Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/zxmARgXwAuvHWLHIGkokov46TuM.roa
File: zxmARgXwAuvHWLHIGkokov46TuM.roa (raw, json)
Hash identifier: BR0h0a9oL1Bt9qfxuwYH/FkkNRh6hN8+HgBF04MhJaA=
Subject key identifier: CF:19:80:46:05:F0:02:EB:C7:58:B1:C8:1A:4A:24:A2:FE:3A:4E:E3
Certificate issuer: /CN=237084712fdebb1bfc5a8c0262d919a8aa440603
Certificate serial: 01980CCFE7CDB07E069ACB8D13639713711F
Authority key identifier: 23:70:84:71:2F:DE:BB:1B:FC:5A:8C:02:62:D9:19:A8:AA:44:06:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3CEcS_euxv8WowCYtkZqKpEBgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/zxmARgXwAuvHWLHIGkokov46TuM.roa
Signing time: Tue 15 Jul 2025 06:40:08 +0000
ROA not before: Tue 15 Jul 2025 06:40:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41201
IP address blocks: 87.199.0.0/16 maxlen: 32
87.199.0.0/17 maxlen: 32
87.199.0.0/18 maxlen: 32
87.199.0.0/24 maxlen: 24
87.199.1.0/24 maxlen: 24
87.199.2.0/24 maxlen: 24
87.199.3.0/24 maxlen: 24
87.199.4.0/24 maxlen: 24
87.199.5.0/24 maxlen: 24
87.199.6.0/24 maxlen: 24
87.199.7.0/24 maxlen: 24
87.199.8.0/24 maxlen: 24
87.199.9.0/24 maxlen: 24
87.199.10.0/24 maxlen: 24
87.199.11.0/24 maxlen: 24
87.199.12.0/24 maxlen: 24
87.199.13.0/24 maxlen: 24
87.199.14.0/24 maxlen: 24
87.199.15.0/24 maxlen: 24
87.199.16.0/24 maxlen: 24
87.199.17.0/24 maxlen: 24
87.199.18.0/24 maxlen: 24
87.199.19.0/24 maxlen: 24
87.199.20.0/24 maxlen: 24
87.199.21.0/24 maxlen: 24
87.199.22.0/24 maxlen: 24
87.199.23.0/24 maxlen: 24
87.199.24.0/24 maxlen: 24
87.199.25.0/24 maxlen: 24
87.199.26.0/24 maxlen: 24
87.199.27.0/24 maxlen: 24
87.199.28.0/24 maxlen: 24
87.199.29.0/24 maxlen: 24
87.199.30.0/24 maxlen: 24
87.199.31.0/24 maxlen: 24
87.199.32.0/24 maxlen: 24
87.199.33.0/24 maxlen: 24
87.199.34.0/24 maxlen: 24
87.199.35.0/24 maxlen: 24
87.199.36.0/24 maxlen: 24
87.199.37.0/24 maxlen: 24
87.199.38.0/24 maxlen: 24
87.199.39.0/24 maxlen: 24
87.199.40.0/24 maxlen: 24
87.199.41.0/24 maxlen: 24
87.199.42.0/24 maxlen: 24
87.199.43.0/24 maxlen: 24
87.199.44.0/24 maxlen: 24
87.199.45.0/24 maxlen: 24
87.199.46.0/24 maxlen: 24
87.199.47.0/24 maxlen: 24
87.199.48.0/24 maxlen: 24
87.199.49.0/24 maxlen: 24
87.199.50.0/24 maxlen: 24
87.199.51.0/24 maxlen: 24
87.199.52.0/24 maxlen: 24
87.199.53.0/24 maxlen: 24
87.199.54.0/24 maxlen: 24
87.199.55.0/24 maxlen: 24
87.199.56.0/24 maxlen: 24
