Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/ZlysawxM1e6NofcVQHD9jSRfzmo.roa
File: ZlysawxM1e6NofcVQHD9jSRfzmo.roa (raw, json)
Hash identifier: 2/MgDGIM49q026UnmASkkXoJYYD1r2cYQAo13OQnUSQ=
Subject key identifier: 66:5C:AC:6B:0C:4C:D5:EE:8D:A1:F7:15:40:70:FD:8D:24:5F:CE:6A
Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Certificate serial: 0198C7AA4FC2F39EFCB682597B55ADCE7B67
Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/ZlysawxM1e6NofcVQHD9jSRfzmo.roa
Signing time: Wed 20 Aug 2025 13:28:04 +0000
ROA not before: Wed 20 Aug 2025 13:28:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211970
IP address blocks: 185.234.245.0/24 maxlen: 24
188.72.0.0/24 maxlen: 24
188.72.2.0/24 maxlen: 24
188.72.3.0/24 maxlen: 24
188.72.51.0/24 maxlen: 24
188.72.52.0/24 maxlen: 24
188.72.56.0/24 maxlen: 24
188.72.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c7:aa:4f:c2:f3:9e:fc:b6:82:59:7b:55:ad:ce:7b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Validity
Not Before: Aug 20 13:28:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=665cac6b0c4cd5ee8da1f7154070fd8d245fce6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:15:69:8a:54:64:50:34:5a:78:b9:c7:a4:91:
e3:02:fd:28:cf:9a:0f:78:fc:7a:7c:f5:de:11:73:
16:dc:51:94:3e:e0:4b:23:22:92:c9:a1:15:ec:a5:
49:e2:5e:35:16:b5:a8:ad:d1:d1:cb:ff:54:d9:de:
7d:da:bb:4c:b8:db:56:1b:ab:c6:da:82:75:c7:8a:
45:60:e2:f4:81:4d:6c:6f:2c:4b:80:6e:12:c5:05:
d4:63:08:78:ab:c6:be:de:f2:52:ef:5f:0a:51:9a:
a6:0d:5a:e5:bd:7a:90:cc:1e:6e:2d:47:c1:c5:20:
ab:f2:11:d5:19:2b:18:e4:42:c9:6f:a3:c2:9a:9c:
6d:54:c5:31:e0:56:f7:50:21:5e:7f:75:1c:43:e1:
57:25:54:50:28:49:28:3f:ee:1b:dc:ce:8f:90:27:
02:db:90:a6:f2:b5:d1:17:8e:46:e0:1a:df:c8:cd:
4c:6c:32:7c:40:33:81:2e:cd:a7:f7:12:21:0a:47:
b1:b0:53:34:b5:06:da:7d:52:bc:f0:2d:42:8c:27:
fd:9a:4a:a3:b8:e5:47:63:61:7b:ed:2c:88:d7:ce:
b0:a0:0b:cf:1b:81:42:d6:f4:53:76:b9:00:c3:cb:
15:09:0b:56:60:73:fc:85:b4:e6:e6:16:c9:aa:c9:
f0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:5C:AC:6B:0C:4C:D5:EE:8D:A1:F7:15:40:70:FD:8D:24:5F:CE:6A
X509v3 Authority Key Identifier:
keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/ZlysawxM1e6NofcVQHD9jSRfzmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.245.0/24
188.72.0.0/24
188.72.2.0/23
188.72.51.0-188.72.52.255
188.72.56.0/23
Signature Algorithm: sha256WithRSAEncryption
