Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/ZKbkSQj9ABDJZJMWl4IxrOWcPxA.roa
File: ZKbkSQj9ABDJZJMWl4IxrOWcPxA.roa (raw, json)
Hash identifier: 9EYoRPbXeI5KZEyuKHPU2hG7mXm4GwRA7A0jztMuEv0=
Subject key identifier: 64:A6:E4:49:08:FD:00:10:C9:64:93:16:97:82:31:AC:E5:9C:3F:10
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 0197EF259AFD2E5CD9FA8E83A2D0894C6FCE
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/ZKbkSQj9ABDJZJMWl4IxrOWcPxA.roa
Signing time: Wed 09 Jul 2025 12:25:08 +0000
ROA not before: Wed 09 Jul 2025 12:25:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 37.49.145.0/24 maxlen: 24
37.49.151.0/24 maxlen: 24
94.74.147.0/24 maxlen: 24
94.74.157.0/24 maxlen: 24
94.74.168.0/24 maxlen: 24
109.203.160.0/24 maxlen: 24
109.203.176.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 02:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ef:25:9a:fd:2e:5c:d9:fa:8e:83:a2:d0:89:4c:6f:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Jul 9 12:25:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64a6e44908fd0010c9649316978231ace59c3f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ff:e2:32:42:89:43:93:b5:a7:65:60:83:0c:
6d:6d:8d:1c:49:f7:f2:28:61:9e:74:07:65:32:03:
b7:f4:34:48:aa:b6:f4:2b:79:07:72:4a:a1:cf:a3:
6f:74:2f:d2:bc:12:a8:63:9d:29:59:73:b3:95:14:
38:e6:c9:35:e6:d1:66:ab:11:cf:fa:62:07:bb:b3:
88:fb:4e:52:67:b8:61:23:3b:d1:af:21:c5:c2:fc:
fc:94:9c:86:15:42:ec:fb:65:8c:72:ce:c2:15:20:
26:e1:c9:3f:0a:0f:f8:fb:96:dc:61:bf:af:64:21:
ad:14:53:fe:30:4b:1d:7f:b1:3a:e7:d9:d4:25:9e:
41:be:7b:af:5b:d0:58:e2:c9:1a:7f:33:00:53:a2:
6e:fc:8a:81:b5:0e:4b:d7:f5:fb:86:82:18:3c:57:
f3:8f:60:6b:9f:0e:e8:ac:be:40:82:5a:e1:cf:a7:
6c:25:a5:13:95:5e:2d:f9:47:a6:16:40:21:0b:de:
b6:a8:3a:ad:56:33:42:42:3a:0d:0f:71:26:c2:ab:
26:aa:1e:56:b2:18:b2:92:68:4f:b0:93:d2:13:84:
8d:cd:d8:62:98:67:e1:39:a1:29:b4:91:b2:8c:bc:
9a:38:e1:fb:0b:f2:66:52:5a:8f:bb:83:e7:6c:0c:
7b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A6:E4:49:08:FD:00:10:C9:64:93:16:97:82:31:AC:E5:9C:3F:10
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/ZKbkSQj9ABDJZJMWl4IxrOWcPxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.145.0/24
37.49.151.0/24
94.74.147.0/24
94.74.157.0/24
94.74.168.0/24
109.203.160.0/24
109.203.176.0/21
Signature Algorithm: sha256WithRSAEncryption
5e:93:79:13:5e:ea:14:d6:9e:30:1f:b9:e2:87:86:20:8e:3f:
98:11:5f:38:f2:50:8e:0e:6c:4e:ed:c3:57:de:b5:fe:3e:e8:
f8:cc:4c:ca:1e:07:fa:62:35:19:6b:2a:fb:03:c0:b2:71:15:
dd:12:40:37:c3:99:5a:e7:87:23:0d:36:d1:c7:45:19:d9:c7:
4f:14:b4:84:cc:af:11:b9:a2:97:f0:a5:8d:44:28:15:56:28:
7b:dd:2c:4c:69:d0:5c:f9:0c:cb:43:85:fb:c9:10:5c:bc:0b:
88:57:b0:89:74:13:82:e7:f5:30:b6:5b:d0:d0:75:ef:66:d1:
6e:e7:c2:e3:52:5c:5b:90:97:99:17:b6:57:25:14:25:f7:e0:
be:53:b6:a9:0a:23:3a:e6:76:0d:9f:c8:36:2e:e6:4a:b5:6a:
33:da:fe:4d:5f:21:cd:1d:c7:38:b5:e2:ad:97:83:80:8e:43:
d9:ae:f2:a7:7d:b2:08:2b:56:24:48:df:bb:24:2c:c3:d6:a6:
e7:4b:3b:2c:58:e7:43:5d:91:17:b7:bd:98:61:60:73:ae:19:
08:02:fa:56:b0:cd:08:ee:c9:e9:be:15:07:13:5f:d7:19:eb:
ce:b8:63:0a:bf:b6:4f:a5:d0:24:71:35:71:79:9a:e9:59:c2:
48:ae:25:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 11:25:22 2025 by rpki-client