87.199.57.0/24 maxlen: 24
87.199.58.0/24 maxlen: 24
87.199.59.0/24 maxlen: 24
87.199.60.0/24 maxlen: 24
87.199.61.0/24 maxlen: 24
87.199.62.0/24 maxlen: 24
87.199.63.0/24 maxlen: 24
87.199.64.0/19 maxlen: 32
87.199.64.0/24 maxlen: 24
87.199.65.0/24 maxlen: 24
87.199.66.0/24 maxlen: 24
87.199.67.0/24 maxlen: 24
87.199.68.0/24 maxlen: 24
87.199.69.0/24 maxlen: 24
87.199.70.0/24 maxlen: 24
87.199.71.0/24 maxlen: 24
87.199.72.0/24 maxlen: 24
87.199.73.0/24 maxlen: 24
87.199.74.0/24 maxlen: 24
87.199.75.0/24 maxlen: 24
87.199.76.0/24 maxlen: 24
87.199.77.0/24 maxlen: 24
87.199.78.0/24 maxlen: 24
87.199.79.0/24 maxlen: 24
87.199.80.0/24 maxlen: 24
87.199.81.0/24 maxlen: 24
87.199.82.0/24 maxlen: 24
87.199.83.0/24 maxlen: 24
87.199.84.0/24 maxlen: 24
87.199.85.0/24 maxlen: 24
87.199.86.0/24 maxlen: 24
87.199.87.0/24 maxlen: 24
87.199.88.0/24 maxlen: 24
87.199.89.0/24 maxlen: 24
87.199.90.0/24 maxlen: 24
87.199.96.0/20 maxlen: 32
87.199.112.0/21 maxlen: 32
87.199.120.0/22 maxlen: 32
87.199.124.0/23 maxlen: 32
87.199.214.0/24 maxlen: 24
87.199.215.0/24 maxlen: 24
87.199.216.0/24 maxlen: 24
87.199.217.0/24 maxlen: 24
87.199.218.0/24 maxlen: 24
87.199.219.0/24 maxlen: 24
87.199.220.0/24 maxlen: 24
87.199.221.0/24 maxlen: 24
87.199.222.0/24 maxlen: 24
87.199.223.0/24 maxlen: 24
87.199.224.0/24 maxlen: 24
87.199.225.0/24 maxlen: 24
87.199.226.0/24 maxlen: 24
87.199.227.0/24 maxlen: 24
87.199.228.0/24 maxlen: 24
87.199.229.0/24 maxlen: 24
87.199.230.0/24 maxlen: 24
87.199.231.0/24 maxlen: 24
87.199.232.0/24 maxlen: 24
87.199.233.0/24 maxlen: 24
87.199.234.0/24 maxlen: 24
87.199.235.0/24 maxlen: 24
87.199.236.0/24 maxlen: 24
87.199.237.0/24 maxlen: 24
87.199.238.0/24 maxlen: 24
87.199.239.0/24 maxlen: 24
87.199.240.0/24 maxlen: 24
87.199.241.0/24 maxlen: 24
87.199.242.0/24 maxlen: 24
87.199.243.0/24 maxlen: 24
87.199.244.0/24 maxlen: 24
87.199.245.0/24 maxlen: 24
87.199.246.0/24 maxlen: 24
87.199.247.0/24 maxlen: 24
87.199.248.0/24 maxlen: 24
87.199.249.0/24 maxlen: 24
87.199.250.0/24 maxlen: 24
87.199.251.0/24 maxlen: 24
87.199.252.0/24 maxlen: 24
87.199.253.0/24 maxlen: 24
87.199.254.0/24 maxlen: 24
87.199.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/I3CEcS_euxv8WowCYtkZqKpEBgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0c:cf:e7:cd:b0:7e:06:9a:cb:8d:13:63:97:13:71:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237084712fdebb1bfc5a8c0262d919a8aa440603