67:59:39:aa:e8:29:87:df:c8:bb:77:42:d0:a4:16:57:3d:61:
3f:a0:64:62:b1:d5:6b:65:17:e4:c3:d7:e5:cd:45:c5:0e:0a:
f6:af:a2:b8:db:0e:16:b7:12:84:77:81:9e:28:e9:7e:7e:a4:
3e:95:a7:db:83:0b:16:c9:34:31:99:15:c5:bc:86:38:27:2d:
e9:97:0f:d0:6b:65:47:82:53:f3:c7:d2:01:d0:a2:ce:f8:95:
e2:0b:5e:b5:f5:b0:f6:f3:2a:db:e8:e5:06:5a:fb:13:30:87:
7f:74:8c:8c:71:5c:d4:9a:80:f2:9b:00:d6:4e:e6:02:a1:47:
e5:75:dc:12:aa:08:ff:18:d5:f3:78:ef:a5:7f:ec:66:fa:a8:
02:f1:e7:83:a8:8d:2f:ed:f9:65:1a:26:80:19:33:80:ed:2f:
67:da:96:d6:65:ea:fe:1d:12:43:82:84:41:5a:76:63:f9:06:
1d:cd:7d:60:56:40:c9:76:b4:be:5f:22:df:80:5b:ae:c4:9a:
27:2e:42:b8:a9:2e:56:23:70:52:80:f3:19:52:a0:88:73:de:
b5:13:de:42:53:78:51:09:06:58:83:0a:c5:2d:44:59:3e:6d:
ee:72:24:e2:b7:8b:10:89:86:4b:46:ef:21:2b:ee:e0:30:6a:
6c:8c:08:b3
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZjHqk/C8578toJZe1WtzntnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNTE0MDI4MjU5MWY5OTEyZjk2MzllZTE0MTJiNmQxZGNm
ZjA4NjEwHhcNMjUwODIwMTMyODA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjVjYWM2YjBjNGNkNWVlOGRhMWY3MTU0MDcwZmQ4ZDI0NWZjZTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhVpilRkUDRaeLnHpJHjAv0oz5oP
ePx6fPXeEXMW3FGUPuBLIyKSyaEV7KVJ4l41FrWordHRy/9U2d592rtMuNtWG6vG
2oJ1x4pFYOL0gU1sbyxLgG4SxQXUYwh4q8a+3vJS718KUZqmDVrlvXqQzB5uLUfB
xSCr8hHVGSsY5ELJb6PCmpxtVMUx4Fb3UCFef3UcQ+FXJVRQKEkoP+4b3M6PkCcC
25Cm8rXRF45G4BrfyM1MbDJ8QDOBLs2n9xIhCkexsFM0tQbafVK88C1CjCf9mkqj
uOVHY2F77SyI186woAvPG4FC1vRTdrkAw8sVCQtWYHP8hbTm5hbJqsnwZwIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFGZcrGsMTNXujaH3FUBw/Y0kX85qMB8GA1UdIwQY
MBaAFAxRQCglkfmRL5Y57hQSttHc/whhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUt
ZGU5MTQ2OWQzNzcyLzEvWmx5c2F3eE0xZTZOb2ZjVlFIRDlqU1Jmem1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUtZGU5MTQ2OWQzNzcy
LzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQAuer1AwQA
vEgAAwQBvEgCMAwDBAC8SDMDBAC8SDQDBAG8SDgwDQYJKoZIhvcNAQELBQADggEB
AGdZOaroKYffyLt3QtCkFlc9YT+gZGKx1WtlF+TD1+XNRcUOCvavorjbDha3EoR3
gZ4o6X5+pD6Vp9uDCxbJNDGZFcW8hjgnLemXD9BrZUeCU/PH0gHQos74leILXrX1
sPbzKtvo5QZa+xMwh390jIxxXNSagPKbANZO5gKhR+V13BKqCP8Y1fN476V/7Gb6
qALx54OojS/t+WUaJoAZM4DtL2faltZl6v4dEkOChEFadmP5Bh3NfWBWQMl2tL5f
It+AW67EmicuQripLlYjcFKA8xlSoIhz3rUT3kJTeFEJBliDCsUtRFk+be5yJOK3
ixCJhktG7yEr7uAwamyMCLM=
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:58:46 2025 by rpki-client