Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ZrX8NZOF_lteMSM3oZka22ZVn3E.roa
File: ZrX8NZOF_lteMSM3oZka22ZVn3E.roa (raw, json)
Hash identifier: cAb9eZ4FePRwUO0ACpP0sUggRm8S5e53qPUlHsPvg2Q=
Subject key identifier: 66:B5:FC:35:93:85:FE:5B:5E:31:23:37:A1:99:1A:DB:66:55:9F:71
Certificate issuer: /CN=79b5134b11f940911f0ff315c948daa53f732ee0
Certificate serial: 019963A2967CF42664A4977BCC73127B8CA9
Authority key identifier: 79:B5:13:4B:11:F9:40:91:1F:0F:F3:15:C9:48:DA:A5:3F:73:2E:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ZrX8NZOF_lteMSM3oZka22ZVn3E.roa
Signing time: Fri 19 Sep 2025 20:20:23 +0000
ROA not before: Fri 19 Sep 2025 20:20:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52033
IP address blocks: 46.254.48.0/24 maxlen: 24
46.254.49.0/24 maxlen: 24
46.254.50.0/24 maxlen: 24
46.254.51.0/24 maxlen: 24
46.254.52.0/24 maxlen: 24
46.254.53.0/24 maxlen: 24
46.254.54.0/24 maxlen: 24
46.254.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:63:a2:96:7c:f4:26:64:a4:97:7b:cc:73:12:7b:8c:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79b5134b11f940911f0ff315c948daa53f732ee0
Validity
Not Before: Sep 19 20:20:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66b5fc359385fe5b5e312337a1991adb66559f71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6a:35:64:c8:aa:4b:90:64:bd:d9:50:d4:68:
52:b4:b4:a7:cb:53:ec:7e:3a:74:db:5e:24:fa:be:
34:82:a9:b1:df:0f:c0:86:8d:c2:47:67:b7:ca:7e:
a3:53:9f:e4:ca:a4:59:65:3d:92:2c:b4:3c:e5:a1:
76:0e:18:b3:a0:d5:ad:8f:21:af:a0:20:da:6e:8a:
b1:75:ff:44:0b:40:d6:c6:e2:5a:62:0a:82:2e:58:
fd:b6:3d:65:66:f9:ad:27:96:7f:b1:33:28:6b:9e:
7c:57:c7:43:08:16:19:2d:c4:d7:4d:23:12:f7:e4:
34:a6:5d:da:f5:6d:39:2b:7c:6f:15:bb:62:6d:9d:
5b:2a:d4:e4:61:94:94:aa:74:34:70:c0:e2:a5:f1:
0e:e5:d7:d0:04:4a:eb:c7:18:46:20:0b:45:e0:fc:
00:c4:d5:d5:26:b6:15:1d:1c:1d:17:ba:df:40:0c:
15:f8:ff:e3:4e:83:18:ff:be:1e:70:9b:70:c8:a4:
1b:72:f6:6c:06:34:80:52:fa:e5:0f:39:fc:43:d3:
e3:e4:70:ee:90:51:10:60:1f:e2:55:5b:95:21:33:
c5:b9:de:53:66:2a:f2:94:b3:93:80:91:24:49:1f:
b7:f4:04:8d:5a:07:d9:2b:96:cd:42:f7:78:57:b8:
53:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B5:FC:35:93:85:FE:5B:5E:31:23:37:A1:99:1A:DB:66:55:9F:71
X509v3 Authority Key Identifier:
keyid:79:B5:13:4B:11:F9:40:91:1F:0F:F3:15:C9:48:DA:A5:3F:73:2E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ZrX8NZOF_lteMSM3oZka22ZVn3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.48.0/21
Signature Algorithm: sha256WithRSAEncryption
