Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/ZqlSlV8xEjtTIPrwJS75wdXWNMY.roa
File: ZqlSlV8xEjtTIPrwJS75wdXWNMY.roa (raw, json)
Hash identifier: IHSrkovQ51TOwmRPUF5AIxkAHRZYZBJiA4cpIYri+jU=
Subject key identifier: 66:A9:52:95:5F:31:12:3B:53:20:FA:F0:25:2E:F9:C1:D5:D6:34:C6
Certificate issuer: /CN=df3fdc4bf33bd80fe128d756843f60b39d5beee3
Certificate serial: 01981EA98FE94DBCD72C2FD889AB0EB61D61
Authority key identifier: DF:3F:DC:4B:F3:3B:D8:0F:E1:28:D7:56:84:3F:60:B3:9D:5B:EE:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/ZqlSlV8xEjtTIPrwJS75wdXWNMY.roa
Signing time: Fri 18 Jul 2025 17:51:25 +0000
ROA not before: Fri 18 Jul 2025 17:51:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40676
IP address blocks: 31.220.14.0/24 maxlen: 24
45.12.52.0/23 maxlen: 23
45.12.91.0/24 maxlen: 24
185.238.249.0/24 maxlen: 24
185.238.251.0/24 maxlen: 24
193.9.45.0/24 maxlen: 24
2a14:640:2::/48 maxlen: 48
2a14:640:3::/48 maxlen: 48
2a14:640:4::/48 maxlen: 48
2a14:640:5::/48 maxlen: 48
2a14:640:6::/48 maxlen: 48
2a14:640:7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 17:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:1e:a9:8f:e9:4d:bc:d7:2c:2f:d8:89:ab:0e:b6:1d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3fdc4bf33bd80fe128d756843f60b39d5beee3
Validity
Not Before: Jul 18 17:51:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66a952955f31123b5320faf0252ef9c1d5d634c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:63:42:3b:e3:44:f0:54:0f:c6:d3:84:ff:a0:
9a:f5:2c:24:c7:2c:14:98:69:a6:a8:f7:be:94:87:
d4:9b:fd:f1:fe:44:39:8b:ea:0e:12:52:b1:d9:e8:
6a:6c:b4:df:c5:fc:cf:11:c4:2d:93:2f:c9:7c:f7:
ff:20:67:30:91:c7:6a:d0:4c:80:e2:e6:2f:85:43:
b6:3f:a5:3d:8b:5d:b2:ae:82:ec:5f:46:f5:59:3b:
9d:1b:ad:85:76:27:e8:4c:3a:9c:27:61:90:b7:93:
14:59:f2:48:9d:d9:80:fb:c6:3a:87:3d:45:62:a1:
eb:2b:5c:01:7f:d6:d0:01:70:ca:81:60:20:a6:7a:
70:43:fe:19:3a:3e:cf:85:af:a0:b0:b8:99:97:bc:
76:71:b0:d1:fd:39:45:83:7c:c3:78:08:fd:65:fe:
71:f9:99:2c:90:44:6d:5a:c2:fa:15:88:73:c8:e5:
05:dd:b1:98:af:58:df:f8:37:d5:58:bc:84:65:cd:
ee:bc:21:11:9b:ff:8c:67:40:74:c7:9c:20:f2:d1:
ed:be:51:1b:e9:1b:38:a4:ec:7c:28:04:04:53:ea:
7b:e3:91:33:57:8a:51:93:72:fb:f6:1a:40:5b:91:
b5:54:af:d7:32:9c:1d:49:c9:d0:30:6a:17:26:af:
87:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A9:52:95:5F:31:12:3B:53:20:FA:F0:25:2E:F9:C1:D5:D6:34:C6
X509v3 Authority Key Identifier:
keyid:DF:3F:DC:4B:F3:3B:D8:0F:E1:28:D7:56:84:3F:60:B3:9D:5B:EE:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/ZqlSlV8xEjtTIPrwJS75wdXWNMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.220.14.0/24
45.12.52.0/23
45.12.91.0/24
185.238.249.0/24
185.238.251.0/24
193.9.45.0/24
IPv6:
2a14:640:2::-2a14:640:7:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
26:11:05:22:47:84:cf:b7:9c:77:9a:17:71:51:f0:0a:6c:90:
5b:2e:b1:e9:92:da:5c:bf:e6:11:4a:59:7e:14:30:ae:fa:45:
8a:4f:ae:3a:5e:3e:b4:31:02:1c:4f:56:74:9d:b6:bf:f1:a7:
52:ea:fb:18:2e:1f:d0:02:21:08:bc:a3:c9:fd:3f:e8:55:67:
0d:af:13:45:96:7e:91:75:f8:c5:45:d1:e5:ec:2e:fd:46:5a:
13:e7:9d:e7:e4:bc:20:bf:0c:78:db:b5:8d:ab:37:87:4f:cd:
94:d4:1c:0a:1f:07:f5:0d:4c:75:23:21:f8:b8:6d:dd:58:51:
cf:b6:51:31:ec:6a:cf:e4:85:05:51:8d:05:f8:dc:21:5a:dc:
28:3b:91:9b:25:01:04:62:03:39:b9:02:ae:27:4e:46:a3:a6:
72:77:2a:af:68:bd:fa:bf:09:5a:12:42:3f:c5:2c:84:13:4b:
2a:51:9d:a9:70:54:59:f9:72:13:fa:73:74:f1:8b:81:fb:72:
17:65:9a:16:98:17:ca:fb:8c:8f:37:27:a4:0f:d2:ae:37:15:
89:0e:84:3e:b1:b3:c2:30:9a:32:0a:f2:be:13:10:cd:d0:a0:
ad:14:8c:b4:de:f9:2c:d7:61:ed:8a:17:bc:55:b9:ed:1b:72:
88:a2:83:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:57:45 2025 by rpki-client