Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/zxF5fdMEgwZjxjRCkFvtSM6cNiE.roa
File: zxF5fdMEgwZjxjRCkFvtSM6cNiE.roa (raw, json)
Hash identifier: /aNfoxAWWXZ24dSnA+fFMNRvHS3pHzntsjJo5PzS3sw=
Subject key identifier: CF:11:79:7D:D3:04:83:06:63:C6:34:42:90:5B:ED:48:CE:9C:36:21
Certificate issuer: /CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Certificate serial: 019812D25BD9720D66BCE5E9D800521B921B
Authority key identifier: A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/zxF5fdMEgwZjxjRCkFvtSM6cNiE.roa
Signing time: Wed 16 Jul 2025 10:40:32 +0000
ROA not before: Wed 16 Jul 2025 10:40:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200107
IP address blocks: 37.203.128.0/23 maxlen: 24
77.74.176.0/23 maxlen: 24
77.74.176.0/24 maxlen: 24
77.74.177.0/24 maxlen: 24
77.74.178.0/23 maxlen: 24
77.74.178.0/24 maxlen: 24
77.74.180.0/24 maxlen: 24
77.74.181.0/24 maxlen: 24
77.74.182.0/24 maxlen: 24
77.74.183.0/24 maxlen: 24
79.133.168.0/22 maxlen: 24
79.133.168.0/24 maxlen: 24
79.133.169.0/24 maxlen: 24
79.133.170.0/23 maxlen: 23
79.133.170.0/24 maxlen: 24
79.133.171.0/24 maxlen: 24
82.202.184.0/23 maxlen: 23
82.202.184.0/24 maxlen: 24
82.202.185.0/24 maxlen: 24
93.159.226.0/24 maxlen: 24
93.159.227.0/24 maxlen: 24
93.159.228.0/23 maxlen: 24
93.159.228.0/24 maxlen: 24
93.159.230.0/23 maxlen: 23
185.54.220.0/24 maxlen: 24
185.54.221.0/24 maxlen: 24
185.54.222.0/24 maxlen: 24
185.54.223.0/24 maxlen: 24
185.85.12.0/24 maxlen: 24
185.85.14.0/24 maxlen: 24
185.85.15.0/24 maxlen: 24
185.201.0.0/22 maxlen: 24
195.128.246.0/23 maxlen: 24
195.128.246.0/24 maxlen: 24
195.128.247.0/24 maxlen: 24
2a03:2480:68::/48 maxlen: 48
2a03:2480:69::/48 maxlen: 48
2a03:2480:70::/48 maxlen: 48
2a03:2480:80::/48 maxlen: 48
2a03:2480:8000::/48 maxlen: 48
2a03:2480:8010::/48 maxlen: 48
2a03:2480:8020::/48 maxlen: 48
2a03:2480:8021::/48 maxlen: 48
2a03:2480:8022::/48 maxlen: 48
2a03:2480:8023::/48 maxlen: 48
2a03:2480:8025::/48 maxlen: 48
2a03:2480:8026::/48 maxlen: 48
2a03:2480:8027::/48 maxlen: 48
2a03:2480:8028::/48 maxlen: 48
2a03:2480:8029::/48 maxlen: 48
2a03:2480:802a::/48 maxlen: 48
2a03:2480:802b::/48 maxlen: 48
2a03:2480:802d::/48 maxlen: 48
2a03:2480:802e::/48 maxlen: 48
2a03:2480:802f::/48 maxlen: 48
2a03:2480:8030::/48 maxlen: 48
2a03:2480:8031::/48 maxlen: 48
2a03:2480:8032::/48 maxlen: 48
2a03:2480:8033::/48 maxlen: 48
2a03:2480:8034::/47 maxlen: 48
2a03:2480:8034::/48 maxlen: 48
2a03:2480:8036::/47 maxlen: 48
2a03:2480:8037::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:12:d2:5b:d9:72:0d:66:bc:e5:e9:d8:00:52:1b:92:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Validity
