Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/zVJHdam97YhSyaN6HMdIxs7X12A.roa
File: zVJHdam97YhSyaN6HMdIxs7X12A.roa (raw, json)
Hash identifier: dDne1wP6FLj5db+nkqmszrC9qemts/WD7C0EScin8hs=
Subject key identifier: CD:52:47:75:A9:BD:ED:88:52:C9:A3:7A:1C:C7:48:C6:CE:D7:D7:60
Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial: 0197E51141F6068BD3EF3EFF3D10CDEEA36A
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/zVJHdam97YhSyaN6HMdIxs7X12A.roa
Signing time: Mon 07 Jul 2025 13:26:42 +0000
ROA not before: Mon 07 Jul 2025 13:26:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20857
IP address blocks: 5.61.248.0/21 maxlen: 24
31.3.96.0/22 maxlen: 24
31.3.101.0/24 maxlen: 24
31.3.102.0/23 maxlen: 24
31.14.96.0/22 maxlen: 24
37.34.48.0/21 maxlen: 24
37.34.56.0/21 maxlen: 24
37.97.128.0/17 maxlen: 24
37.230.96.0/21 maxlen: 24
77.72.144.0/21 maxlen: 24
79.170.88.0/24 maxlen: 24
79.170.90.0/23 maxlen: 24
79.170.93.0/24 maxlen: 24
79.170.94.0/23 maxlen: 24
80.69.64.0/19 maxlen: 24
84.247.8.0/21 maxlen: 24
85.10.128.0/19 maxlen: 24
85.222.228.0/22 maxlen: 24
86.105.244.0/22 maxlen: 24
87.253.128.0/19 maxlen: 24
89.31.96.0/23 maxlen: 24
89.31.100.0/24 maxlen: 24
89.31.102.0/23 maxlen: 24
89.41.168.0/22 maxlen: 24
91.142.254.0/23 maxlen: 23
93.119.0.0/20 maxlen: 24
93.191.128.0/22 maxlen: 24
93.191.132.0/23 maxlen: 24
95.170.64.0/19 maxlen: 24
141.138.136.0/21 maxlen: 24
141.138.192.0/21 maxlen: 24
141.138.200.0/22 maxlen: 24
141.138.204.0/23 maxlen: 24
141.138.206.0/24 maxlen: 24
149.210.128.0/17 maxlen: 24
178.18.80.0/20 maxlen: 24
185.10.48.0/22 maxlen: 24
185.21.188.0/22 maxlen: 24
185.96.4.0/22 maxlen: 24
185.108.112.0/22 maxlen: 24
188.240.52.0/22 maxlen: 22
188.241.148.0/22 maxlen: 22
193.138.204.0/24 maxlen: 24
195.8.195.0/24 maxlen: 24
195.135.195.0/24 maxlen: 24
2a01:7c8::/32 maxlen: 32
2a01:7c8:7000::/36 maxlen: 36
2a01:7c8:d000::/36 maxlen: 36
2a01:7c8:e000::/36 maxlen: 36
2a01:7860::/32 maxlen: 32
2a02:348:3::/48 maxlen: 48
2a02:348:33::/48 maxlen: 48
2a02:348:35::/48 maxlen: 48
2a02:348:36::/48 maxlen: 48
2a02:348:39::/48 maxlen: 48
2a02:348:3a::/48 maxlen: 48
2a02:348:3b::/48 maxlen: 48
2a02:348:40::/42 maxlen: 48
2a02:348:46::/48 maxlen: 48
2a02:348:47::/48 maxlen: 48
2a02:348:4b::/48 maxlen: 48
2a02:348:4f::/48 maxlen: 48
2a02:348:50::/48 maxlen: 48
2a02:348:53::/48 maxlen: 48
2a02:348:54::/48 maxlen: 48
2a02:348:55::/48 maxlen: 48
2a02:348:56::/48 maxlen: 48
2a02:348:57::/48 maxlen: 48
2a02:348:58::/48 maxlen: 48
2a02:348:59::/48 maxlen: 48
2a02:348:5a::/48 maxlen: 48