5d:e6:6a:9d:44:7c:9e:5d:ef:6e:c5:23:5f:b2:95:d0:27:0c:
20:8f:db:eb:76:70:c8:ad:5a:24:cc:68:67:41:0b:85:49:1c:
6c:d2:37:f0:d1:42:61:d7:b4:da:96:50:41:07:59:49:c5:f8:
f0:10:92:44:af:4a:26:29:78:03:ef:6f:65:35:05:18:e2:eb:
2a:c6:91:7d:d4:56:fe:5c:c0:c9:2f:ce:19:1a:2b:42:fd:ea:
19:af:cc:da:4f:1b:0c:17:f0:c7:2f:02:11:53:21:70:a6:20:
da:80:8f:6f:eb:77:83:d7:e4:b7:15:64:15:99:fb:fb:10:81:
08:5d:96:a7:12:9a:ec:4e:bf:dd:fd:d5:3d:8c:c0:8a:f3:8e:
f0:66:9e:83:ed:9a:40:4a:ab:d8:13:64:2d:ec:85:a6:86:8e:
df:06:44:ea:f1:5a:25:20:6f:d9:44:7e:c3:56:1d:ef:43:4a:
8e:07:23:96:c9:9b:ba:bb:77:56:a6:a0:db:d7:a6:97:34:9c:
94:33:65:0e:67:b6:66:9c:c5:e3:53:f0:16:5b:bb:1b:7a:af:
c9:ce:40:0b:96:d7:5b:93:dc:1c:b9:d3:c5:ed:b1:3c:57:49:
4c:32:12:53:63:21:24:4e:f9:8c:af:7a:8d:36:e4:96:fc:c9:
08:79:17:7c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZljopZ89CZkpJd7zHMSe4ypMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YjUxMzRiMTFmOTQwOTExZjBmZjMxNWM5NDhkYWE1M2Y3
MzJlZTAwHhcNMjUwOTE5MjAyMDIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NmI1ZmMzNTkzODVmZTViNWUzMTIzMzdhMTk5MWFkYjY2NTU5ZjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumo1ZMiqS5BkvdlQ1GhStLSny1Ps
fjp0214k+r40gqmx3w/Aho3CR2e3yn6jU5/kyqRZZT2SLLQ85aF2DhizoNWtjyGv
oCDaboqxdf9EC0DWxuJaYgqCLlj9tj1lZvmtJ5Z/sTMoa558V8dDCBYZLcTXTSMS
9+Q0pl3a9W05K3xvFbtibZ1bKtTkYZSUqnQ0cMDipfEO5dfQBErrxxhGIAtF4PwA
xNXVJrYVHRwdF7rfQAwV+P/jToMY/74ecJtwyKQbcvZsBjSAUvrlDzn8Q9Pj5HDu
kFEQYB/iVVuVITPFud5TZirylLOTgJEkSR+39ASNWgfZK5bNQvd4V7hTAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGa1/DWThf5bXjEjN6GZGttmVZ9xMB8GA1UdIwQY
MBaAFHm1E0sR+UCRHw/zFclI2qU/cy7gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWJVVFN4SDVRSkVmRF9NVnlVamFwVDl6THVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS81ZTA5OTQtOTRkMi00NmUxLTgwNjYt
Y2VjMjJlYTc5NTEzLzEvWnJYOE5aT0ZfbHRlTVNNM29aa2EyMlpWbjNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS81ZTA5OTQtOTRkMi00NmUxLTgwNjYtY2VjMjJlYTc5NTEz
LzEvZWJVVFN4SDVRSkVmRF9NVnlVamFwVDl6THVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLv4wMA0G
CSqGSIb3DQEBCwUAA4IBAQBd5mqdRHyeXe9uxSNfspXQJwwgj9vrdnDIrVokzGhn
QQuFSRxs0jfw0UJh17TallBBB1lJxfjwEJJEr0omKXgD729lNQUY4usqxpF91Fb+
XMDJL84ZGitC/eoZr8zaTxsMF/DHLwIRUyFwpiDagI9v63eD1+S3FWQVmfv7EIEI
XZanEprsTr/d/dU9jMCK847wZp6D7ZpASqvYE2Qt7IWmho7fBkTq8VolIG/ZRH7D
Vh3vQ0qOByOWyZu6u3dWpqDb16aXNJyUM2UOZ7ZmnMXjU/AWW7sbeq/JzkALltdb
k9wcudPF7bE8V0lMMhJTYyEkTvmMr3qNNuSW/MkIeRd8
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:04:47 2025 by rpki-client