Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1zVUO6MBZLUFKx5YTcQ1srUmDWc.roa
File: 1zVUO6MBZLUFKx5YTcQ1srUmDWc.roa (raw, json)
Hash identifier: kzTimAfRtMm6uiCJmEH6P/AUvD+EcdMyAoI7oNlgYsM=
Subject key identifier: D7:35:54:3B:A3:01:64:B5:05:2B:1E:58:4D:C4:35:B2:B5:26:0D:67
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0198F4C487D396D1F9B80B75FE7F5CD38668
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1zVUO6MBZLUFKx5YTcQ1srUmDWc.roa
Signing time: Fri 29 Aug 2025 07:39:37 +0000
ROA not before: Fri 29 Aug 2025 07:39:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 80.96.44.0/23 maxlen: 24
80.96.54.0/23 maxlen: 24
80.96.90.0/23 maxlen: 23
80.96.102.0/23 maxlen: 24
80.96.156.0/22 maxlen: 24
80.96.236.0/23 maxlen: 23
80.97.40.0/21 maxlen: 24
80.97.96.0/23 maxlen: 24
81.180.94.0/23 maxlen: 23
81.180.98.0/23 maxlen: 24
81.180.174.0/23 maxlen: 24
81.180.228.0/23 maxlen: 24
81.180.254.0/23 maxlen: 24
81.181.14.0/23 maxlen: 24
81.181.26.0/23 maxlen: 24
81.181.68.0/23 maxlen: 24
81.181.72.0/23 maxlen: 24
81.181.104.0/21 maxlen: 24
85.120.84.0/23 maxlen: 24
85.121.168.0/22 maxlen: 24
85.121.232.0/21 maxlen: 24
85.122.124.0/22 maxlen: 24
85.122.231.0/24 maxlen: 24
193.226.76.0/22 maxlen: 24
194.102.36.0/22 maxlen: 24
194.102.148.0/23 maxlen: 24
194.102.160.0/23 maxlen: 24
194.102.174.0/23 maxlen: 24
194.102.180.0/22 maxlen: 24
194.102.224.0/22 maxlen: 24
194.105.12.0/22 maxlen: 24
194.153.225.0/24 maxlen: 24
194.153.230.0/23 maxlen: 24
194.153.244.0/23 maxlen: 24
217.156.16.0/23 maxlen: 24
217.156.48.0/22 maxlen: 24
217.156.94.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 00:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f4:c4:87:d3:96:d1:f9:b8:0b:75:fe:7f:5c:d3:86:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Aug 29 07:39:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d735543ba30164b5052b1e584dc435b2b5260d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:de:b9:e1:6a:7a:9c:d9:73:da:66:14:46:8a:
69:5d:1e:59:2b:82:dd:0f:35:d8:46:e0:09:30:21:
f7:bd:95:06:e5:5a:4d:bc:53:e2:b3:68:98:b5:b1:
4c:5e:3a:12:2d:03:d5:9d:55:20:c7:7b:9c:5d:aa:
6f:c2:c3:39:37:c6:14:e4:24:82:bb:f4:bb:52:05:
e2:07:a0:d5:1b:19:1f:05:e6:f2:1a:5c:5f:3b:76:
c9:e4:3d:a1:da:66:8d:fd:c7:25:9d:e0:47:43:34:
fc:21:0a:a3:b1:59:8b:e1:36:b0:e2:be:00:4a:fd:
af:2b:03:4a:9a:01:5e:3e:1e:dc:f1:d6:3f:c5:05:
8e:90:28:11:02:5c:20:1b:88:76:14:57:2d:7c:35:
0b:6e:db:55:d8:2a:05:e3:f7:f2:4b:28:26:78:2b:
63:fe:17:42:ea:ec:9c:a9:da:a7:91:79:7f:ba:c5:
c0:a5:33:9c:73:9b:7a:06:b0:25:3b:a0:da:33:0b:
b5:a9:cc:28:0d:c9:e8:e2:c6:7e:67:32:e0:cb:0f:
5f:58:cc:7d:5a:c1:07:95:37:b5:0a:b3:79:98:ab:
c3:78:e7:80:5d:6a:e4:23:52:5e:49:67:e3:1a:d0:
6c:8e:48:45:40:01:62:ed:54:58:4f:0a:fb:37:d8:
eb:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:35:54:3B:A3:01:64:B5:05:2B:1E:58:4D:C4:35:B2:B5:26:0D:67
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1zVUO6MBZLUFKx5YTcQ1srUmDWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.44.0/23
80.96.54.0/23
80.96.90.0/23
80.96.102.0/23
