Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/ZYYGBnnwACb50HBK9iV39jcu8i4.roa
File: ZYYGBnnwACb50HBK9iV39jcu8i4.roa (raw, json)
Hash identifier: 1hieN4GzrKaEkKB45RwPn6/J65onPok0zIdb/ynQcuc=
Subject key identifier: 65:86:06:06:79:F0:00:26:F9:D0:70:4A:F6:25:77:F6:37:2E:F2:2E
Certificate issuer: /CN=785b490d766f4b1c211d7dadd6efa770f6eb9e25
Certificate serial: 0199A89DDF98FCF560FA351719F1BAA1C30B
Authority key identifier: 78:5B:49:0D:76:6F:4B:1C:21:1D:7D:AD:D6:EF:A7:70:F6:EB:9E:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eFtJDXZvSxwhHX2t1u-ncPbrniU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/ZYYGBnnwACb50HBK9iV39jcu8i4.roa
Signing time: Fri 03 Oct 2025 05:49:02 +0000
ROA not before: Fri 03 Oct 2025 05:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41275
IP address blocks: 5.35.112.0/22 maxlen: 22
5.35.112.0/23 maxlen: 23
5.35.113.0/24 maxlen: 24
5.35.114.0/23 maxlen: 23
62.217.184.0/21 maxlen: 21
84.22.132.0/22 maxlen: 22
85.198.104.0/23 maxlen: 23
89.169.48.0/22 maxlen: 22
89.169.48.0/23 maxlen: 23
89.169.50.0/23 maxlen: 23
89.207.216.0/21 maxlen: 21
89.207.216.0/22 maxlen: 22
89.207.216.0/24 maxlen: 24
89.207.217.0/24 maxlen: 24
89.207.220.0/22 maxlen: 22
89.207.221.0/24 maxlen: 24
93.157.244.0/22 maxlen: 22
95.130.128.0/22 maxlen: 22
95.131.144.0/21 maxlen: 21
95.131.144.0/22 maxlen: 22
95.131.144.0/24 maxlen: 24
95.131.148.0/22 maxlen: 22
185.43.198.0/23 maxlen: 23
185.136.76.0/22 maxlen: 22
185.136.76.0/23 maxlen: 23
185.136.78.0/23 maxlen: 23
185.155.17.0/24 maxlen: 24
185.155.18.0/23 maxlen: 23
217.150.200.0/23 maxlen: 23
217.150.200.0/24 maxlen: 24
217.150.201.0/24 maxlen: 24
2a02:5fe0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/eFtJDXZvSxwhHX2t1u-ncPbrniU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/eFtJDXZvSxwhHX2t1u-ncPbrniU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eFtJDXZvSxwhHX2t1u-ncPbrniU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a8:9d:df:98:fc:f5:60:fa:35:17:19:f1:ba:a1:c3:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=785b490d766f4b1c211d7dadd6efa770f6eb9e25
Validity
Not Before: Oct 3 05:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6586060679f00026f9d0704af62577f6372ef22e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c0:06:ad:f9:03:11:39:18:ea:61:9a:85:1e:
db:dd:f9:f7:1a:69:c7:aa:51:90:e0:11:7f:0e:ac:
b3:9e:e5:5a:09:d2:29:e2:70:0b:c2:63:0d:d3:3b:
23:51:ab:fe:ea:9c:cf:40:e4:2c:9a:c2:2d:11:ee:
97:be:25:71:95:d6:73:11:01:3e:d1:80:ef:88:b3:
4a:94:df:9a:e7:e1:5f:78:2c:35:be:7b:01:5e:d0:
76:9f:99:d2:aa:79:17:db:42:50:6d:70:97:d0:83:
e7:0c:5a:6d:30:55:d7:92:ec:18:70:bf:07:b7:82:
d1:aa:92:62:b7:f3:36:c0:d1:c7:24:e0:28:67:a7:
cf:da:91:10:ca:99:38:fd:ad:8c:6e:93:f1:7b:66:
f9:0d:fb:80:ae:f0:af:ab:63:de:4d:cf:46:01:76:
eb:45:c8:41:f1:41:cd:d8:ca:da:55:dd:4f:82:0d:
47:52:67:2e:91:a6:29:3c:56:a5:f5:f0:a9:73:67:
9d:60:8b:4d:3a:99:b5:82:57:44:64:ac:ce:55:2d:
5b:ea:4d:61:09:14:39:dd:c1:5f:b8:9f:db:5b:c3:
a6:51:c5:85:00:bb:7c:19:d5:48:aa:0a:0b:26:18:
f2:25:7f:fb:bf:cd:68:2d:9d:d9:6f:7c:cb:57:1a:
14:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:86:06:06:79:F0:00:26:F9:D0:70:4A:F6:25:77:F6:37:2E:F2:2E
X509v3 Authority Key Identifier:
