Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/kza4BzO7mzHg574_1Eicw1sryow.roa
File: kza4BzO7mzHg574_1Eicw1sryow.roa (raw, json)
Hash identifier: T/X2stycZnJ66mhbGAsW7v/HLZ/en6oPqkycFGz/g/k=
Subject key identifier: 93:36:B8:07:33:BB:9B:31:E0:E7:BE:3F:D4:48:9C:C3:5B:2B:CA:8C
Certificate issuer: /CN=f53353f368dd801cd6102232dfa1cea69dd8cb6c
Certificate serial: 0197E9322BE883E23B20C4ABFA5CAEC56771
Authority key identifier: F5:33:53:F3:68:DD:80:1C:D6:10:22:32:DF:A1:CE:A6:9D:D8:CB:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TNT82jdgBzWECIy36HOpp3Yy2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/kza4BzO7mzHg574_1Eicw1sryow.roa
Signing time: Tue 08 Jul 2025 08:41:08 +0000
ROA not before: Tue 08 Jul 2025 08:41:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200456
IP address blocks: 185.71.216.0/24 maxlen: 24
185.71.217.0/24 maxlen: 24
185.71.218.0/24 maxlen: 24
185.71.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/9TNT82jdgBzWECIy36HOpp3Yy2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e9:32:2b:e8:83:e2:3b:20:c4:ab:fa:5c:ae:c5:67:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f53353f368dd801cd6102232dfa1cea69dd8cb6c
Validity
Not Before: Jul 8 08:41:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9336b80733bb9b31e0e7be3fd4489cc35b2bca8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4d:e4:61:8e:2b:17:73:fe:0b:0f:8b:db:32:
f4:39:ec:2d:9c:a2:de:25:37:c6:82:bc:27:95:26:
35:ab:f6:c9:99:46:f0:7c:78:2e:f0:3e:95:18:41:
6d:c9:43:8a:9e:17:fa:64:9b:75:20:7f:4b:ef:cd:
cc:2c:d7:90:ed:5d:00:79:46:80:ba:d7:bc:58:32:
06:1c:16:d8:e5:c1:16:eb:fc:5f:28:df:0d:e0:fa:
d3:ee:58:fe:47:0d:e9:40:2c:be:99:4b:f9:f9:dc:
9d:88:bd:ed:2a:90:f0:5b:5d:79:8e:90:d9:ed:e0:
da:c7:74:63:fd:cd:3b:00:e3:11:7d:6f:11:34:85:
b8:7e:d1:d5:50:7f:c8:ec:9d:d8:8f:87:dd:4c:eb:
8e:8d:3e:57:4c:36:ce:ca:5c:af:7a:ce:d7:b2:16:
6d:18:91:a5:8f:d4:bb:51:2c:48:98:5a:89:b8:3d:
97:74:53:57:df:62:67:4d:22:ad:ba:4a:86:4b:5e:
74:9a:ec:0f:34:8e:65:12:ab:6c:74:d9:a1:4f:53:
21:e7:86:41:84:f3:a4:af:b6:87:56:26:a6:80:b6:
69:bb:9f:e0:63:21:1b:b6:fb:08:73:15:6a:35:ca:
78:5c:ec:c9:6f:9e:6f:d2:a0:0f:6b:95:da:85:96:
9b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:36:B8:07:33:BB:9B:31:E0:E7:BE:3F:D4:48:9C:C3:5B:2B:CA:8C
X509v3 Authority Key Identifier:
keyid:F5:33:53:F3:68:DD:80:1C:D6:10:22:32:DF:A1:CE:A6:9D:D8:CB:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TNT82jdgBzWECIy36HOpp3Yy2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/kza4BzO7mzHg574_1Eicw1sryow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.216.0/22
