
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/LZ_x38SoeCM6hPRNbp-pRt9Q8bY.roa
File: LZ_x38SoeCM6hPRNbp-pRt9Q8bY.roa (raw, json)
Hash identifier: hMJW6h+5JE+dal9rkWR3bK6F1BlVNwt7VsR0ZpIQGdQ=
Subject key identifier: 2D:9F:F1:DF:C4:A8:78:23:3A:84:F4:4D:6E:9F:A9:46:DF:50:F1:B6
Certificate issuer: /CN=668e9b2eefb205342382b6072a903f9d9837071a
Certificate serial: 01982C12CA6FA1D7C8B765D124C411A5C202
Authority key identifier: 66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/LZ_x38SoeCM6hPRNbp-pRt9Q8bY.roa
Signing time: Mon 21 Jul 2025 08:21:25 +0000
ROA not before: Mon 21 Jul 2025 08:21:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44056
IP address blocks: 31.135.224.0/20 maxlen: 20
31.135.226.0/23 maxlen: 23
31.135.228.0/22 maxlen: 22
31.135.232.0/22 maxlen: 22
31.135.236.0/23 maxlen: 23
46.148.128.0/20 maxlen: 20
46.148.128.0/22 maxlen: 22
46.148.132.0/22 maxlen: 22
46.148.143.0/24 maxlen: 24
83.97.104.0/21 maxlen: 21
91.195.130.0/23 maxlen: 23
91.230.146.0/24 maxlen: 24
91.237.186.0/23 maxlen: 23
91.237.186.0/24 maxlen: 24
91.237.187.0/24 maxlen: 24
109.196.64.0/20 maxlen: 24
109.196.64.0/22 maxlen: 22
109.196.68.0/22 maxlen: 22
109.196.72.0/22 maxlen: 22
109.196.76.0/22 maxlen: 22
176.125.192.0/19 maxlen: 19
195.2.238.0/23 maxlen: 23
2a13:2940::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2c:12:ca:6f:a1:d7:c8:b7:65:d1:24:c4:11:a5:c2:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=668e9b2eefb205342382b6072a903f9d9837071a
Validity
Not Before: Jul 21 08:21:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d9ff1dfc4a878233a84f44d6e9fa946df50f1b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:96:73:8d:e5:1a:91:1b:59:96:83:4d:3a:35:
50:70:ec:75:d5:49:99:61:4e:fa:44:9f:e0:f5:1c:
cd:d4:1e:6c:16:ef:ea:d0:dc:8b:de:a0:f2:6b:cc:
f4:0f:e8:6b:08:52:b6:2d:60:d9:2b:d7:bb:a6:5e:
cf:b5:50:35:2a:a7:96:a6:24:4b:1e:4a:86:87:1a:
5c:87:91:66:86:fd:05:db:bc:91:9e:a9:d3:a4:44:
f3:68:50:3c:52:ae:55:3a:88:89:cf:29:f0:c2:5c:
30:19:1c:84:fa:61:70:69:d3:82:cb:bb:48:68:e2:
9b:0c:08:3a:7a:94:9d:76:6b:68:27:b4:71:0d:05:
a5:55:b7:c7:d5:6e:6d:6c:26:7d:11:3a:a9:3f:17:
db:d8:45:6c:a9:13:fb:d2:19:e2:18:e4:a4:c8:0d:
1a:3b:ed:26:69:31:a9:f3:7a:2a:b4:2d:60:f7:4b:
54:20:aa:22:56:c0:c1:28:60:8e:1a:15:36:3f:22:
33:6e:7f:f9:a0:41:d5:04:ae:cf:25:33:99:15:88:
23:b2:f9:46:14:e6:95:a7:73:32:86:ee:b6:f5:d2:
9b:50:ab:a5:7f:17:08:4c:63:71:c2:8e:99:02:a9:
48:3d:b7:14:e8:bf:44:15:bc:92:48:1f:a9:a9:ee:
0c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:9F:F1:DF:C4:A8:78:23:3A:84:F4:4D:6E:9F:A9:46:DF:50:F1:B6
X509v3 Authority Key Identifier:
keyid:66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/LZ_x38SoeCM6hPRNbp-pRt9Q8bY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.135.224.0/20
46.148.128.0/20
83.97.104.0/21
91.195.130.0/23
91.230.146.0/24
91.237.186.0/23
109.196.64.0/20
176.125.192.0/19
195.2.238.0/23
IPv6:
2a13:2940::/32
Signature Algorithm: sha256WithRSAEncryption
34:13:36:fb:b5:74:1c:f6:06:55:47:c1:f8:bd:da:d4:1e:97:
74:ed:cd:cd:40:48:6c:ab:ee:3e:0c:8f:9c:6b:47:71:66:58:
dd:72:5a:d8:99:0e:d9:6c:06:fd:a6:c4:24:84:c6:8c:19:ec:
77:55:be:16:8d:83:4c:8e:91:bf:aa:1b:70:31:00:10:92:dd:
bd:64:04:4a:a4:65:e3:6b:48:f0:40:32:ac:c6:b7:ab:32:6d:
4f:df:1e:2f:58:9e:e0:06:aa:86:8e:f4:fc:ea:ac:b4:07:0c:
4f:24:46:77:99:30:c3:53:a5:31:ea:86:49:3c:35:3a:e8:45:
34:fb:cc:e4:99:38:6f:ba:cb:f8:93:8c:77:d2:60:ad:7b:0d:
9f:2b:9e:9c:fc:fa:2b:d0:20:40:b8:1f:69:00:32:77:e9:dc:
ad:00:4b:5b:4c:4d:e8:ef:5d:40:07:58:14:4e:4f:44:f0:31:
3c:13:30:a2:19:4e:42:e5:54:01:7f:9a:b2:d1:8b:be:e5:90:
b9:33:1b:1d:0f:6c:0e:bd:bc:70:27:1c:80:21:61:6b:a7:91:
22:13:1b:72:f4:5a:df:fb:68:dc:42:02:25:3d:28:97:d2:6a:
3a:a7:26:58:f6:95:4e:f9:f6:7e:16:82:10:70:af:6d:8d:44:
9f:6c:65:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 12:08:21 2025 by rpki-client