2a02:348:5b::/48 maxlen: 48
2a02:348:5d::/48 maxlen: 48
2a02:348:5e::/48 maxlen: 48
2a02:348:5f::/48 maxlen: 48
2a02:348:60::/48 maxlen: 48
2a02:348:61::/48 maxlen: 48
2a02:348:62::/48 maxlen: 48
2a02:348:63::/48 maxlen: 48
2a02:348:6e::/48 maxlen: 48
2a02:348:6f::/48 maxlen: 48
2a02:348:70::/48 maxlen: 48
2a02:348:71::/48 maxlen: 48
2a02:348:73::/48 maxlen: 48
2a02:348:74::/48 maxlen: 48
2a02:348:75::/48 maxlen: 48
2a02:348:76::/48 maxlen: 48
2a02:348:77::/48 maxlen: 48
2a02:348:78::/48 maxlen: 48
2a02:348:79::/48 maxlen: 48
2a02:348:7b::/48 maxlen: 48
2a02:348:7c::/48 maxlen: 48
2a02:348:7d::/48 maxlen: 48
2a02:348:7e::/48 maxlen: 48
2a02:348:7f::/48 maxlen: 48
2a02:348:80::/43 maxlen: 48
2a02:348:80::/48 maxlen: 48
2a02:348:81::/48 maxlen: 48
2a02:348:82::/48 maxlen: 48
2a02:348:83::/48 maxlen: 48
2a02:348:84::/48 maxlen: 48
2a02:348:85::/48 maxlen: 48
2a02:348:86::/48 maxlen: 48
2a02:348:87::/48 maxlen: 48
2a02:348:88::/48 maxlen: 48
2a02:348:89::/48 maxlen: 48
2a02:348:8a::/48 maxlen: 48
2a02:348:8b::/48 maxlen: 48
2a02:348:8c::/48 maxlen: 48
2a02:348:8d::/48 maxlen: 48
2a02:348:8e::/48 maxlen: 48
2a02:348:8f::/48 maxlen: 48
2a02:348:90::/48 maxlen: 48
2a02:348:91::/48 maxlen: 48
2a02:348:92::/48 maxlen: 48
2a02:348:94::/48 maxlen: 48
2a02:348:95::/48 maxlen: 48
2a02:348:96::/48 maxlen: 48
2a02:348:97::/48 maxlen: 48
2a02:348:98::/48 maxlen: 48
2a02:348:99::/48 maxlen: 48
2a02:348:9a::/48 maxlen: 48
2a02:348:9b::/48 maxlen: 48
2a02:348:9c::/48 maxlen: 48
2a02:348:a0::/45 maxlen: 48
2a02:348:a0::/48 maxlen: 48
2a02:348:a1::/48 maxlen: 48
2a02:348:a2::/48 maxlen: 48
2a02:348:a3::/48 maxlen: 48
2a02:348:b0::/44 maxlen: 48
2a02:348:b1::/48 maxlen: 48
2a02:348:b2::/48 maxlen: 48
2a02:348:b3::/48 maxlen: 48
2a02:348:b4::/48 maxlen: 48
2a02:348:b9::/48 maxlen: 48
2a02:348:ba::/48 maxlen: 48
2a02:348:bb::/48 maxlen: 48
2a02:348:bc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 16:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e5:11:41:f6:06:8b:d3:ef:3e:ff:3d:10:cd:ee:a3:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Validity
Not Before: Jul 7 13:26:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd524775a9bded8852c9a37a1cc748c6ced7d760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:33:9a:f4:9c:e9:09:07:fe:00:39:21:9f:34:
56:21:f6:ea:35:91:a5:55:6c:24:7e:4a:42:ac:59:
a9:5f:58:77:33:f6:72:bd:87:1b:e6:0e:0e:97:1b:
92:8e:b7:0b:25:1d:8c:99:52:2f:cd:74:bc:1a:24:
46:d6:0a:f5:1f:e4:bf:ab:98:e8:f2:71:3e:6e:08:
89:f1:df:c0:5c:0f:62:8e:5b:f0:6d:74:ae:54:68:
