Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/ZuDOaLlmvBS_T6ACbcDR9tJINLg.roa
File: ZuDOaLlmvBS_T6ACbcDR9tJINLg.roa (raw, json)
Hash identifier: D+CShXZKLL9oHIWJLvakbCmqAweC612+uWibYooQqPQ=
Subject key identifier: 66:E0:CE:68:B9:66:BC:14:BF:4F:A0:02:6D:C0:D1:F6:D2:48:34:B8
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 019822BC5B8B4EA0FB24B19CA59C3664498C
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/ZuDOaLlmvBS_T6ACbcDR9tJINLg.roa
Signing time: Sat 19 Jul 2025 12:50:26 +0000
ROA not before: Sat 19 Jul 2025 12:50:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211522
IP address blocks: 83.147.192.0/24 maxlen: 24
83.147.216.0/24 maxlen: 24
83.147.222.0/24 maxlen: 24
83.147.252.0/24 maxlen: 24
83.147.253.0/24 maxlen: 24
83.147.254.0/24 maxlen: 24
83.147.255.0/24 maxlen: 24
91.186.212.0/24 maxlen: 24
91.186.213.0/24 maxlen: 24
91.186.216.0/24 maxlen: 24
91.186.217.0/24 maxlen: 24
91.186.218.0/24 maxlen: 24
91.186.219.0/24 maxlen: 24
178.253.31.0/24 maxlen: 24
178.253.38.0/24 maxlen: 24
178.253.39.0/24 maxlen: 24
178.253.44.0/24 maxlen: 24
178.253.45.0/24 maxlen: 24
178.253.52.0/24 maxlen: 24
178.253.53.0/24 maxlen: 24
178.253.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 20:26:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:22:bc:5b:8b:4e:a0:fb:24:b1:9c:a5:9c:36:64:49:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Jul 19 12:50:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66e0ce68b966bc14bf4fa0026dc0d1f6d24834b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:78:90:fc:4b:54:79:cf:c6:6d:b8:d9:2e:d3:
37:f0:ac:aa:d0:d8:b4:89:74:b3:83:4a:e0:4d:ac:
8d:b8:49:dd:7c:db:6c:e7:9d:6f:c6:aa:ca:34:96:
0a:30:1d:69:55:96:51:9c:d4:80:37:67:d4:7e:e8:
9d:ec:79:b4:73:4f:8d:06:f2:02:00:3f:0c:cc:94:
76:a9:e0:c7:da:7a:e2:6a:dd:af:5b:f4:0d:78:e8:
6b:e1:92:87:51:de:c6:59:4a:13:d5:5b:00:10:13:
9f:15:3d:b9:e2:54:54:4e:a6:a8:9a:f1:e7:7b:4b:
e7:85:5a:d9:b3:66:69:83:9a:f1:d1:a0:49:f1:3d:
8e:d8:7d:42:fd:bb:19:a2:43:eb:06:65:60:25:cd:
9a:00:52:42:d9:53:85:c4:ed:64:d7:fc:61:7e:9b:
bd:2c:40:8a:43:01:21:6c:b4:ef:62:86:bf:2c:16:
90:6c:be:c7:62:9a:64:9a:49:9e:d1:2d:16:d7:27:
ea:5e:6a:4b:32:56:8f:64:61:37:fa:9e:df:c0:b9:
4a:5d:f1:3c:0f:99:b0:0b:cd:66:c7:9f:6b:a5:da:
40:23:be:9e:7e:a3:65:df:e5:bc:b9:2a:47:52:33:
40:3c:17:7b:30:7d:6c:aa:26:54:2b:20:68:70:74:
16:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E0:CE:68:B9:66:BC:14:BF:4F:A0:02:6D:C0:D1:F6:D2:48:34:B8
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/ZuDOaLlmvBS_T6ACbcDR9tJINLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.192.0/24
