Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/z3lPRmyZVa0AhSF1xvxZacOT-_Y.roa
File: z3lPRmyZVa0AhSF1xvxZacOT-_Y.roa (raw, json)
Hash identifier: 4ZI2CK9RanGXlpJndY14l4cAiHVOnZTCRT+JSh1an14=
Subject key identifier: CF:79:4F:46:6C:99:55:AD:00:85:21:75:C6:FC:59:69:C3:93:FB:F6
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 0198CE68FF66B4A0D04F9C7B66C0CF91F02A
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/z3lPRmyZVa0AhSF1xvxZacOT-_Y.roa
Signing time: Thu 21 Aug 2025 20:54:04 +0000
ROA not before: Thu 21 Aug 2025 20:54:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395793
IP address blocks: 195.216.162.0/24 maxlen: 24
195.216.163.0/24 maxlen: 24
195.216.172.0/24 maxlen: 24
195.216.173.0/24 maxlen: 24
195.216.174.0/24 maxlen: 24
195.216.175.0/24 maxlen: 24
195.216.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ce:68:ff:66:b4:a0:d0:4f:9c:7b:66:c0:cf:91:f0:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Aug 21 20:54:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf794f466c9955ad00852175c6fc5969c393fbf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:eb:71:22:0a:19:a9:70:26:53:25:4c:f6:34:
2a:4c:7f:63:f3:6c:ee:eb:10:07:d1:a2:b7:0b:ce:
cb:bb:68:64:57:e1:a5:2a:f7:42:dd:e3:5d:48:91:
4e:19:ee:c8:06:55:ec:49:80:aa:af:c5:68:e0:e8:
d0:2d:33:93:e6:9f:d6:4a:d0:88:32:58:d3:95:e8:
22:fc:8c:7c:93:0d:4d:ef:06:a8:6a:7e:a9:84:b2:
9f:14:2d:6c:e6:24:8e:24:82:ee:09:f9:8c:47:ec:
56:87:0d:68:a8:3b:58:4d:89:c6:41:cb:c0:ff:ea:
c0:21:73:fa:eb:f5:3c:0d:05:cf:56:8c:89:2c:ea:
07:f2:43:34:29:90:11:b7:30:c6:71:50:32:fb:1f:
00:83:81:0d:6c:07:07:14:4e:b9:f8:ea:4d:13:c6:
2a:f1:2e:b5:ce:7a:1a:6d:9f:42:b3:fd:82:89:bc:
5d:8a:8b:b3:8d:7a:84:8b:ed:57:b1:01:a3:b7:d9:
36:76:23:12:3a:c8:b3:b7:bd:66:ca:6d:fd:0c:49:
33:a0:71:69:13:da:1b:f6:62:92:29:8a:0e:35:4c:
c9:93:39:34:91:a2:0d:90:68:78:39:ff:13:ba:14:
77:9e:e7:fb:90:3f:e3:ff:1a:c2:f8:5f:f5:95:90:
2b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:79:4F:46:6C:99:55:AD:00:85:21:75:C6:FC:59:69:C3:93:FB:F6
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/z3lPRmyZVa0AhSF1xvxZacOT-_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.162.0/23
195.216.172.0/22
195.216.191.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:69:15:60:b0:7b:8d:46:c6:89:be:fe:9d:77:d9:0a:4d:bb:
e4:32:65:03:37:78:d1:c0:5c:a5:d8:38:43:16:0c:a5:8c:7c:
eb:f3:e2:84:4d:01:a0:0b:ca:b4:32:bf:a3:ca:77:3b:cf:21:
7f:25:33:6f:52:fe:69:56:24:32:bf:1a:c7:34:14:03:df:1f:
18:98:b5:aa:fd:3f:21:64:43:c6:25:ac:e6:e6:17:23:85:a4:
44:c3:f8:71:e2:97:04:e2:1b:67:32:a5:3c:47:b1:42:d5:4c:
b6:9f:48:d4:63:1d:04:17:5a:f1:ec:0b:19:68:5c:eb:13:2b:
64:4d:e0:ed:c4:47:90:32:4a:90:2c:56:bb:02:94:ff:c1:8a:
35:ff:85:83:93:30:55:87:95:d4:fe:21:9e:3f:d8:bc:39:85:
8a:f3:8b:88:90:b3:0b:b4:0a:0e:74:da:48:3f:21:f0:75:36:
f4:ef:7f:b8:08:f3:f9:40:11:19:50:28:71:e6:74:86:0a:54:
d3:0f:80:12:1f:17:da:51:b1:7b:c0:4a:0b:3d:07:c4:83:ff:
be:f3:db:98:12:bd:2c:b1:76:dd:68:58:a2:bb:f5:ff:d5:f6:
55:cd:60:ea:a5:0a:dc:f5:16:c5:fe:a3:6e:7b:ad:d8:0e:cd:
ae:b7:4e:b2
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZjOaP9mtKDQT5x7ZsDPkfAqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YjdkNjY5OTgzNWJmZTlhODA4MWRmYzExNGRmMWJmNmQy
MTVkYTcwHhcNMjUwODIxMjA1NDA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjc5NGY0NjZjOTk1NWFkMDA4NTIxNzVjNmZjNTk2OWMzOTNmYmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+txIgoZqXAmUyVM9jQqTH9j82zu
6xAH0aK3C87Lu2hkV+GlKvdC3eNdSJFOGe7IBlXsSYCqr8Vo4OjQLTOT5p/WStCI
MljTlegi/Ix8kw1N7waoan6phLKfFC1s5iSOJILuCfmMR+xWhw1oqDtYTYnGQcvA
/+rAIXP66/U8DQXPVoyJLOoH8kM0KZARtzDGcVAy+x8Ag4ENbAcHFE65+OpNE8Yq
8S61znoabZ9Cs/2CibxdiouzjXqEi+1XsQGjt9k2diMSOsizt71mym39DEkzoHFp
E9ob9mKSKYoONUzJkzk0kaINkGh4Of8TuhR3nuf7kD/j/xrC+F/1lZArQQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFM95T0ZsmVWtAIUhdcb8WWnDk/v2MB8GA1UdIwQY
MBaAFGW31mmYNb/pqAgd/BFN8b9tIV2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDct
OWU0MTNlYmY0MmYzLzEvejNsUFJteVpWYTBBaFNGMXh2eFphY09ULV9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDctOWU0MTNlYmY0MmYz
LzEvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBw9iiAwQC
w9isAwQAw9i/MA0GCSqGSIb3DQEBCwUAA4IBAQAvaRVgsHuNRsaJvv6dd9kKTbvk
MmUDN3jRwFyl2DhDFgyljHzr8+KETQGgC8q0Mr+jync7zyF/JTNvUv5pViQyvxrH
NBQD3x8YmLWq/T8hZEPGJazm5hcjhaREw/hx4pcE4htnMqU8R7FC1Uy2n0jUYx0E
F1rx7AsZaFzrEytkTeDtxEeQMkqQLFa7ApT/wYo1/4WDkzBVh5XU/iGeP9i8OYWK
84uIkLMLtAoOdNpIPyHwdTb073+4CPP5QBEZUChx5nSGClTTD4ASHxfaUbF7wEoL
PQfEg/++89uYEr0ssXbdaFiiu/X/1fZVzWDqpQrc9RbF/qNue63YDs2ut06y
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:22:34 2025 by rpki-client