6d:5a:cb:e8:86:c3:e7:36:ed:9a:7f:eb:14:75:1a:
e5:da:79:b3:7d:a3:b8:27:20:b9:16:2b:b7:44:db:
e5:fd:32:fd:d4:8f:b7:7b:da:f3:a0:eb:1b:65:98:
7f:2e:90:da:8d:55:31:e8:dc:c9:57:c1:da:14:36:
ed:00:8b:37:cf:1e:fb:1c:f6:d5:e0:82:7e:a7:9a:
4e:60:48:2c:f5:ee:49:7b:e1:b8:9b:1f:cc:98:bb:
32:f5:99:b2:8f:5d:e1:70:57:ef:f5:4e:0a:e0:95:
35:37:83:0c:fb:a6:ef:2a:24:7b:25:8e:74:98:16:
78:bd:35:12:e1:96:79:ca:2e:bc:14:1c:06:19:1e:
90:56:00:24:f2:d5:6f:aa:45:c7:b7:ee:67:0d:33:
8d:9f:84:21:ae:ee:57:f6:42:84:5e:1d:b1:9e:a5:
b7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:52:47:75:A9:BD:ED:88:52:C9:A3:7A:1C:C7:48:C6:CE:D7:D7:60
X509v3 Authority Key Identifier:
keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/zVJHdam97YhSyaN6HMdIxs7X12A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.248.0/21
31.3.96.0/22
31.3.101.0-31.3.103.255
31.14.96.0/22
37.34.48.0/20
37.97.128.0/17
37.230.96.0/21
77.72.144.0/21
79.170.88.0/24
79.170.90.0/23
79.170.93.0-79.170.95.255
80.69.64.0/19
84.247.8.0/21
85.10.128.0/19
85.222.228.0/22
86.105.244.0/22
87.253.128.0/19
89.31.96.0/23
89.31.100.0/24
89.31.102.0/23
89.41.168.0/22
91.142.254.0/23
93.119.0.0/20
93.191.128.0-93.191.133.255
95.170.64.0/19
141.138.136.0/21
141.138.192.0-141.138.206.255
149.210.128.0/17
178.18.80.0/20
185.10.48.0/22
185.21.188.0/22
185.96.4.0/22
185.108.112.0/22
188.240.52.0/22
188.241.148.0/22
193.138.204.0/24
195.8.195.0/24
195.135.195.0/24
IPv6:
2a01:7c8::/32
2a01:7860::/32
2a02:348:3::/48
2a02:348:33::/48
2a02:348:35::-2a02:348:36:ffff:ffff:ffff:ffff:ffff
2a02:348:39::-2a02:348:3b:ffff:ffff:ffff:ffff:ffff
2a02:348:40::-2a02:348:a7:ffff:ffff:ffff:ffff:ffff
2a02:348:b0::/44
Signature Algorithm: sha256WithRSAEncryption
04:20:44:c0:b0:ed:87:61:0c:03:07:1e:5d:dd:04:cf:4d:59:
b2:bb:2e:e1:21:7f:ea:bc:f7:e3:7c:8f:0e:e8:23:37:35:7c:
91:68:ca:e2:b1:5c:5c:92:03:3a:e1:e4:a7:e7:67:28:cd:4e:
e8:dc:79:4d:57:ee:2e:b2:e4:8c:bf:70:bc:55:e1:ee:f5:ad:
a7:0a:10:10:61:2d:0c:1c:f2:37:90:f3:15:d5:63:cc:5a:ab:
f7:77:65:97:33:e9:06:61:0a:df:d3:94:af:5e:67:e0:33:a8:
06:df:02:75:75:0a:0f:fd:95:bd:d2:dd:15:08:70:7c:47:82:
f7:b5:ba:3d:6d:57:04:9c:1e:b0:ae:21:61:73:4f:e7:b8:d3:
66:7b:34:0c:16:40:66:a8:1e:8f:df:ef:c3:69:ba:85:a3:9d:
3f:4f:c1:4d:05:fb:10:f7:dd:f5:2b:ae:a0:de:ba:54:4c:d6:
df:bd:1c:c1:04:ad:0e:ea:47:26:49:93:4c:6d:b9:53:74:ef:
64:96:e2:28:9c:53:0d:ef:5f:5e:47:91:10:6f:b1:f7:5c:21:
11:fb:b8:00:f6:bf:19:05:3c:ee:aa:ba:73:36:64:bb:81:17:
0e:29:6e:54:14:5c:9f:5b:de:b1:c5:90:06:91:fe:5d:a6:2e:
9e:c8:4a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:26:43 2025 by rpki-client