Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/Zc0fVpIzsz1W6a-QmZHBJJqJJnQ.roa
File: Zc0fVpIzsz1W6a-QmZHBJJqJJnQ.roa (raw, json)
Hash identifier: Q3pSXhF3hBwJGb/V5w/lVnpT0wURqnu+NuHtZ4Q12Jo=
Subject key identifier: 65:CD:1F:56:92:33:B3:3D:56:E9:AF:90:99:91:C1:24:9A:89:26:74
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 0197CE0C00978A825E7E09D80568BE69D3B7
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/Zc0fVpIzsz1W6a-QmZHBJJqJJnQ.roa
Signing time: Thu 03 Jul 2025 02:09:42 +0000
ROA not before: Thu 03 Jul 2025 02:09:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214785
IP address blocks: 45.134.144.0/24 maxlen: 24
45.155.224.0/24 maxlen: 24
103.211.100.0/24 maxlen: 24
103.211.102.0/24 maxlen: 24
185.245.1.0/24 maxlen: 24
185.245.2.0/24 maxlen: 24
193.107.216.0/24 maxlen: 24
194.120.144.0/24 maxlen: 24
194.120.164.0/24 maxlen: 24
194.145.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ce:0c:00:97:8a:82:5e:7e:09:d8:05:68:be:69:d3:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jul 3 02:09:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65cd1f569233b33d56e9af909991c1249a892674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b6:64:ce:6d:3f:13:8c:7a:2d:4b:84:7a:7e:
4c:02:02:ac:95:d3:92:04:ae:ed:cc:64:e8:46:90:
da:61:71:c1:6f:91:84:dd:0e:9e:7c:6c:a3:d7:2c:
6a:b6:70:71:f5:bc:f8:37:1d:72:c3:1e:6b:64:71:
0c:fb:e0:34:7f:71:e1:4f:62:40:ea:eb:57:43:70:
a3:23:d9:fb:57:69:68:b0:ff:3f:5d:35:40:4f:5a:
2c:33:cd:dc:c0:50:47:d6:4e:14:ac:61:87:c2:28:
20:74:f7:08:75:9e:34:48:16:73:ca:f4:bb:6b:33:
63:c9:2c:d5:5a:a9:c5:11:64:e3:3e:03:1c:a7:e9:
be:e9:c2:ed:b2:44:67:21:ab:3d:f9:53:3c:f3:59:
45:d8:01:4b:0f:e3:0b:da:cd:18:04:16:dc:76:24:
25:59:24:29:af:2d:36:09:d2:ea:af:ef:b8:3f:a4:
98:44:c4:eb:4c:d5:01:47:f1:08:ff:cb:1a:a8:97:
27:db:e4:fa:89:77:09:0e:f7:a6:d8:4c:19:a8:15:
69:da:92:66:8e:7f:cb:ab:7a:25:c2:6e:ec:3e:d1:
44:55:cd:4b:7c:45:73:88:87:80:72:20:cb:8f:ba:
d1:57:6e:d7:cc:56:7b:d3:b4:68:62:b9:92:cf:13:
a3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:CD:1F:56:92:33:B3:3D:56:E9:AF:90:99:91:C1:24:9A:89:26:74
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/Zc0fVpIzsz1W6a-QmZHBJJqJJnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.144.0/24
45.155.224.0/24
103.211.100.0/24
103.211.102.0/24
185.245.1.0-185.245.2.255
193.107.216.0/24
194.120.144.0/24
194.120.164.0/24
194.145.237.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:8b:0a:e5:fe:79:93:95:64:21:f8:6f:17:18:ba:19:69:64:
62:78:55:c9:c8:da:26:1b:b4:f4:09:de:8f:a6:26:30:1e:a1:
7e:0a:35:fd:a7:db:41:c6:5c:b7:d7:84:87:11:d0:f8:c9:db:
a9:c4:36:e1:11:5e:0a:9c:68:57:94:43:4a:42:88:0c:fa:6a:
b4:ad:11:94:e2:ee:ff:f6:5c:c9:a4:81:23:1d:41:cd:48:dd:
f4:42:6e:3a:e7:22:2c:b7:ef:a7:80:46:74:6f:0a:ea:7f:2c:
52:85:4e:98:0d:3c:d3:82:83:c5:02:94:b1:ba:c0:82:f1:42:
b5:61:c6:d4:5c:6c:cc:71:9c:98:e0:f5:08:b1:60:3b:2f:13:
2e:7b:40:de:b0:26:84:33:5e:fa:57:30:b2:42:e5:c3:82:03:
94:06:be:7f:0a:f0:08:09:aa:02:17:17:d2:ec:cd:40:77:85:
0b:29:5a:a1:74:39:74:25:84:35:40:33:46:37:cc:58:ba:d1:
9c:30:07:b4:f9:14:23:df:a6:f2:ff:2f:ef:9c:ec:3f:78:ce:
c4:d0:7f:99:b8:bc:2b:dc:be:b3:8a:b7:12:87:ce:f0:58:3b:
1b:ed:40:4e:d7:a2:2a:44:e0:81:55:ef:9a:d6:13:7e:1b:3f:
a8:ab:d1:4f
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgISAZfODACXioJefgnYBWi+adO3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2
YzhkY2MwHhcNMjUwNzAzMDIwOTQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NWNkMWY1NjkyMzNiMzNkNTZlOWFmOTA5OTkxYzEyNDlhODkyNjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubZkzm0/E4x6LUuEen5MAgKsldOS
BK7tzGToRpDaYXHBb5GE3Q6efGyj1yxqtnBx9bz4Nx1ywx5rZHEM++A0f3HhT2JA
6utXQ3CjI9n7V2losP8/XTVAT1osM83cwFBH1k4UrGGHwiggdPcIdZ40SBZzyvS7
azNjySzVWqnFEWTjPgMcp+m+6cLtskRnIas9+VM881lF2AFLD+ML2s0YBBbcdiQl
WSQpry02CdLqr++4P6SYRMTrTNUBR/EI/8saqJcn2+T6iXcJDvem2EwZqBVp2pJm
jn/Lq3olwm7sPtFEVc1LfEVziIeAciDLj7rRV27XzFZ707RoYrmSzxOj3QIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFGXNH1aSM7M9VumvkJmRwSSaiSZ0MB8GA1UdIwQY
MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt
OTE4YWM2NDYyNjc5LzEvWmMwZlZwSXpzejFXNmEtUW1aSEJKSnFKSm5RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5
LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQALYaQAwQA
LZvgAwQAZ9NkAwQAZ9NmMAwDBAC59QEDBAC59QIDBADBa9gDBADCeJADBADCeKQD
BADCke0wDQYJKoZIhvcNAQELBQADggEBAC2LCuX+eZOVZCH4bxcYuhlpZGJ4VcnI
2iYbtPQJ3o+mJjAeoX4KNf2n20HGXLfXhIcR0PjJ26nENuERXgqcaFeUQ0pCiAz6
arStEZTi7v/2XMmkgSMdQc1I3fRCbjrnIiy376eARnRvCup/LFKFTpgNPNOCg8UC
lLG6wILxQrVhxtRcbMxxnJjg9QixYDsvEy57QN6wJoQzXvpXMLJC5cOCA5QGvn8K
8AgJqgIXF9LszUB3hQspWqF0OXQlhDVAM0Y3zFi60ZwwB7T5FCPfpvL/L++c7D94
zsTQf5m4vCvcvrOKtxKHzvBYOxvtQE7XoipE4IFV75rWE34bP6ir0U8=
-----END CERTIFICATE-----
Generated at Mon Jul 21 10:50:25 2025 by rpki-client