYn_YtY3RuMq5lcg.roa
File: 0ZwVYpJfrbJyYn_YtY3RuMq5lcg.roa (raw, json)
Hash identifier: gf6HtAdxN0GhhrFPeZ2e6ZRLEIlkoJtABmVeq8td+ik=
Subject key identifier: D1:9C:15:62:92:5F:AD:B2:72:62:7F:D8:B5:8D:D1:B8:CA:B9:95:C8
Certificate issuer: /CN=6ad70ef25e522c0d26e977a1d24ff77ead3ada19
Certificate serial: 0199573FFD4E712BC85A87A239B6B77DC928
Authority key identifier: 6A:D7:0E:F2:5E:52:2C:0D:26:E9:77:A1:D2:4F:F7:7E:AD:3A:DA:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/atcO8l5SLA0m6Xeh0k_3fq062hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/0ZwVYpJfrbJyYn_YtY3RuMq5lcg.roa
Signing time: Wed 17 Sep 2025 10:37:15 +0000
ROA not before: Wed 17 Sep 2025 10:37:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21058
IP address blocks: 80.83.160.0/21 maxlen: 21
80.83.160.0/23 maxlen: 23
80.83.160.0/24 maxlen: 24
80.83.161.0/24 maxlen: 24
80.83.162.0/23 maxlen: 23
80.83.162.0/24 maxlen: 24
80.83.163.0/24 maxlen: 24
80.83.164.0/23 maxlen: 23
80.83.164.0/24 maxlen: 24
80.83.165.0/24 maxlen: 24
80.83.166.0/23 maxlen: 23
80.83.166.0/24 maxlen: 24
80.83.167.0/24 maxlen: 24
80.83.168.0/24 maxlen: 24
80.83.169.0/24 maxlen: 24
80.83.171.0/24 maxlen: 24
80.83.172.0/22 maxlen: 22
80.83.172.0/23 maxlen: 23
80.83.172.0/24 maxlen: 24
80.83.173.0/24 maxlen: 24
80.83.174.0/23 maxlen: 23
80.83.174.0/24 maxlen: 24
80.83.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/atcO8l5SLA0m6Xeh0k_3fq062hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:57:3f:fd:4e:71:2b:c8:5a:87:a2:39:b6:b7:7d:c9:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ad70ef25e522c0d26e977a1d24ff77ead3ada19
Validity
Not Before: Sep 17 10:37:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d19c1562925fadb272627fd8b58dd1b8cab995c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f9:ef:76:c9:3a:35:05:8b:5b:d8:72:4f:2d:
09:bb:df:40:56:cd:43:29:a9:38:38:c3:74:1d:a2:
ce:40:8e:ab:df:59:05:90:25:fa:0a:b6:19:a9:cd:
8b:53:a0:4a:bb:31:60:40:01:11:80:31:23:35:99:
3d:2b:5e:b7:48:92:6e:15:ef:03:9e:08:da:9e:0b:
6c:e7:d2:88:6d:8c:13:0a:78:b8:e5:91:46:6b:ca:
15:31:05:67:cb:35:c6:bc:9c:21:5d:97:36:14:fc:
a5:b8:3d:28:b3:cb:0f:f5:10:f8:d2:0f:f7:61:05:
cf:31:1f:92:02:33:f0:d6:31:46:08:c8:79:fd:d0:
04:48:08:6b:dc:58:17:a9:b6:b6:7c:5a:0f:b8:30:
c9:43:16:87:1a:89:5b:92:52:89:3c:ef:dc:47:b3:
8f:46:69:91:ea:ab:78:d9:ea:a0:4d:b5:26:ed:55:
d0:c7:82:98:42:59:b4:db:ba:72:b4:e0:db:bb:60:
15:69:e0:f2:9e:7f:df:a1:64:f4:7d:00:c9:68:c3:
70:16:49:5a:45:68:80:3d:b8:62:ab:c7:b5:29:aa:
1a:33:1c:e7:93:bd:ae:6f:d0:12:e3:6b:c3:59:cf:
4f:b0:87:ea:3e:a5:09:6d:9c:41:fc:39:3c:9c:86:
ef:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:9C:15:62:92:5F:AD:B2:72:62:7F:D8:B5:8D:D1:B8:CA:B9:95:C8
X509v3 Authority Key Identifier:
keyid:6A:D7:0E:F2:5E:52:2C:0D:26:E9:77:A1:D2:4F:F7:7E:AD:3A:DA:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atcO8l5SLA0m6Xeh0k_3fq062hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/0ZwVYpJfrbJyYn_YtY3RuMq5lcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.83.160.0-80.83.169.255
80.83.171.0-80.83.175.255
Signature Algorithm: sha256WithRSAEncryption
94:39:9f:d9:a7:42:8a:d1:0b:18:5d:eb:21:dd:fa:ab:ba:ad:
ac:2b:53:12:ce:cb:39:87:d9:fb:17:15:57:80:5d:e0:3a:8a:
6d:d1:a4:4b:d8:a4:1c:9e:e1:a9:15:29:58:97:88:89:9a:7d:
a0:39:bc:bb:11:43:a4:ca:bc:08:d8:11:3b:05:d8:46:f2:6d:
4a:f5:49:06:22:4e:07:fd:3b:dc:86:2a:3a:d5:31:a8:5c:9b:
cd:9a:cb:5f:47:e9:46:a6:27:94:12:3f:b5:e6:3d:7b:66:ce:
e6:dc:25:5f:68:b4:ac:37:7f:11:72:3d:c4:9f:01:1f:63:f9:
1e:b4:12:6f:32:10:5c:29:3f:2b:95:aa:8c:45:e8:db:84:5b:
f4:49:c9:60:bb:b5:5e:07:ad:9d:57:90:7b:a8:4b:8a:f9:f6:
b4:8a:de:07:e5:5e:de:b1:1e:58:9d:9d:5c:5e:f5:f7:5c:8f:
c8:54:39:ee:13:2d:91:b4:6d:73:f5:72:e8:85:df:3e:df:40:
3b:ed:b9:52:30:d1:86:ff:7a:ae:95:cd:36:6d:6a:98:7e:1e:
f4:5f:e7:62:18:94:97:94:5b:53:bb:a5:c3:5b:99:b9:b4:52:
1f:c7:3c:b5:56:e3:b5:a4:16:2d:61:82:e3:9f:31:52:da:36:
dd:67:06:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:45:16 2025 by rpki-client