Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/ZVHsY6ZkuvPvVgJnwVYAlKRfxu4.roa
File: ZVHsY6ZkuvPvVgJnwVYAlKRfxu4.roa (raw, json)
Hash identifier: 5El1EqcO/tfZoHxTGK3Q7453jTBDE3FBJF97kpTWkjY=
Subject key identifier: 65:51:EC:63:A6:64:BA:F3:EF:56:02:67:C1:56:00:94:A4:5F:C6:EE
Certificate issuer: /CN=618cc46d71e7848978488961d7b51aba1541f3c4
Certificate serial: 0198952A759A38C2600AA97BC797BF734B1D
Authority key identifier: 61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/ZVHsY6ZkuvPvVgJnwVYAlKRfxu4.roa
Signing time: Sun 10 Aug 2025 18:07:24 +0000
ROA not before: Sun 10 Aug 2025 18:07:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 89.184.0.0/21 maxlen: 24
89.184.8.0/23 maxlen: 23
89.184.10.0/23 maxlen: 23
89.184.12.0/23 maxlen: 23
89.184.14.0/23 maxlen: 23
89.184.16.0/21 maxlen: 24
89.184.16.0/22 maxlen: 24
89.184.24.0/21 maxlen: 24
89.184.30.0/24 maxlen: 24
89.184.31.0/24 maxlen: 24
193.222.251.0/24 maxlen: 24
193.223.69.0/24 maxlen: 24
193.223.103.0/24 maxlen: 24
193.223.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:2a:75:9a:38:c2:60:0a:a9:7b:c7:97:bf:73:4b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618cc46d71e7848978488961d7b51aba1541f3c4
Validity
Not Before: Aug 10 18:07:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6551ec63a664baf3ef560267c1560094a45fc6ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7e:84:46:7b:c5:b9:c9:24:0c:82:55:f4:86:
0d:7e:a7:07:cc:f7:00:68:37:07:36:6c:c0:51:bf:
8e:b8:3d:dc:1b:c7:d9:a8:0b:ec:6f:0c:43:f1:f9:
72:34:84:98:16:0f:dc:ed:34:eb:d6:57:38:0d:ad:
1f:d6:3b:1d:f5:f8:6b:6a:33:41:2e:89:7f:cc:85:
fa:e6:7c:d3:2b:f6:79:8b:b4:9c:39:c4:94:b6:09:
50:94:89:51:ba:68:d4:51:4e:4f:5e:2f:19:46:3b:
e9:43:8b:2f:ae:ca:8e:c5:9d:6a:25:cb:03:2a:4e:
c7:37:ac:c0:6f:73:05:73:82:4d:5c:1c:a9:37:6b:
58:5b:69:70:97:4d:ce:3b:58:56:6c:cb:28:ec:8a:
35:48:f4:9b:4f:75:a9:c3:50:bb:24:d9:85:aa:c1:
51:69:f7:bd:ab:19:8f:d0:e6:12:4c:fb:09:26:f9:
8f:11:6c:19:3a:c7:15:4a:31:f9:b2:e9:35:fc:26:
85:6e:f1:b0:fc:8b:c3:6b:1c:03:4b:9f:c9:a1:7a:
e6:2f:85:8e:6a:b3:ec:5d:09:72:6d:76:7b:4a:ee:
30:15:de:5b:60:be:4c:69:1d:29:a8:21:38:3c:8f:
4c:9e:a5:f5:e6:5f:0b:ee:38:62:49:15:5c:ea:67:
2d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:51:EC:63:A6:64:BA:F3:EF:56:02:67:C1:56:00:94:A4:5F:C6:EE
X509v3 Authority Key Identifier:
keyid:61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/ZVHsY6ZkuvPvVgJnwVYAlKRfxu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.184.0.0/19
193.222.251.0/24
193.223.69.0/24
193.223.103.0/24
