Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/znul8D-ksNRhN2Cclb1d9oAN3m4.roa
File: znul8D-ksNRhN2Cclb1d9oAN3m4.roa (raw, json)
Hash identifier: e1Z/F5VmaFQnbIQzB91uNx60SZ0/+TW0LayKFelguZs=
Subject key identifier: CE:7B:A5:F0:3F:A4:B0:D4:61:37:60:9C:95:BD:5D:F6:80:0D:DE:6E
Certificate issuer: /CN=bd972d44276ea4102ef6aed30f2ae58e99b3e751
Certificate serial: 0198373DAB8AEC5449D6931541798ED45EFF
Authority key identifier: BD:97:2D:44:27:6E:A4:10:2E:F6:AE:D3:0F:2A:E5:8E:99:B3:E7:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/znul8D-ksNRhN2Cclb1d9oAN3m4.roa
Signing time: Wed 23 Jul 2025 12:24:05 +0000
ROA not before: Wed 23 Jul 2025 12:24:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200852
IP address blocks: 185.93.196.0/22 maxlen: 22
185.93.196.0/23 maxlen: 23
185.93.197.0/24 maxlen: 24
185.93.198.0/23 maxlen: 23
193.239.208.0/24 maxlen: 24
212.46.63.0/24 maxlen: 24
2a02:ea00::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:37:3d:ab:8a:ec:54:49:d6:93:15:41:79:8e:d4:5e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd972d44276ea4102ef6aed30f2ae58e99b3e751
Validity
Not Before: Jul 23 12:24:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce7ba5f03fa4b0d46137609c95bd5df6800dde6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:6e:90:0e:bd:f4:40:5e:a0:99:8f:a8:5c:b7:
58:96:e5:7a:8c:e2:cf:5b:5d:5e:0a:88:ad:a7:a9:
01:b5:84:6a:27:b6:87:90:a0:63:c0:37:83:83:a0:
06:ff:d9:d2:ac:af:7b:77:7e:c2:33:28:07:21:b4:
17:9e:dd:28:a0:82:51:c4:03:8c:2d:2e:12:b3:a5:
3d:85:38:65:ae:8d:c6:f2:ad:bd:af:c3:4d:89:e5:
00:93:ca:dd:9b:e3:88:63:dd:a0:68:12:a0:46:23:
5f:79:80:dd:23:d0:4f:8d:2e:8d:a0:d2:99:f5:bf:
38:65:05:8c:e7:d8:97:08:44:26:70:2d:03:80:98:
a7:6c:38:de:69:d6:bc:45:cb:58:83:6c:a4:d1:7d:
39:49:8f:ec:fb:07:44:e3:c4:a4:10:49:7c:f6:e0:
41:58:75:05:cd:1c:be:90:ff:d2:63:52:25:89:af:
85:45:42:24:95:6c:6e:91:66:6f:69:52:07:0e:34:
46:71:6f:d4:61:32:c0:bf:92:98:a4:80:35:90:39:
7a:25:d7:0d:1e:9b:de:4c:0d:f3:3e:8c:fc:ec:35:
a1:56:97:83:1d:9d:35:6e:7e:ac:2f:84:68:60:93:
e3:c1:1d:69:2e:81:cd:6d:f0:54:cd:3b:55:5e:da:
67:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:7B:A5:F0:3F:A4:B0:D4:61:37:60:9C:95:BD:5D:F6:80:0D:DE:6E
X509v3 Authority Key Identifier:
keyid:BD:97:2D:44:27:6E:A4:10:2E:F6:AE:D3:0F:2A:E5:8E:99:B3:E7:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/znul8D-ksNRhN2Cclb1d9oAN3m4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.196.0/22
193.239.208.0/24
212.46.63.0/24
IPv6:
2a02:ea00::/29
Signature Algorithm: sha256WithRSAEncryption