Signature Algorithm: sha256WithRSAEncryption
88:b5:bb:4b:7e:bb:82:db:72:be:b0:2d:29:a5:23:cc:4b:9c:
7e:3e:e5:62:86:31:bc:e9:37:e8:87:61:d8:df:35:ed:15:d1:
ff:30:85:18:6c:6c:f1:99:80:b3:17:2c:cf:27:1a:05:d9:7a:
7f:de:32:9c:e9:29:b0:6a:66:21:54:ab:6c:5e:e1:6e:21:a5:
5f:e7:4a:d6:10:08:c9:70:0e:1d:59:09:0c:a2:b2:cb:03:8a:
4d:15:33:ff:fa:20:ab:54:11:30:ae:e6:75:1c:fb:e3:b1:3c:
e9:a8:b6:f2:13:8c:b6:13:a8:7b:a9:13:57:cf:30:1a:d8:dd:
e0:c3:4b:83:bd:e3:3b:0e:96:95:07:d3:5d:52:b4:99:77:e6:
a7:df:59:4d:ab:94:77:a8:58:48:bc:16:93:ca:6d:92:3c:c7:
df:ba:38:b9:27:c4:b7:71:15:64:cd:a7:0e:2a:38:0f:22:0e:
20:e4:cc:80:29:35:16:0a:ba:2e:2c:07:8a:cd:97:83:ff:ad:
17:c6:2f:06:89:60:11:78:be:7c:3f:e7:11:1a:9a:73:ad:ba:
21:49:73:d4:4f:aa:9e:d4:d1:b7:8f:6b:ea:b9:33:54:3b:c5:
73:47:3f:c7:5c:fd:da:c0:42:51:e3:25:cd:1d:ba:aa:f0:6f:
58:c6:ca:3f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZfpMivog+I7IMSr+lyuxWdxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MzM1M2YzNjhkZDgwMWNkNjEwMjIzMmRmYTFjZWE2OWRk
OGNiNmMwHhcNMjUwNzA4MDg0MTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzM2YjgwNzMzYmI5YjMxZTBlN2JlM2ZkNDQ4OWNjMzViMmJjYThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArU3kYY4rF3P+Cw+L2zL0OewtnKLe
JTfGgrwnlSY1q/bJmUbwfHgu8D6VGEFtyUOKnhf6ZJt1IH9L783MLNeQ7V0AeUaA
ute8WDIGHBbY5cEW6/xfKN8N4PrT7lj+Rw3pQCy+mUv5+dydiL3tKpDwW115jpDZ
7eDax3Rj/c07AOMRfW8RNIW4ftHVUH/I7J3Yj4fdTOuOjT5XTDbOylyves7XshZt
GJGlj9S7USxImFqJuD2XdFNX32JnTSKtukqGS150muwPNI5lEqtsdNmhT1Mh54ZB
hPOkr7aHViamgLZpu5/gYyEbtvsIcxVqNcp4XOzJb55v0qAPa5XahZabfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJM2uAczu5sx4Oe+P9RInMNbK8qMMB8GA1UdIwQY
MBaAFPUzU/No3YAc1hAiMt+hzqad2MtsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVROVDgyamRnQnpXRUNJeTM2SE9wcDNZeTJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9iODA5N2EtNGVlZC00NjNiLWI2NWEt
MGVjN2VjYjI1MDMwLzEva3phNEJ6TzdtekhnNTc0XzFFaWN3MXNyeW93LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9iODA5N2EtNGVlZC00NjNiLWI2NWEtMGVjN2VjYjI1MDMw
LzEvOVROVDgyamRnQnpXRUNJeTM2SE9wcDNZeTJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUfYMA0G
CSqGSIb3DQEBCwUAA4IBAQCItbtLfruC23K+sC0ppSPMS5x+PuVihjG86Tfoh2HY
3zXtFdH/MIUYbGzxmYCzFyzPJxoF2Xp/3jKc6SmwamYhVKtsXuFuIaVf50rWEAjJ
cA4dWQkMorLLA4pNFTP/+iCrVBEwruZ1HPvjsTzpqLbyE4y2E6h7qRNXzzAa2N3g
w0uDveM7DpaVB9NdUrSZd+an31lNq5R3qFhIvBaTym2SPMffuji5J8S3cRVkzacO
KjgPIg4g5MyAKTUWCrouLAeKzZeD/60Xxi8GiWAReL58P+cRGppzrbohSXPUT6qe
1NG3j2vquTNUO8VzRz/HXP3awEJR4yXNHbqq8G9Yxso/
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:17:32 2025 by rpki-client