Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/zJzk_tM6gq364ozeInI309dIrxA.roa
File: zJzk_tM6gq364ozeInI309dIrxA.roa (raw, json)
Hash identifier: Wk+SRLeVkkf92Q0xGlI36RRywoqFOdrDHHnD94zbdGA=
Subject key identifier: CC:9C:E4:FE:D3:3A:82:AD:FA:E2:8C:DE:22:72:37:D3:D7:48:AF:10
Certificate issuer: /CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Certificate serial: 01975EA7B23F89A3008857717D3EF1336F56
Authority key identifier: AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/zJzk_tM6gq364ozeInI309dIrxA.roa
Signing time: Wed 11 Jun 2025 11:02:17 +0000
ROA not before: Wed 11 Jun 2025 11:02:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13287
IP address blocks: 109.234.80.0/24 maxlen: 24
109.234.81.0/24 maxlen: 24
109.234.82.0/23 maxlen: 23
109.234.82.0/24 maxlen: 24
109.234.84.0/24 maxlen: 24
109.234.85.0/24 maxlen: 24
109.234.86.0/24 maxlen: 24
109.234.87.0/24 maxlen: 24
185.19.68.0/22 maxlen: 22
185.33.66.0/24 maxlen: 24
185.33.67.0/24 maxlen: 24
185.111.184.0/22 maxlen: 22
185.111.184.0/24 maxlen: 24
185.111.185.0/24 maxlen: 24
213.162.192.0/24 maxlen: 24
213.162.193.0/24 maxlen: 24
213.162.195.0/24 maxlen: 24
213.162.196.0/22 maxlen: 24
213.162.197.0/24 maxlen: 24
213.162.200.0/22 maxlen: 22
213.162.204.0/24 maxlen: 24
213.162.205.0/24 maxlen: 24
213.162.206.0/24 maxlen: 24
213.162.207.0/24 maxlen: 24
213.162.208.0/23 maxlen: 23
213.162.210.0/24 maxlen: 24
213.162.211.0/24 maxlen: 24
213.162.212.0/24 maxlen: 24
213.162.214.0/24 maxlen: 24
213.162.215.0/24 maxlen: 24
213.162.216.0/22 maxlen: 22
213.162.217.0/24 maxlen: 24
213.162.218.0/24 maxlen: 24
213.162.219.0/24 maxlen: 24
213.162.220.0/24 maxlen: 24
213.162.221.0/24 maxlen: 24
2a02:23a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:a7:b2:3f:89:a3:00:88:57:71:7d:3e:f1:33:6f:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Validity
Not Before: Jun 11 11:02:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc9ce4fed33a82adfae28cde227237d3d748af10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:33:be:4a:ad:ff:34:d5:38:bf:10:cd:35:8e:
47:3f:66:9b:60:61:39:ea:19:6a:e5:b4:82:8b:6e:
c3:54:d4:34:62:4e:d4:ac:ae:d4:f2:00:54:e8:03:
84:0b:e8:3b:e5:07:17:4d:4d:df:f3:c9:7a:7c:2c:
d9:dd:64:5d:6e:c4:02:0a:69:79:99:03:74:d3:d0:
65:cc:8d:83:30:12:52:c9:6f:85:5f:4b:07:59:c4:
0e:dd:35:63:49:31:b1:c2:8d:b6:c8:f5:5b:1e:5b:
34:b4:b8:04:66:50:87:f9:33:5c:9a:4c:a4:38:e4:
f7:45:07:64:96:d6:c8:c3:2a:f8:36:6d:41:bc:64:
15:ed:d4:aa:eb:60:63:8f:6d:be:22:ef:6c:de:bb:
f8:f5:e6:26:b9:f8:ea:ac:d1:4e:80:65:00:2a:1a:
3c:b6:7b:f7:55:96:5d:66:a7:85:57:4a:aa:d3:0b:
58:b3:08:09:10:fb:db:f8:53:d2:2d:82:61:43:27:
67:bd:70:08:37:33:4f:6d:30:25:e4:ad:0a:b0:36:
29:4c:09:86:b4:d3:16:e2:eb:e4:a0:84:a8:d9:ac:
42:00:53:fd:84:e9:01:33:1e:17:7a:9d:c7:4c:77:
6e:ae:70:66:99:8d:39:05:96:f5:a2:8d:50:e3:7d:
d3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:9C:E4:FE:D3:3A:82:AD:FA:E2:8C:DE:22:72:37:D3:D7:48:AF:10
X509v3 Authority Key Identifier:
keyid:AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/zJzk_tM6gq364ozeInI309dIrxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.234.80.0/21
185.19.68.0/22
185.33.66.0/23
185.111.184.0/22
213.162.192.0/23
213.162.195.0-213.162.212.255
213.162.214.0-213.162.221.255
IPv6:
2a02:23a0::/32
Signature Algorithm: sha256WithRSAEncryption
6d:db:ef:de:a7:12:21:87:8b:de:57:91:e9:90:fe:b5:76:3d:
90:8e:47:bb:49:10:5a:f7:28:b9:87:6e:f7:f6:5f:82:b5:fd:
34:00:1c:d5:e9:1e:06:7e:83:1a:e1:36:57:16:a7:7b:37:ff:
3d:40:f8:15:b9:d2:76:c1:71:ea:cf:ec:b4:4a:5d:79:df:2e:
a8:85:ad:f4:02:b4:a8:6b:7e:b4:ed:e5:ef:af:4d:d6:9a:ca:
66:fb:6c:a2:4c:13:7d:99:86:40:99:c3:8d:af:44:46:0b:3f:
68:aa:0d:dc:98:56:32:c6:88:f3:52:42:a6:ad:7d:2a:38:cd:
06:f9:a1:20:db:e4:e8:f9:28:e4:b7:3b:92:f2:61:b4:7b:25:
13:2f:f5:fc:f4:95:89:3d:21:f3:c1:9e:86:81:6c:3b:c5:d9:
1b:9f:38:99:44:9c:c3:66:0d:d6:d6:42:34:d1:cf:0e:65:2c:
69:f5:31:56:a7:aa:b2:05:95:c5:6e:4e:80:01:61:47:0a:38:
1c:ce:78:dd:8c:ef:c7:2e:0b:95:62:14:37:de:d0:59:10:b1:
31:d6:1a:eb:50:50:5a:9b:aa:28:d4:bb:59:89:87:01:38:59:
a5:b3:c8:3d:3f:ad:9c:e7:5f:00:67:99:a3:22:b0:cb:44:ec:
59:cb:da:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:57:02 2025 by rpki-client