Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/pZ0QV1A72pNo3xA_ZkKldpP0-RE.roa
File: pZ0QV1A72pNo3xA_ZkKldpP0-RE.roa (raw, json)
Hash identifier: k4YVAlmoIc3oxkYYC+Z8G5mq/D/aa0SG5MEiGRmLxQQ=
Subject key identifier: A5:9D:10:57:50:3B:DA:93:68:DF:10:3F:66:42:A5:76:93:F4:F9:11
Certificate issuer: /CN=c1d369e66cdbe30d7b3aff6081f20c17a98fdc5b
Certificate serial: 01979C634F615F03FD292548A0FECC1C2ABC
Authority key identifier: C1:D3:69:E6:6C:DB:E3:0D:7B:3A:FF:60:81:F2:0C:17:A9:8F:DC:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/pZ0QV1A72pNo3xA_ZkKldpP0-RE.roa
Signing time: Mon 23 Jun 2025 10:44:03 +0000
ROA not before: Mon 23 Jun 2025 10:44:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211381
IP address blocks: 45.88.76.0/24 maxlen: 24
45.88.105.0/24 maxlen: 24
45.91.200.0/24 maxlen: 24
45.91.201.0/24 maxlen: 24
45.91.202.0/24 maxlen: 24
45.132.107.0/24 maxlen: 24
45.147.196.0/24 maxlen: 24
77.83.175.0/24 maxlen: 24
81.91.179.0/24 maxlen: 24
91.211.248.0/24 maxlen: 24
91.211.249.0/24 maxlen: 24
91.211.250.0/24 maxlen: 24
92.119.114.0/24 maxlen: 24
95.215.204.0/24 maxlen: 24
95.215.206.0/24 maxlen: 24
95.215.207.0/24 maxlen: 24
185.203.240.0/24 maxlen: 24
185.203.241.0/24 maxlen: 24
185.209.20.0/24 maxlen: 24
185.209.21.0/24 maxlen: 24
185.219.81.0/24 maxlen: 24
185.219.83.0/24 maxlen: 24
185.231.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 13:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9c:63:4f:61:5f:03:fd:29:25:48:a0:fe:cc:1c:2a:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1d369e66cdbe30d7b3aff6081f20c17a98fdc5b
Validity
Not Before: Jun 23 10:44:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a59d1057503bda9368df103f6642a57693f4f911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:53:c0:ed:9a:ea:a3:e0:44:2c:61:5d:b2:b4:
19:c7:86:56:c9:a1:81:ca:58:87:df:70:45:3b:dc:
2d:01:ab:a2:fd:17:d1:f1:ee:19:e3:9b:59:1b:85:
0e:09:7d:b1:56:cf:8f:71:db:76:c6:8b:cd:00:db:
a2:44:9b:48:da:87:5e:e1:47:b1:ed:db:f4:e3:9f:
ff:76:76:23:d1:5f:a6:2c:67:fe:c4:08:2d:9c:62:
35:01:e9:29:be:d9:20:9a:88:3c:9a:93:66:94:42:
cc:40:13:ae:c8:0b:2f:cc:81:b2:a5:e0:36:9e:0b:
d6:47:91:47:bd:fd:2d:bb:76:b2:4f:fc:48:36:fb:
1c:b1:4a:b8:5e:c5:93:14:ba:db:6d:36:06:9d:f2:
e6:62:82:e8:4b:d0:6f:38:05:1d:24:5f:25:2e:a6:
75:bd:c6:95:00:78:05:b6:06:ff:3e:19:88:c7:32:
cd:78:19:db:82:87:5c:65:d0:80:84:0d:b9:88:47:
a6:50:95:33:5a:43:b9:27:49:7a:4b:30:17:f0:1b:
81:0e:b9:0d:c5:44:67:0b:b5:fc:e7:07:aa:97:9c:
ea:11:a8:75:ca:71:29:87:6c:49:84:ac:df:c7:50:
a1:09:8d:10:0e:e6:eb:fa:35:68:c7:24:b5:ee:3f:
25:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:9D:10:57:50:3B:DA:93:68:DF:10:3F:66:42:A5:76:93:F4:F9:11
X509v3 Authority Key Identifier:
keyid:C1:D3:69:E6:6C:DB:E3:0D:7B:3A:FF:60:81:F2:0C:17:A9:8F:DC:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/pZ0QV1A72pNo3xA_ZkKldpP0-RE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.76.0/24
45.88.105.0/24
45.91.200.0-45.91.202.255
45.132.107.0/24
45.147.196.0/24
77.83.175.0/24
81.91.179.0/24
91.211.248.0-91.211.250.255
92.119.114.0/24
95.215.204.0/24
95.215.206.0/23
185.203.240.0/23
185.209.20.0/23
185.219.81.0/24
185.219.83.0/24
185.231.69.0/24
Signature Algorithm: sha256WithRSAEncryption
60:d7:02:0e:76:9c:8e:6e:7f:9c:df:93:ab:f3:ae:a1:b1:16:
0a:6d:23:5e:cf:5f:ac:54:4e:18:ea:e2:bd:ed:e7:f2:8f:c2:
4b:e8:b8:00:91:79:b7:6f:72:ae:be:47:b3:29:af:36:a3:81:
61:98:ca:7e:b7:bf:6a:e9:59:2e:1a:46:9d:24:b2:b7:bd:7d:
35:d6:5c:75:46:3c:75:e9:48:d3:a9:69:07:fc:43:bc:04:e5:
51:7c:52:31:91:6c:78:34:bc:7f:36:ec:98:88:6c:93:31:7b:
a3:25:86:8e:59:dd:a0:c9:79:a4:3b:57:6d:12:79:c9:b7:97:
ee:77:02:c4:bf:ea:90:d5:e9:e1:15:a7:cb:2f:3f:5c:5f:ea:
a5:19:08:0d:81:15:4c:5f:ba:95:58:74:db:ec:32:2e:8c:12:
77:c9:b1:43:5e:52:90:38:78:ad:09:13:89:2c:1a:da:88:6d:
66:33:f9:b3:c2:87:8a:54:67:90:11:c8:21:d5:79:69:1c:6b:
e0:03:72:a5:9f:d2:4a:7d:b7:c1:dc:0a:7b:cd:58:fa:6a:e9:
95:40:ba:e3:79:5f:79:a1:a2:7b:6d:0f:8a:69:ec:f8:7a:c7:
55:eb:67:f0:58:35:35:52:d5:37:b0:fb:48:37:ec:e0:01:fb:
0a:cd:12:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 17:31:40 2025 by rpki-client