Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/Z7WMX0zmtWSwL1nl_bRrocAt96g.roa
File: Z7WMX0zmtWSwL1nl_bRrocAt96g.roa (raw, json)
Hash identifier: vascd8IZpBAaNc+5SLZNF4hkGl3zooaWaRamiX+4Grw=
Subject key identifier: 67:B5:8C:5F:4C:E6:B5:64:B0:2F:59:E5:FD:B4:6B:A1:C0:2D:F7:A8
Certificate issuer: /CN=a65fbcb4ea308a98b09397625e63866383c16dd0
Certificate serial: 0199962E550884EE3AB66D99A4CA55AE2EEF
Authority key identifier: A6:5F:BC:B4:EA:30:8A:98:B0:93:97:62:5E:63:86:63:83:C1:6D:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pl-8tOowipiwk5diXmOGY4PBbdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/Z7WMX0zmtWSwL1nl_bRrocAt96g.roa
Signing time: Mon 29 Sep 2025 15:54:02 +0000
ROA not before: Mon 29 Sep 2025 15:54:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 32708
IP address blocks: 45.65.44.0/22 maxlen: 22
45.65.44.0/23 maxlen: 23
45.65.44.0/24 maxlen: 24
45.65.45.0/24 maxlen: 24
45.65.46.0/23 maxlen: 23
45.65.46.0/24 maxlen: 24
45.65.47.0/24 maxlen: 24
85.92.100.0/22 maxlen: 22
85.92.100.0/24 maxlen: 24
85.92.101.0/24 maxlen: 24
85.92.102.0/24 maxlen: 24
85.92.103.0/24 maxlen: 24
103.91.56.0/22 maxlen: 22
103.91.56.0/24 maxlen: 24
103.91.57.0/24 maxlen: 24
103.91.58.0/24 maxlen: 24
103.91.59.0/24 maxlen: 24
103.108.188.0/23 maxlen: 23
103.108.188.0/24 maxlen: 24
103.108.189.0/24 maxlen: 24
103.115.204.0/23 maxlen: 23
103.115.204.0/24 maxlen: 24
103.115.205.0/24 maxlen: 24
103.143.86.0/23 maxlen: 23
103.143.86.0/24 maxlen: 24
103.143.87.0/24 maxlen: 24
103.211.0.0/22 maxlen: 22
103.211.0.0/24 maxlen: 24
103.211.1.0/24 maxlen: 24
103.211.2.0/24 maxlen: 24
103.211.3.0/24 maxlen: 24
123.253.104.0/22 maxlen: 22
123.253.104.0/24 maxlen: 24
123.253.105.0/24 maxlen: 24
123.253.106.0/24 maxlen: 24
123.253.107.0/24 maxlen: 24
185.211.78.0/24 maxlen: 24
2a0d:b8c0::/48 maxlen: 48
2a0d:b8c0:1::/48 maxlen: 48
2a11:b000:1::/48 maxlen: 48
2a11:b000:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pl-8tOowipiwk5diXmOGY4PBbdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 05:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:96:2e:55:08:84:ee:3a:b6:6d:99:a4:ca:55:ae:2e:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a65fbcb4ea308a98b09397625e63866383c16dd0
Validity
Not Before: Sep 29 15:54:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67b58c5f4ce6b564b02f59e5fdb46ba1c02df7a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:89:72:26:90:07:44:ac:a6:dd:87:b2:ee:2f:
db:cc:74:d7:0f:41:c7:c2:39:22:f7:eb:22:42:52:
b3:5a:03:ef:34:b5:d5:f2:1a:73:e7:e7:07:ed:60:
82:73:5b:a9:bc:71:ff:bb:ac:5c:36:3e:90:03:44:
25:40:58:b6:f3:93:48:1f:75:27:af:6f:b6:19:33:
90:86:dd:d7:eb:f0:93:4e:a0:47:06:5d:3b:99:28:
86:4e:18:72:6b:86:e4:e0:0f:08:69:8a:49:2b:2b:
1a:9f:1f:a6:f1:db:d8:04:bf:2b:f1:3f:71:87:13:
e7:b7:35:5c:39:d7:cb:34:e1:e9:fe:23:8e:96:a5:
e8:0e:97:de:a7:04:f5:54:4a:50:c8:bf:a2:a7:9f:
ba:39:7b:31:d7:71:09:22:ca:21:0f:f1:4d:2b:ba:
7c:d2:6d:34:4a:6f:ee:dd:4d:67:5b:85:60:90:67:
72:f1:ae:db:42:98:08:4d:d4:24:ae:56:fd:56:2a:
f7:26:58:6f:96:78:f3:38:2a:f4:7c:6c:47:6f:cf:
a1:12:ba:b3:9a:03:80:f0:dc:f9:88:32:70:e0:52:
f9:66:dd:f8:a1:5f:32:dd:26:dc:56:b4:1d:40:dc:
96:25:90:17:24:cd:06:9f:31:f0:64:61:f6:ca:cd:
1b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B5:8C:5F:4C:E6:B5:64:B0:2F:59:E5:FD:B4:6B:A1:C0:2D:F7:A8
X509v3 Authority Key Identifier:
keyid:A6:5F:BC:B4:EA:30:8A:98:B0:93:97:62:5E:63:86:63:83:C1:6D:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pl-8tOowipiwk5diXmOGY4PBbdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/Z7WMX0zmtWSwL1nl_bRrocAt96g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.44.0/22
85.92.100.0/22
103.91.56.0/22
103.108.188.0/23
103.115.204.0/23
103.143.86.0/23
103.211.0.0/22
123.253.104.0/22
185.211.78.0/24
IPv6:
2a0d:b8c0::/47
2a11:b000:1::-2a11:b000:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
8e:30:e7:a6:c8:38:69:67:3d:53:ef:a1:14:ad:a4:d8:03:c0:
83:91:2e:36:fb:c5:ce:ee:b1:ad:bb:d3:26:35:ff:45:5d:fb:
d7:56:58:d7:00:07:f9:31:bf:2b:5b:63:dd:04:67:cd:2b:0d:
9c:c7:4f:38:63:3a:2e:0d:14:9e:cc:63:6a:77:f2:03:62:d7:
dd:65:e4:f3:50:0a:9f:44:d1:22:d0:68:68:42:d9:55:00:d5:
12:ce:2d:73:da:b5:65:a9:7a:6d:72:e0:ee:34:11:f7:c2:46:
30:39:ca:15:46:e7:13:ce:c4:97:bc:de:4b:84:df:4e:92:26:
fb:05:b1:9f:ed:11:de:4d:0e:af:4e:a2:e5:31:af:b6:c9:6d:
47:dd:7e:c8:e4:cf:db:dd:61:d0:c7:8d:36:65:e3:ce:7f:79:
35:d7:b6:79:ed:26:22:cb:9d:93:c4:31:9e:64:7c:a1:13:4a:
0c:41:3e:a8:bd:ab:e4:c5:fe:85:e5:3e:d8:a8:41:5c:69:ad:
75:5a:02:93:1d:21:e9:d4:95:b2:db:54:81:c6:8a:43:19:e5:
66:d9:1b:1b:fc:87:84:e0:aa:2d:49:12:43:79:b5:11:c3:a2:
0a:78:66:93:5e:9a:b6:28:30:d3:d3:96:6f:d4:aa:28:ac:fb:
a8:89:05:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:20:32 2025 by rpki-client