
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/zV4qWFhw7N3CXO_l3lOy78NSXJk.roa
File: zV4qWFhw7N3CXO_l3lOy78NSXJk.roa (raw, json)
Hash identifier: wClSxjfSbelC7YiY68Nq1qOVMPnHKjb+jQB6qS3Rb9Q=
Subject key identifier: CD:5E:2A:58:58:70:EC:DD:C2:5C:EF:E5:DE:53:B2:EF:C3:52:5C:99
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 01983174A96DF00290E4044014471BAD1575
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/zV4qWFhw7N3CXO_l3lOy78NSXJk.roa
Signing time: Tue 22 Jul 2025 09:26:25 +0000
ROA not before: Tue 22 Jul 2025 09:26:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207569
IP address blocks: 46.243.1.0/24 maxlen: 24
46.243.4.0/24 maxlen: 24
46.243.6.0/24 maxlen: 24
95.81.112.0/24 maxlen: 24
95.81.113.0/24 maxlen: 24
95.81.120.0/24 maxlen: 24
95.81.122.0/24 maxlen: 24
95.81.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:31:74:a9:6d:f0:02:90:e4:04:40:14:47:1b:ad:15:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Jul 22 09:26:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd5e2a585870ecddc25cefe5de53b2efc3525c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:de:ae:48:46:17:2a:a1:be:e4:ae:a5:da:e6:
c5:40:80:50:28:bf:17:e4:ca:9a:9d:3b:d8:cc:06:
58:2c:40:03:25:c5:63:18:fa:38:0c:00:ea:48:92:
28:d2:8e:93:02:62:d1:77:14:c7:8d:ec:20:92:34:
9c:0a:b1:01:26:17:d8:e1:ca:b2:d6:2f:cb:25:e6:
1e:5e:f7:bf:5a:38:27:0b:36:06:fe:63:07:ed:50:
eb:c8:e2:4f:06:41:c5:09:9c:43:87:e4:3f:c9:08:
34:0c:ef:9c:0f:fb:f0:63:16:a5:f8:70:a7:11:24:
46:0b:f2:3d:54:04:e9:53:59:a3:23:f3:92:19:e7:
a4:e9:10:98:bd:71:66:ab:50:12:4d:ae:1f:d3:13:
2f:6d:58:ba:d9:80:5f:29:b9:fa:18:80:80:10:60:
c7:6e:cd:dc:19:89:45:d2:f2:d0:43:e6:44:3b:d4:
68:7e:9b:70:e6:8a:94:29:b7:d8:d4:97:ab:12:6a:
7e:fc:42:25:42:d1:97:97:e9:86:4c:70:92:b4:e1:
6e:b8:24:dd:3e:55:51:62:79:84:7c:9f:f7:75:1c:
e3:b6:b5:1a:c6:58:48:8d:45:95:5b:f2:bb:68:08:
6c:d4:16:68:51:3e:43:b7:3e:bc:50:f6:38:93:26:
c3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:5E:2A:58:58:70:EC:DD:C2:5C:EF:E5:DE:53:B2:EF:C3:52:5C:99
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/zV4qWFhw7N3CXO_l3lOy78NSXJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.1.0/24
46.243.4.0/24
46.243.6.0/24
95.81.112.0/23
95.81.120.0/24
95.81.122.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:ed:a5:2a:36:47:bc:2f:a1:ee:d0:07:e3:bd:bb:f6:1a:59:
55:38:6e:c2:45:8c:af:26:65:5d:d7:df:16:7f:d6:54:54:0b:
3c:32:c1:7b:94:7f:c5:7f:a3:53:67:f9:90:70:da:8b:93:ae:
91:c5:38:ab:9f:b4:be:bf:59:06:6b:26:6d:87:21:25:cf:3c:
01:c1:51:12:36:58:f4:b7:dc:7b:b3:5d:90:27:ad:ce:0c:c6:
63:d3:71:dc:68:09:79:6a:c3:76:3a:91:df:42:eb:16:5b:9e:
15:81:64:ea:42:bd:72:61:44:20:94:ef:db:66:88:e8:d7:ac:
f9:bd:23:18:1f:b6:6e:c1:f5:32:31:c3:db:b8:ba:2d:72:01:
03:b6:d4:4b:52:7f:88:75:eb:8c:30:68:99:8b:a5:41:ea:5f:
ff:49:02:56:c9:0f:8b:2c:f8:02:66:7d:2d:25:56:35:f2:fc:
46:25:96:bc:99:10:54:89:b0:12:ee:5a:cf:9c:b7:32:3e:78:
a8:29:d7:9d:7c:1a:eb:f4:39:07:7a:8a:70:b3:04:e0:39:fa:
c3:9b:c2:8f:16:62:e4:a3:4b:23:fa:b1:94:46:88:6b:d7:7b:
40:fb:bb:d1:21:2b:14:9c:b2:32:83:b6:f5:48:ad:3c:de:45:
97:a6:03:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:20:34 2025 by rpki-client