Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/ZoxPEpI0c9lO_DyUxHdTZ9HF-xw.roa
File: ZoxPEpI0c9lO_DyUxHdTZ9HF-xw.roa (raw, json)
Hash identifier: uri9D/ammDSgrB0WtZzX79t1Ah+8D0wW+qHYOR1wS9w=
Subject key identifier: 66:8C:4F:12:92:34:73:D9:4E:FC:3C:94:C4:77:53:67:D1:C5:FB:1C
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 0197BF860BDB4B6FB309C2D1E096E2EFAA74
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/ZoxPEpI0c9lO_DyUxHdTZ9HF-xw.roa
Signing time: Mon 30 Jun 2025 06:28:42 +0000
ROA not before: Mon 30 Jun 2025 06:28:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200436
IP address blocks: 5.57.32.0/24 maxlen: 24
5.57.34.0/24 maxlen: 24
5.57.35.0/24 maxlen: 24
5.57.37.0/24 maxlen: 24
5.57.39.0/24 maxlen: 24
185.212.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bf:86:0b:db:4b:6f:b3:09:c2:d1:e0:96:e2:ef:aa:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jun 30 06:28:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=668c4f12923473d94efc3c94c4775367d1c5fb1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:41:84:72:b2:0d:ba:c5:92:e0:32:98:7b:95:
d9:b7:30:a4:96:74:4e:23:9c:2b:63:92:1e:dd:6e:
98:59:98:1d:64:49:02:d5:26:72:37:38:48:67:4c:
3d:a1:3e:df:86:e6:57:77:eb:97:4e:28:de:4a:a4:
a9:84:97:6c:5b:33:27:ab:db:4b:84:23:2f:a3:c5:
78:46:af:be:4c:3a:19:c6:01:fa:e4:16:d9:fb:9a:
5e:b6:65:94:79:5b:9b:ed:cf:69:c0:b0:04:7e:c0:
26:2a:01:fb:63:c0:94:98:1c:6a:8c:25:ca:16:ea:
40:e3:75:96:35:b8:d2:63:e1:1d:9f:6b:e3:8d:52:
76:62:0d:75:18:9e:ab:be:86:7d:6a:17:b5:37:53:
47:a0:1a:df:67:1a:dc:d1:e1:b2:c5:07:86:e6:df:
c0:7b:da:2e:31:7f:3e:79:4a:8a:72:15:f0:7d:64:
0d:aa:f5:54:0c:4d:21:3f:78:50:1a:95:50:aa:77:
89:8b:59:8c:a5:4e:23:ad:77:98:18:59:98:70:8f:
55:81:57:41:dc:d8:b5:0b:19:9c:8c:f1:94:d4:fd:
54:75:33:09:62:d0:e9:07:4c:ff:49:cf:34:07:9c:
65:80:32:9d:34:20:db:25:4f:1b:87:96:4e:c9:88:
d9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:8C:4F:12:92:34:73:D9:4E:FC:3C:94:C4:77:53:67:D1:C5:FB:1C
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/ZoxPEpI0c9lO_DyUxHdTZ9HF-xw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.32.0/24
5.57.34.0/23
5.57.37.0/24
5.57.39.0/24
185.212.49.0/24
Signature Algorithm: sha256WithRSAEncryption
67:27:8e:4a:1b:27:d3:5d:24:49:f2:04:53:a1:41:18:37:0a:
4a:fa:22:4e:9b:38:18:72:01:80:6a:a5:f2:54:ed:09:0a:e2:
b5:36:0b:ae:1f:fb:5c:17:31:6c:20:d3:fb:e9:c8:ac:93:37:
fb:89:9c:c3:a0:77:b0:78:da:03:f4:2b:d6:04:11:93:a1:ec:
2b:23:bd:7b:0a:58:23:4d:8f:d9:a6:c4:4a:3c:43:ad:1e:c4:
92:5f:df:ec:8e:3c:46:24:6f:f9:8b:d9:7b:4c:3a:8b:b9:fb:
4f:5a:78:b5:af:38:e1:f8:a6:31:c2:9c:97:b3:25:6c:1a:08:
20:dc:88:bb:9e:b4:d1:91:71:13:b6:ec:62:e6:ee:c0:34:8b:
ac:1e:fa:e2:5e:87:d5:94:49:16:4b:57:98:c9:40:2b:1e:15:
4b:d4:d2:28:1a:d9:8c:60:2e:0e:dc:03:83:be:ad:d6:4f:89:
80:ee:73:47:7d:3a:c7:02:ea:32:9f:6e:42:db:82:6e:fc:90:
f5:3f:58:9a:ca:0d:e3:f4:6a:3c:58:0e:72:65:90:0d:95:ca:
21:5a:3b:0e:60:80:a9:e9:62:c6:e2:f6:33:3f:1f:84:7c:c7:
eb:3c:4c:12:4f:02:b6:c2:63:89:9d:eb:60:a4:ca:10:a6:7d:
56:c4:25:60
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZe/hgvbS2+zCcLR4Jbi76p0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMzUzMzM5OWY1NWViNTJlNmIyMjAwYzdjYWU0MjcyYjc0
ZDY0NjQwHhcNMjUwNjMwMDYyODQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjhjNGYxMjkyMzQ3M2Q5NGVmYzNjOTRjNDc3NTM2N2QxYzVmYjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8UGEcrINusWS4DKYe5XZtzCklnRO
I5wrY5Ie3W6YWZgdZEkC1SZyNzhIZ0w9oT7fhuZXd+uXTijeSqSphJdsWzMnq9tL
hCMvo8V4Rq++TDoZxgH65BbZ+5petmWUeVub7c9pwLAEfsAmKgH7Y8CUmBxqjCXK
FupA43WWNbjSY+Edn2vjjVJ2Yg11GJ6rvoZ9ahe1N1NHoBrfZxrc0eGyxQeG5t/A
e9ouMX8+eUqKchXwfWQNqvVUDE0hP3hQGpVQqneJi1mMpU4jrXeYGFmYcI9VgVdB
3Ni1CxmcjPGU1P1UdTMJYtDpB0z/Sc80B5xlgDKdNCDbJU8bh5ZOyYjZtQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFGaMTxKSNHPZTvw8lMR3U2fRxfscMB8GA1UdIwQY
MBaAFPE1MzmfVetS5rIgDHyuQnK3TWRkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEt
OTg5MTY2ODgxOTY5LzEvWm94UEVwSTBjOWxPX0R5VXhIZFRaOUhGLXh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEtOTg5MTY2ODgxOTY5
LzEvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQABTkgAwQB
BTkiAwQABTklAwQABTknAwQAudQxMA0GCSqGSIb3DQEBCwUAA4IBAQBnJ45KGyfT
XSRJ8gRToUEYNwpK+iJOmzgYcgGAaqXyVO0JCuK1NguuH/tcFzFsINP76ciskzf7
iZzDoHeweNoD9CvWBBGToewrI717ClgjTY/ZpsRKPEOtHsSSX9/sjjxGJG/5i9l7
TDqLuftPWni1rzjh+KYxwpyXsyVsGggg3Ii7nrTRkXETtuxi5u7ANIusHvriXofV
lEkWS1eYyUArHhVL1NIoGtmMYC4O3AODvq3WT4mA7nNHfTrHAuoyn25C24Ju/JD1
P1iayg3j9Go8WA5yZZANlcohWjsOYICp6WLG4vYzPx+EfMfrPEwSTwK2wmOJnetg
pMoQpn1WxCVg
-----END CERTIFICATE-----
Generated at Sat Jul 26 12:14:34 2025 by rpki-client