keyid:78:5B:49:0D:76:6F:4B:1C:21:1D:7D:AD:D6:EF:A7:70:F6:EB:9E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eFtJDXZvSxwhHX2t1u-ncPbrniU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/ZYYGBnnwACb50HBK9iV39jcu8i4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/eFtJDXZvSxwhHX2t1u-ncPbrniU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.112.0/22
62.217.184.0/21
84.22.132.0/22
85.198.104.0/23
89.169.48.0/22
89.207.216.0/21
93.157.244.0/22
95.130.128.0/22
95.131.144.0/21
185.43.198.0/23
185.136.76.0/22
185.155.17.0-185.155.19.255
217.150.200.0/23
IPv6:
2a02:5fe0::/29
Signature Algorithm: sha256WithRSAEncryption
2d:9b:fd:d8:84:da:2f:e5:cd:dd:4b:5e:91:4f:e0:6c:5c:87:
19:4b:cc:87:ae:63:a7:97:6f:c5:e8:00:ca:b0:62:81:da:dd:
af:7c:0f:d9:78:91:5f:97:4e:3b:34:6d:07:74:d3:ee:04:de:
51:5a:35:67:e1:8c:cc:7c:e7:cc:b6:80:c7:3e:0c:5d:3b:13:
af:b6:ca:47:6d:3d:fd:c6:57:6c:3a:7b:c8:7a:1d:93:d9:b7:
f1:d2:b7:63:7f:ef:02:7a:f6:d0:aa:ea:34:8e:fa:52:58:83:
12:53:5a:c3:d4:af:c9:f4:cb:b1:25:62:69:b2:76:7a:52:48:
ad:e5:38:d4:50:13:99:ad:11:f1:ab:90:e0:e3:d3:7b:d7:4c:
2a:fc:4e:b7:db:d6:91:dc:53:f6:f7:b7:3f:ac:89:5e:10:61:
30:5f:ed:f6:6e:7d:f1:b7:27:c2:10:3e:73:21:ef:0e:4e:6d:
c0:82:7a:05:6a:45:19:86:e5:11:05:eb:1c:c8:e7:e3:80:66:
f6:c7:ad:95:b5:1d:c2:5f:a2:09:4d:8a:c1:bb:df:3b:87:ee:
13:d3:c2:71:c5:ac:9b:65:9b:dd:d2:76:e0:8d:d9:9f:1a:b2:
05:b9:11:e4:78:83:c3:25:ea:9e:f7:df:c7:a5:d7:fa:6d:e7:
bb:b6:5b:fe
-----BEGIN CERTIFICATE-----
MIIFXDCCBESgAwIBAgISAZmond+Y/PVg+jUXGfG6ocMLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4NWI0OTBkNzY2ZjRiMWMyMTFkN2RhZGQ2ZWZhNzcwZjZl
YjllMjUwHhcNMjUxMDAzMDU0OTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTg2MDYwNjc5ZjAwMDI2ZjlkMDcwNGFmNjI1NzdmNjM3MmVmMjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMAGrfkDETkY6mGahR7b3fn3GmnH
qlGQ4BF/DqyznuVaCdIp4nALwmMN0zsjUav+6pzPQOQsmsItEe6XviVxldZzEQE+
0YDviLNKlN+a5+FfeCw1vnsBXtB2n5nSqnkX20JQbXCX0IPnDFptMFXXkuwYcL8H
t4LRqpJit/M2wNHHJOAoZ6fP2pEQypk4/a2MbpPxe2b5DfuArvCvq2PeTc9GAXbr
RchB8UHN2MraVd1Pgg1HUmcukaYpPFal9fCpc2edYItNOpm1gldEZKzOVS1b6k1h
CRQ53cFfuJ/bW8OmUcWFALt8GdVIqgoLJhjyJX/7v81oLZ3Zb3zLVxoU0wIDAQAB
o4ICaDCCAmQwHQYDVR0OBBYEFGWGBgZ58AAm+dBwSvYld/Y3LvIuMB8GA1UdIwQY
MBaAFHhbSQ12b0scIR19rdbvp3D2654lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUZ0SkRYWnZTeHdoSFgydDF1LW5jUGJybmlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi81ZjM0M2QtOWI0Mi00NGI0LTkwNjct
N2NhZTA0MGU0OWU4LzEvWllZR0JubndBQ2I1MEhCSzlpVjM5amN1OGk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi81ZjM0M2QtOWI0Mi00NGI0LTkwNjctN2NhZTA0MGU0OWU4
LzEvZUZ0SkRYWnZTeHdoSFgydDF1LW5jUGJybmlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMH4GCCsGAQUFBwEHAQH/BG8wbTBcBAIAATBWAwQCBSNwAwQD
Ptm4AwQCVBaEAwQBVcZoAwQCWakwAwQDWc/YAwQCXZ30AwQCX4KAAwQDX4OQAwQB
uSvGAwQCuYhMMAwDBAC5mxEDBAK5mxADBAHZlsgwDQQCAAIwBwMFAyoCX+AwDQYJ
KoZIhvcNAQELBQADggEBAC2b/diE2i/lzd1LXpFP4GxchxlLzIeuY6eXb8XoAMqw
YoHa3a98D9l4kV+XTjs0bQd00+4E3lFaNWfhjMx858y2gMc+DF07E6+2ykdtPf3G
V2w6e8h6HZPZt/HSt2N/7wJ69tCq6jSO+lJYgxJTWsPUr8n0y7ElYmmydnpSSK3l
ONRQE5mtEfGrkODj03vXTCr8Trfb1pHcU/b3tz+siV4QYTBf7fZuffG3J8IQPnMh
7w5ObcCCegVqRRmG5REF6xzI5+OAZvbHrZW1HcJfoglNisG73zuH7hPTwnHFrJtl
m93SduCN2Z8asgW5EeR4g8Ml6p7338el1/pt57u2W/4=
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:41:36 2025 by rpki-client