Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/zlsE5y8ISkml9LwmthjQE4JtzdI.roa
File: zlsE5y8ISkml9LwmthjQE4JtzdI.roa (raw, json)
Hash identifier: P7L80Xo0dmoEjCHpVucHdGzStrd3j71piAYh2Bx9HXg=
Subject key identifier: CE:5B:04:E7:2F:08:4A:49:A5:F4:BC:26:B6:18:D0:13:82:6D:CD:D2
Certificate issuer: /CN=90f25e6a6893f466d2695e90670c047443643701
Certificate serial: 01997B97B4F3E50A5E951574BF7DDA811D17
Authority key identifier: 90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/zlsE5y8ISkml9LwmthjQE4JtzdI.roa
Signing time: Wed 24 Sep 2025 11:59:23 +0000
ROA not before: Wed 24 Sep 2025 11:59:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6830
IP address blocks: 62.179.0.0/17 maxlen: 17
78.103.0.0/16 maxlen: 16
80.111.0.0/16 maxlen: 16
80.111.0.0/17 maxlen: 17
80.111.128.0/17 maxlen: 17
84.116.0.0/16 maxlen: 16
94.169.0.0/16 maxlen: 16
94.170.0.0/15 maxlen: 15
94.170.0.0/16 maxlen: 16
94.171.0.0/16 maxlen: 16
195.34.130.0/24 maxlen: 24
195.34.132.0/22 maxlen: 22
213.47.220.0/22 maxlen: 22
2001:730::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:7b:97:b4:f3:e5:0a:5e:95:15:74:bf:7d:da:81:1d:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f25e6a6893f466d2695e90670c047443643701
Validity
Not Before: Sep 24 11:59:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce5b04e72f084a49a5f4bc26b618d013826dcdd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:05:0c:14:bb:e0:a3:09:25:20:17:d8:3e:66:
25:f3:71:07:53:de:90:34:9d:85:35:31:ac:38:ba:
5d:7a:44:67:83:65:ce:94:69:67:71:2a:42:99:2f:
37:b8:c0:be:70:1f:91:8f:55:3c:64:f4:d0:d3:77:
4f:d7:98:83:a5:9a:b2:58:2b:8a:12:96:97:d2:04:
6d:08:91:50:90:6c:d3:4e:ab:cb:b4:4c:94:c6:13:
4c:32:d8:3b:5e:ac:d5:c3:12:2e:ad:65:96:82:da:
3b:8a:6a:67:5b:53:18:0b:10:2c:25:38:ef:9a:09:
6b:fe:5d:f9:8a:a1:8c:e4:0d:2c:59:c6:4e:26:5c:
03:97:06:d4:29:72:e2:66:a8:9a:f8:aa:20:33:68:
08:19:79:dc:bc:ed:3d:51:81:c2:97:d8:7a:84:8b:
de:4d:6e:24:25:3c:be:bf:25:41:6f:06:14:1a:36:
6e:8f:32:57:fd:db:85:44:03:84:b6:a5:1e:0b:37:
78:6e:ff:14:1d:aa:56:76:a3:70:33:f7:c4:97:53:
62:5c:01:44:17:35:34:cd:04:c5:11:23:68:98:5d:
b8:00:de:ec:96:b5:ab:c6:b4:ed:16:de:c1:03:cf:
65:9a:ad:98:de:c1:1f:b5:0d:00:1b:86:cd:03:17:
b9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:5B:04:E7:2F:08:4A:49:A5:F4:BC:26:B6:18:D0:13:82:6D:CD:D2
X509v3 Authority Key Identifier:
keyid:90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/zlsE5y8ISkml9LwmthjQE4JtzdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.179.0.0/17
78.103.0.0/16
80.111.0.0/16
84.116.0.0/16
94.169.0.0-94.171.255.255
195.34.130.0/24
195.34.132.0/22
213.47.220.0/22
IPv6:
2001:730::/29
Signature Algorithm: sha256WithRSAEncryption
18:93:f4:82:d9:e6:cb:5a:a3:8b:f5:0d:aa:9a:f6:02:c1:d7:
9b:8b:f7:64:98:c3:d0:51:cf:f6:42:8f:ef:b3:5f:54:74:be:
ac:53:0d:88:31:98:88:93:c2:a2:d2:8a:eb:38:2d:ea:45:1a:
b3:46:22:64:ee:5d:2b:4a:50:e4:45:e6:d6:a3:cf:8e:4f:02:
a8:85:39:11:ce:56:7e:3d:af:1f:17:26:c3:25:06:80:70:9a:
69:43:c2:2c:cc:3b:0d:ca:ad:aa:b2:3d:11:e7:aa:b8:3a:e9:
3e:5a:e4:63:7e:61:1f:9f:b7:cf:38:7b:6c:13:b0:f2:65:3d:
eb:e8:06:69:58:ca:08:59:45:73:4f:4a:6e:b8:cf:16:60:d2:
9c:83:5d:61:7d:e3:85:b8:05:4b:c8:2e:7e:ab:82:44:74:87:
6e:e5:78:c8:92:a3:db:6a:8c:0f:b1:41:87:a7:4d:ac:62:96:
4d:1a:95:e4:c6:74:bf:ba:11:49:7f:ec:27:ac:1d:11:52:de:
be:9c:3d:d2:c6:46:53:62:28:d6:1a:57:9c:32:e4:bc:63:e5:
a5:55:6b:fd:21:b3:02:ca:6e:2e:52:f7:e4:0d:d1:42:32:dd:
a1:f2:58:7b:6b:8d:9e:36:f6:e2:75:4a:f8:02:92:21:7f:ad:
3e:d9:f4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:57:43 2025 by rpki-client