193.223.108.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:78:79:6a:12:fe:1b:f5:ca:75:0b:9e:56:06:64:8a:d2:b8:
dd:5b:fc:20:b3:8f:13:20:53:42:97:21:f6:27:12:22:a7:ac:
ec:e6:89:1e:e1:f4:4e:3b:b9:4f:d7:fb:96:3d:5c:69:81:95:
3c:1e:25:c0:73:43:26:12:9a:91:c9:cf:cd:d4:83:2f:c6:67:
71:ea:9b:f9:8a:74:a2:4e:a1:fb:8e:1f:34:69:13:8b:0c:42:
75:52:f8:81:46:87:2a:19:9b:0a:d2:5f:db:95:d4:4c:82:37:
14:0d:41:f8:49:bd:80:a8:09:83:f6:20:b7:d6:93:50:4b:46:
68:45:4a:42:02:4a:9f:5d:49:8b:9d:4d:89:ef:1d:de:9b:3f:
73:7b:b0:ed:fa:68:3d:1e:08:c6:80:de:e5:91:c9:fd:1b:c1:
c3:b7:b4:1c:82:ee:af:c3:ce:89:2a:05:28:91:cc:b7:5d:eb:
ca:1c:c2:94:1c:fe:b8:bf:f3:c6:b1:62:cb:6c:c8:d2:7f:7d:
17:7e:00:61:14:d0:74:bb:d3:fb:51:df:07:44:7a:93:52:18:
d1:3a:45:3a:39:9f:fc:60:90:cc:1e:a9:4a:1f:80:4c:d2:e4:
d2:69:67:7d:a8:d2:79:0f:16:e9:c5:06:1c:12:4f:2f:d5:e2:
d5:e9:de:51
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZiVKnWaOMJgCql7x5e/c0sdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxOGNjNDZkNzFlNzg0ODk3ODQ4ODk2MWQ3YjUxYWJhMTU0
MWYzYzQwHhcNMjUwODEwMTgwNzI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTUxZWM2M2E2NjRiYWYzZWY1NjAyNjdjMTU2MDA5NGE0NWZjNmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvX6ERnvFuckkDIJV9IYNfqcHzPcA
aDcHNmzAUb+OuD3cG8fZqAvsbwxD8flyNISYFg/c7TTr1lc4Da0f1jsd9fhrajNB
Lol/zIX65nzTK/Z5i7ScOcSUtglQlIlRumjUUU5PXi8ZRjvpQ4svrsqOxZ1qJcsD
Kk7HN6zAb3MFc4JNXBypN2tYW2lwl03OO1hWbMso7Io1SPSbT3Wpw1C7JNmFqsFR
afe9qxmP0OYSTPsJJvmPEWwZOscVSjH5suk1/CaFbvGw/IvDaxwDS5/JoXrmL4WO
arPsXQlybXZ7Su4wFd5bYL5MaR0pqCE4PI9MnqX15l8L7jhiSRVc6mctnQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFGVR7GOmZLrz71YCZ8FWAJSkX8buMB8GA1UdIwQY
MBaAFGGMxG1x54SJeEiJYde1GroVQfPEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVl6RWJYSG5oSWw0U0lsaDE3VWF1aFZCODhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8xMjc0MzAtZDRlOC00ZGEzLWJlYTIt
NGVmMTljY2M1N2QwLzEvWlZIc1k2Wmt1dlB2VmdKbndWWUFsS1JmeHU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8xMjc0MzAtZDRlOC00ZGEzLWJlYTItNGVmMTljY2M1N2Qw
LzEvWVl6RWJYSG5oSWw0U0lsaDE3VWF1aFZCODhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQFWbgAAwQA
wd77AwQAwd9FAwQAwd9nAwQAwd9sMA0GCSqGSIb3DQEBCwUAA4IBAQBLeHlqEv4b
9cp1C55WBmSK0rjdW/wgs48TIFNClyH2JxIip6zs5oke4fROO7lP1/uWPVxpgZU8
HiXAc0MmEpqRyc/N1IMvxmdx6pv5inSiTqH7jh80aROLDEJ1UviBRocqGZsK0l/b
ldRMgjcUDUH4Sb2AqAmD9iC31pNQS0ZoRUpCAkqfXUmLnU2J7x3emz9ze7Dt+mg9
HgjGgN7lkcn9G8HDt7Qcgu6vw86JKgUokcy3XevKHMKUHP64v/PGsWLLbMjSf30X
fgBhFNB0u9P7Ud8HRHqTUhjROkU6OZ/8YJDMHqlKH4BM0uTSaWd9qNJ5DxbpxQYc
Ek8v1eLV6d5R
-----END CERTIFICATE-----
Generated at Sat Aug 23 08:17:43 2025 by rpki-client