01:10:7d:df:1c:7a:4b:d9:72:8b:d1:30:36:92:3f:52:30:c7:
96:31:89:1b:df:87:53:59:2d:ab:88:6e:25:5c:b2:a3:ef:95:
a3:62:25:79:5f:d7:91:a6:1b:77:71:6e:7b:91:10:40:20:55:
a3:40:f9:48:71:a9:39:7c:a7:21:e1:d3:b4:13:5a:a6:55:1c:
64:52:c5:08:83:7a:50:47:e8:06:bb:62:a3:13:44:d9:c7:01:
4c:00:9b:d9:1f:13:03:2d:e0:30:37:49:5f:8e:d1:fc:ae:3c:
71:d3:3d:f1:bd:5a:e2:3f:34:69:23:43:bb:30:5c:3b:ed:ed:
ca:ee:6e:44:08:8a:27:e5:d7:69:1d:3b:b4:21:4a:3b:33:3c:
44:bf:41:90:d8:02:67:b6:76:43:46:68:66:c3:54:61:41:c4:
d6:01:64:df:62:46:a2:06:62:40:c2:6f:f9:07:ba:f2:52:be:
02:55:0d:cd:f2:71:d4:fa:19:76:bf:1b:a0:92:47:60:c8:c5:
d9:1f:bd:71:38:74:8f:b1:cd:e9:95:e2:38:5f:b3:9c:b7:10:
9d:c3:93:02:54:2e:02:78:a1:54:71:a1:bf:14:f0:96:57:f9:
96:8d:4f:26:12:27:a7:aa:22:e7:ae:22:57:c0:ff:e7:6c:3c:
8f:9f:b8:bd
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZg3PauK7FRJ1pMVQXmO1F7/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkOTcyZDQ0Mjc2ZWE0MTAyZWY2YWVkMzBmMmFlNThlOTli
M2U3NTEwHhcNMjUwNzIzMTIyNDA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZTdiYTVmMDNmYTRiMGQ0NjEzNzYwOWM5NWJkNWRmNjgwMGRkZTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+G6QDr30QF6gmY+oXLdYluV6jOLP
W11eCoitp6kBtYRqJ7aHkKBjwDeDg6AG/9nSrK97d37CMygHIbQXnt0ooIJRxAOM
LS4Ss6U9hThlro3G8q29r8NNieUAk8rdm+OIY92gaBKgRiNfeYDdI9BPjS6NoNKZ
9b84ZQWM59iXCEQmcC0DgJinbDjeada8RctYg2yk0X05SY/s+wdE48SkEEl89uBB
WHUFzRy+kP/SY1Ilia+FRUIklWxukWZvaVIHDjRGcW/UYTLAv5KYpIA1kDl6JdcN
HpveTA3zPoz87DWhVpeDHZ01bn6sL4RoYJPjwR1pLoHNbfBUzTtVXtpnwwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFM57pfA/pLDUYTdgnJW9XfaADd5uMB8GA1UdIwQY
MBaAFL2XLUQnbqQQLvau0w8q5Y6Zs+dRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlpjdFJDZHVwQkF1OXE3VER5cmxqcG16NTFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80MTlkMWItNThiMC00NDgzLTkyZDIt
ODZjMWVlMmE5ZWJhLzEvem51bDhELWtzTlJoTjJDY2xiMWQ5b0FOM200LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80MTlkMWItNThiMC00NDgzLTkyZDItODZjMWVlMmE5ZWJh
LzEvdlpjdFJDZHVwQkF1OXE3VER5cmxqcG16NTFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCuV3EAwQA
we/QAwQA1C4/MA0EAgACMAcDBQMqAuoAMA0GCSqGSIb3DQEBCwUAA4IBAQABEH3f
HHpL2XKL0TA2kj9SMMeWMYkb34dTWS2riG4lXLKj75WjYiV5X9eRpht3cW57kRBA
IFWjQPlIcak5fKch4dO0E1qmVRxkUsUIg3pQR+gGu2KjE0TZxwFMAJvZHxMDLeAw
N0lfjtH8rjxx0z3xvVriPzRpI0O7MFw77e3K7m5ECIon5ddpHTu0IUo7MzxEv0GQ
2AJntnZDRmhmw1RhQcTWAWTfYkaiBmJAwm/5B7ryUr4CVQ3N8nHU+hl2vxugkkdg
yMXZH71xOHSPsc3pleI4X7OctxCdw5MCVC4CeKFUcaG/FPCWV/mWjU8mEienqiLn
riJXwP/nbDyPn7i9
-----END CERTIFICATE-----
Generated at Sun Jul 27 14:33:36 2025 by rpki-client