Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/ZilTqGeKBQ2tryG8q3trVBCr-kw.roa
File: ZilTqGeKBQ2tryG8q3trVBCr-kw.roa (raw, json)
Hash identifier: PwgBz8bW1BvrcChPP0zRLTeusRgOrK5lGOMisutfo94=
Subject key identifier: 66:29:53:A8:67:8A:05:0D:AD:AF:21:BC:AB:7B:6B:54:10:AB:FA:4C
Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Certificate serial: 0199A93FEC51D20BB80FB06397D48B4FE0EC
Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/ZilTqGeKBQ2tryG8q3trVBCr-kw.roa
Signing time: Fri 03 Oct 2025 08:46:02 +0000
ROA not before: Fri 03 Oct 2025 08:46:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47223
IP address blocks: 91.106.24.0/23 maxlen: 23
91.106.26.0/23 maxlen: 23
91.106.30.0/23 maxlen: 23
94.240.0.0/24 maxlen: 24
94.240.1.0/24 maxlen: 24
94.240.2.0/24 maxlen: 24
94.240.3.0/24 maxlen: 24
94.240.4.0/24 maxlen: 24
94.240.7.0/24 maxlen: 24
94.240.23.0/24 maxlen: 24
94.240.32.0/21 maxlen: 21
94.240.34.0/24 maxlen: 24
94.240.40.0/24 maxlen: 24
94.240.42.0/24 maxlen: 24
94.240.44.0/22 maxlen: 22
94.240.46.0/24 maxlen: 24
94.240.48.0/22 maxlen: 22
94.240.48.0/24 maxlen: 24
94.240.50.0/24 maxlen: 24
94.240.51.0/24 maxlen: 24
94.240.62.0/23 maxlen: 23
94.240.63.0/24 maxlen: 24
185.139.16.0/22 maxlen: 22
194.152.46.0/23 maxlen: 23
2a01:6e80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a9:3f:ec:51:d2:0b:b8:0f:b0:63:97:d4:8b:4f:e0:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Validity
Not Before: Oct 3 08:46:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=662953a8678a050dadaf21bcab7b6b5410abfa4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f3:02:62:70:59:b1:77:71:13:31:4b:e3:e5:
fd:40:8c:c4:1f:6b:39:4c:09:f8:8d:73:c2:ef:d2:
71:f8:b5:ed:e5:d0:64:43:2b:26:53:7e:50:b8:1e:
54:15:d2:1d:b4:ab:18:de:4e:c9:0d:99:5b:d5:cf:
63:f6:35:ea:e1:db:a1:de:0d:b0:75:de:af:b8:e6:
6c:56:ee:7d:97:66:86:87:6b:29:29:12:60:83:e3:
c4:cc:21:15:db:10:b9:87:74:e3:fe:9c:17:f2:91:
d2:e9:76:41:d3:50:9d:01:bd:8f:6f:d4:5c:fb:23:
6d:b7:06:cb:68:fd:9a:94:5d:73:6c:ca:fc:8c:93:
da:00:07:56:b2:25:4a:26:b6:21:59:35:04:7f:9a:
78:b1:df:9e:42:79:0d:7b:81:ad:58:f7:61:d5:9b:
bc:f5:f6:b1:f3:85:47:4f:f9:bf:6f:e0:36:9d:da:
23:84:57:aa:93:c9:8f:33:c8:52:d6:7a:6a:4a:3b:
fa:26:e0:ff:5c:87:ef:da:73:e5:94:d5:a4:2a:12:
42:a8:29:74:ba:7a:98:3c:76:76:2d:56:bf:2f:bb:
84:32:67:59:de:be:cb:b9:c8:b9:42:ba:21:72:a9:
c4:4d:78:f3:90:d8:38:4f:bb:e0:d0:f7:70:cd:4e:
74:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:29:53:A8:67:8A:05:0D:AD:AF:21:BC:AB:7B:6B:54:10:AB:FA:4C
X509v3 Authority Key Identifier:
keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/ZilTqGeKBQ2tryG8q3trVBCr-kw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.106.24.0/22
91.106.30.0/23
94.240.0.0-94.240.4.255
94.240.7.0/24
94.240.23.0/24
94.240.32.0-94.240.40.255
94.240.42.0/24
94.240.44.0-94.240.51.255
94.240.62.0/23
185.139.16.0/22
194.152.46.0/23
IPv6:
2a01:6e80::/32
Signature Algorithm: sha256WithRSAEncryption
1d:75:f1:5f:e2:3e:5c:1f:67:ee:6f:74:39:9e:55:1a:ec:54:
8b:b6:6c:87:ea:b8:41:59:a9:b2:a8:71:53:4f:d3:b9:3e:28:
94:07:10:41:26:f4:84:85:7b:7c:03:b5:4d:7c:e8:17:b1:16:
54:c1:95:11:7f:3c:47:65:65:95:19:34:e9:26:91:c6:d9:bb:
52:0a:b0:10:5e:39:a5:24:ae:69:95:75:d2:e2:1d:00:9b:33:
ea:b8:5c:1d:fe:28:e3:13:a0:73:23:26:f0:a2:f0:92:85:a1:
80:cf:5a:b5:e7:37:7b:20:6a:a8:d8:b9:7a:93:b3:38:62:b2:
ab:00:c8:f8:e5:15:f1:48:60:fb:bc:06:ce:8b:6f:15:ea:4d:
c3:f1:21:a7:71:27:28:e7:33:ce:a5:de:7a:15:94:9a:53:73:
8d:30:01:e1:09:ae:cc:02:ac:f6:78:d6:01:03:6e:f9:3a:2d:
6b:c4:c3:41:e6:d5:8a:1c:8c:56:99:b9:37:c8:d5:c7:8a:be:
de:f3:b1:5c:70:4b:8a:b8:d3:60:a8:5f:65:e2:74:80:52:04:
59:aa:c8:c3:4e:00:25:cd:1b:e1:26:de:34:69:08:09:bd:49:
e5:f6:49:1b:6e:36:cb:d3:ed:3a:44:e4:bb:56:d1:ba:e6:26:
a4:63:9e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:43:01 2025 by rpki-client