83.147.216.0/24
83.147.222.0/24
83.147.252.0/22
91.186.212.0/23
91.186.216.0/22
178.253.31.0/24
178.253.38.0/23
178.253.44.0/23
178.253.52.0/23
178.253.55.0/24
Signature Algorithm: sha256WithRSAEncryption
74:d1:81:80:af:c4:fc:f3:3d:cb:c1:99:70:2c:23:e3:b8:e8:
e6:c8:1e:96:bc:ef:04:44:52:21:ea:5f:56:e0:ed:70:f2:dc:
64:52:0f:e2:01:06:f0:5c:9c:77:2f:2a:f0:c6:9e:76:02:3f:
a5:37:cd:57:4a:dc:78:7f:12:46:a9:ae:a7:39:f4:9b:86:42:
81:e4:d3:02:1c:6c:9d:83:35:d7:84:f9:52:22:93:ab:55:aa:
bf:f4:3e:1b:0b:e0:e3:19:73:06:8e:74:0d:8d:4b:70:94:bf:
88:7c:8f:66:44:1c:75:c6:d3:12:e2:f3:5c:2d:7a:a3:50:87:
ef:aa:43:cc:4c:f5:98:26:41:85:44:d0:5f:10:67:6c:8a:3b:
32:d6:9b:60:9e:06:05:fd:30:38:98:47:91:c0:e8:81:57:bd:
6b:7b:5e:e5:05:b6:b7:4f:d3:31:50:97:5c:f1:4e:f9:23:b7:
b2:29:5e:8c:13:db:3c:c3:2d:fc:b6:ae:c3:87:e2:a1:7f:47:
a8:69:45:91:d8:66:e0:42:b6:61:f4:45:d9:ef:43:9d:29:fb:
af:ef:9b:3f:eb:96:2d:f5:f7:19:84:57:8f:5b:a0:ce:57:b6:
b9:20:ed:cd:79:ea:cc:2f:ac:4b:df:32:54:4f:94:5c:87:40:
ab:40:46:ee
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgISAZgivFuLTqD7JLGcpZw2ZEmMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1YmFmMjY5Njc1MTBiM2M1MmU0NmQxZGM1OTM5NjdjZGYy
OWY5YzkwHhcNMjUwNzE5MTI1MDI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NmUwY2U2OGI5NjZiYzE0YmY0ZmEwMDI2ZGMwZDFmNmQyNDgzNGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XiQ/EtUec/GbbjZLtM38Kyq0Ni0
iXSzg0rgTayNuEndfNts551vxqrKNJYKMB1pVZZRnNSAN2fUfuid7Hm0c0+NBvIC
AD8MzJR2qeDH2nriat2vW/QNeOhr4ZKHUd7GWUoT1VsAEBOfFT254lRUTqaomvHn
e0vnhVrZs2Zpg5rx0aBJ8T2O2H1C/bsZokPrBmVgJc2aAFJC2VOFxO1k1/xhfpu9
LECKQwEhbLTvYoa/LBaQbL7HYppkmkme0S0W1yfqXmpLMlaPZGE3+p7fwLlKXfE8
D5mwC81mx59rpdpAI76efqNl3+W8uSpHUjNAPBd7MH1sqiZUKyBocHQWlwIDAQAB
o4ICRTCCAkEwHQYDVR0OBBYEFGbgzmi5ZrwUv0+gAm3A0fbSSDS4MB8GA1UdIwQY
MBaAFFW68mlnUQs8UuRtHcWTlnzfKfnJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAt
NDlmOTgxZWU1OTgxLzEvWnVET2FMbG12QlNfVDZBQ2JjRFI5dEpJTkxnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAtNDlmOTgxZWU1OTgx
LzEvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQAU5PAAwQA
U5PYAwQAU5PeAwQCU5P8AwQBW7rUAwQCW7rYAwQAsv0fAwQBsv0mAwQBsv0sAwQB
sv00AwQAsv03MA0GCSqGSIb3DQEBCwUAA4IBAQB00YGAr8T88z3LwZlwLCPjuOjm
yB6WvO8ERFIh6l9W4O1w8txkUg/iAQbwXJx3Lyrwxp52Aj+lN81XStx4fxJGqa6n
OfSbhkKB5NMCHGydgzXXhPlSIpOrVaq/9D4bC+DjGXMGjnQNjUtwlL+IfI9mRBx1
xtMS4vNcLXqjUIfvqkPMTPWYJkGFRNBfEGdsijsy1ptgngYF/TA4mEeRwOiBV71r
e17lBba3T9MxUJdc8U75I7eyKV6ME9s8wy38tq7Dh+Khf0eoaUWR2GbgQrZh9EXZ
70OdKfuv75s/65Yt9fcZhFePW6DOV7a5IO3NeerML6xL3zJUT5Rch0CrQEbu
-----END CERTIFICATE-----
Generated at Tue Jul 22 04:49:40 2025 by rpki-client