Validity
Not Before: Jul 15 06:40:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf19804605f002ebc758b1c81a4a24a2fe3a4ee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:df:66:df:1c:52:58:88:b7:cb:f6:5b:6a:c2:
ce:64:d3:e6:b3:72:9c:fe:41:5d:34:12:8c:d1:c5:
83:b9:64:10:f0:44:00:d3:36:6f:48:70:e7:2e:8d:
c6:8e:e8:15:78:5e:ef:2e:93:5d:7e:1f:71:10:31:
41:88:40:6e:6c:bb:29:19:77:70:04:d5:05:96:b1:
07:12:42:dd:e3:2b:86:14:f5:2a:bf:aa:6c:16:02:
da:ec:e4:6e:3d:98:67:1e:81:87:0b:b7:13:a5:b6:
0e:ea:41:b8:a5:a4:7c:f7:f6:2c:6b:67:be:61:58:
ec:47:6f:1c:30:69:ff:b0:a7:5d:6c:20:6e:ae:d5:
9f:79:f8:03:19:61:c9:c4:dc:64:25:3d:ff:33:b0:
30:40:28:c4:75:82:01:4e:7a:a6:26:7a:84:11:d9:
cb:29:64:33:9b:b1:ac:29:6a:79:4d:df:ce:db:be:
f2:09:7b:e2:39:95:48:2e:d7:43:3e:24:24:e5:4c:
52:95:72:6d:12:4d:0f:8a:ca:01:e5:e0:dc:9d:4c:
93:03:d1:12:8f:2f:65:01:45:cb:7a:92:7b:ab:61:
3e:2c:95:26:43:dd:bf:1c:a4:7d:77:01:09:5b:5e:
51:eb:44:60:4b:91:6d:fe:7e:98:a6:23:1c:1d:11:
f6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:19:80:46:05:F0:02:EB:C7:58:B1:C8:1A:4A:24:A2:FE:3A:4E:E3
X509v3 Authority Key Identifier:
keyid:23:70:84:71:2F:DE:BB:1B:FC:5A:8C:02:62:D9:19:A8:AA:44:06:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3CEcS_euxv8WowCYtkZqKpEBgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/zxmARgXwAuvHWLHIGkokov46TuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.199.0.0/16
Signature Algorithm: sha256WithRSAEncryption
38:ca:23:31:48:1e:0b:39:87:69:3d:05:e3:31:93:de:e1:6c:
f7:55:64:eb:5e:28:83:e7:6a:db:fb:6f:f5:ec:e1:93:7f:b8:
92:74:1d:3d:3a:bd:0d:da:f8:05:6f:fa:0d:38:83:35:ce:5c:
73:38:01:36:af:b3:28:25:e4:23:12:c2:af:7d:6e:74:cb:65:
b5:48:76:3f:01:a6:da:3f:36:8c:2d:73:f2:fb:8d:8d:3f:34:
c8:33:2a:8f:e4:44:64:35:ff:69:05:dd:6a:e9:68:ae:e2:ff:
ba:b5:13:b4:89:6f:24:fa:d7:ae:04:03:7f:c2:68:58:1c:21:
3d:53:c6:26:f1:d9:06:fd:61:93:54:93:8a:9b:b0:5d:3d:91:
78:da:ee:1f:85:37:aa:23:1c:0e:86:8c:33:78:22:ee:fd:3e:
00:1d:46:3f:c2:cf:c9:06:d0:44:30:b3:37:6a:50:fc:87:38:
c2:c0:0f:5e:20:fd:64:3b:d6:e0:d1:67:ea:29:b4:24:d0:72:
13:bc:53:3b:fb:cb:84:73:ee:1f:5b:98:4f:d9:a9:34:bc:af:
99:c5:83:79:84:22:7a:f6:9e:12:06:13:26:20:57:3e:1d:c5:
fe:09:35:5e:2f:53:c7:8e:4e:9f:f9:16:8b:82:41:95:61:e6:
fe:67:b1:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:36:28 2025 by rpki-client