Not Before: Jul 16 10:40:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf11797dd304830663c63442905bed48ce9c3621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:02:90:c7:2a:5f:fe:ad:89:38:ba:d5:e4:ae:
ce:2e:73:a3:a4:53:26:2f:59:74:65:c5:a7:b8:09:
85:74:58:9c:1a:c2:96:1f:3c:a5:bf:45:f5:b8:d6:
1f:25:7b:c7:b4:6f:40:03:18:f2:cc:8a:79:c2:c5:
f9:dd:f4:6c:2e:ec:93:f9:99:d6:41:13:aa:ab:e7:
87:41:05:10:00:36:73:4c:d8:cf:f2:67:be:d8:eb:
74:29:63:be:9a:84:33:39:9c:01:5c:ce:be:7c:95:
0f:d7:5d:b8:25:13:62:7c:78:8a:f6:9b:60:c4:4a:
79:56:84:a9:bc:fd:97:ea:f0:37:52:a9:c5:3d:63:
4b:50:99:3b:cc:ae:68:38:55:98:81:7c:fd:23:e3:
cd:16:2c:ad:bc:94:86:1e:e2:33:17:0c:1d:13:9e:
58:b0:c5:3c:e1:72:44:42:b7:cf:8f:29:f0:12:50:
e2:1e:92:2b:f7:10:a0:38:92:fd:ba:d9:cf:06:6a:
8f:ec:19:03:3f:27:d2:30:0f:fd:a6:b6:94:ea:1a:
cc:c8:75:af:98:12:f6:b7:6a:55:9f:2a:02:1a:7e:
99:48:ae:a4:d5:40:a6:32:03:e1:19:e1:0e:cb:1c:
55:55:f6:a5:a2:4a:6a:80:cf:54:f9:11:2c:eb:84:
0a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:11:79:7D:D3:04:83:06:63:C6:34:42:90:5B:ED:48:CE:9C:36:21
X509v3 Authority Key Identifier:
keyid:A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/zxF5fdMEgwZjxjRCkFvtSM6cNiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.203.128.0/23
77.74.176.0/21
79.133.168.0/22
82.202.184.0/23
93.159.226.0-93.159.231.255
185.54.220.0/22
185.85.12.0/24
185.85.14.0/23
185.201.0.0/22
195.128.246.0/23
IPv6:
2a03:2480:68::/47
2a03:2480:70::/48
2a03:2480:80::/48
2a03:2480:8000::/48
2a03:2480:8010::/48
2a03:2480:8020::/46
2a03:2480:8025::-2a03:2480:802b:ffff:ffff:ffff:ffff:ffff
2a03:2480:802d::-2a03:2480:8037:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
3f:72:f1:1c:8f:5c:24:89:ce:aa:97:c4:ef:b7:c8:ca:75:4b:
47:d7:6c:23:a4:65:78:00:bf:9c:46:2a:6b:a7:df:fe:df:00:
a6:b5:64:c4:64:04:46:7d:e9:d1:10:03:8f:63:61:5a:57:f6:
b4:b1:af:0a:2e:99:e1:6b:cb:32:2c:a7:3b:37:84:04:ec:9c:
85:d2:bc:47:16:11:ca:ba:b3:36:4a:af:da:de:7a:4b:e9:ef:
9e:61:79:67:73:9c:d0:85:c6:98:2c:45:6d:b2:c8:ba:88:59:
1b:23:67:89:8e:67:c9:78:96:a9:ba:8f:11:71:61:4b:16:e8:
e5:a3:5d:40:24:b0:03:2d:3b:bf:e9:26:04:f0:f4:6e:cf:45:
2a:09:f0:61:30:67:32:b0:e7:04:e5:79:b8:b6:9a:e8:47:42:
1a:4c:f1:68:e6:ae:38:0c:5c:8c:dd:56:d1:3f:ad:30:d3:4e:
df:53:0f:09:78:ce:b1:90:e4:d8:79:b5:5b:d1:80:87:2a:d5:
48:42:34:9e:58:2c:cd:44:97:19:25:31:47:89:7d:f9:7e:9c:
2f:b3:9c:93:d1:db:0c:3a:8d:27:bc:d2:87:5b:c0:48:93:37:
8a:1c:72:b5:94:d0:f6:59:55:ab:00:36:b9:db:cb:79:18:7d:
6c:5e:34:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:47:35 2025 by rpki-client