80.96.156.0/22
80.96.236.0/23
80.97.40.0/21
80.97.96.0/23
81.180.94.0/23
81.180.98.0/23
81.180.174.0/23
81.180.228.0/23
81.180.254.0/23
81.181.14.0/23
81.181.26.0/23
81.181.68.0/23
81.181.72.0/23
81.181.104.0/21
85.120.84.0/23
85.121.168.0/22
85.121.232.0/21
85.122.124.0/22
85.122.231.0/24
193.226.76.0/22
194.102.36.0/22
194.102.148.0/23
194.102.160.0/23
194.102.174.0/23
194.102.180.0/22
194.102.224.0/22
194.105.12.0/22
194.153.225.0/24
194.153.230.0/23
194.153.244.0/23
217.156.16.0/23
217.156.48.0/22
217.156.94.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:bd:8c:c5:70:03:a9:ad:bc:23:53:94:0b:7d:30:cc:8f:a3:
93:a1:6d:6e:0d:a8:a0:eb:aa:43:68:ea:27:96:55:63:2a:b5:
ac:9d:8a:59:42:45:90:2f:9f:9e:81:51:8e:16:f5:ff:31:a2:
31:0a:2b:99:87:71:72:d9:cd:a7:38:93:c7:39:17:3a:e8:6e:
c2:8c:37:0a:c1:28:e3:75:f2:b8:56:5f:70:45:17:a5:cc:47:
67:d3:c6:b0:c2:52:99:7a:de:3d:8f:21:9d:af:c4:f8:d8:69:
bb:5c:10:b5:1b:27:d3:65:d1:1d:22:0a:5e:e8:56:8b:04:cd:
4d:4d:10:f0:3a:20:62:e5:ca:99:94:61:4d:e1:d0:03:11:80:
ba:e2:67:47:5c:f5:9b:58:2c:07:1c:21:d2:31:02:88:c6:02:
d5:3a:ea:67:4a:1e:32:68:39:cc:ac:36:06:89:cd:6e:73:4b:
85:1f:cb:6d:32:b1:96:4b:54:ff:89:80:41:ea:6e:ad:e4:6c:
20:46:08:d3:18:d3:a9:4f:6e:6c:2f:05:42:59:94:7b:4f:56:
0d:25:49:e2:d7:8a:d4:69:32:ba:b9:11:88:e2:8d:42:75:a4:
c5:a2:00:c3:20:f4:2c:58:e4:d5:17:d7:0c:57:c0:d0:7b:0f:
35:e7:15:bc
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgISAZj0xIfTltH5uAt1/n9c04ZoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjUwODI5MDczOTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzM1NTQzYmEzMDE2NGI1MDUyYjFlNTg0ZGM0MzViMmI1MjYwZDY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkN654Wp6nNlz2mYURoppXR5ZK4Ld
DzXYRuAJMCH3vZUG5VpNvFPis2iYtbFMXjoSLQPVnVUgx3ucXapvwsM5N8YU5CSC
u/S7UgXiB6DVGxkfBebyGlxfO3bJ5D2h2maN/cclneBHQzT8IQqjsVmL4Taw4r4A
Sv2vKwNKmgFePh7c8dY/xQWOkCgRAlwgG4h2FFctfDULbttV2CoF4/fySygmeCtj
/hdC6uycqdqnkXl/usXApTOcc5t6BrAlO6DaMwu1qcwoDcno4sZ+ZzLgyw9fWMx9
WsEHlTe1CrN5mKvDeOeAXWrkI1JeSWfjGtBsjkhFQAFi7VRYTwr7N9jrcQIDAQAB
o4IC5jCCAuIwHQYDVR0OBBYEFNc1VDujAWS1BSseWE3ENbK1Jg1nMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvMXpWVU82TUJaTFVGS3g1WVRjUTFzclVtRFdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIH7BggrBgEFBQcBBwEB/wSB6zCB6DCB5QQCAAEwgd4DBAFQ
YCwDBAFQYDYDBAFQYFoDBAFQYGYDBAJQYJwDBAFQYOwDBANQYSgDBAFQYWADBAFR
tF4DBAFRtGIDBAFRtK4DBAFRtOQDBAFRtP4DBAFRtQ4DBAFRtRoDBAFRtUQDBAFR
tUgDBANRtWgDBAFVeFQDBAJVeagDBANVeegDBAJVenwDBABVeucDBALB4kwDBALC
ZiQDBAHCZpQDBAHCZqADBAHCZq4DBALCZrQDBALCZuADBALCaQwDBADCmeEDBAHC
meYDBAHCmfQDBAHZnBADBALZnDADBAHZnF4wDQYJKoZIhvcNAQELBQADggEBAHq9
jMVwA6mtvCNTlAt9MMyPo5OhbW4NqKDrqkNo6ieWVWMqtaydillCRZAvn56BUY4W
9f8xojEKK5mHcXLZzac4k8c5FzrobsKMNwrBKON18rhWX3BFF6XMR2fTxrDCUpl6
3j2PIZ2vxPjYabtcELUbJ9Nl0R0iCl7oVosEzU1NEPA6IGLlypmUYU3h0AMRgLri
Z0dc9ZtYLAccIdIxAojGAtU66mdKHjJoOcysNgaJzW5zS4Ufy20ysZZLVP+JgEHq
bq3kbCBGCNMY06lPbmwvBUJZlHtPVg0lSeLXitRpMrq5EYjijUJ1pMWiAMMg9CxY
5NUX1wxXwNB7DzXnFbw=
-----END CERTIFICATE-----
Generated at Fri Sep 5 05:52:43 2025 by rpki-client