Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/ZhmjJZRo8Sbwc315ZOZw1TWufMc.roa
File: ZhmjJZRo8Sbwc315ZOZw1TWufMc.roa (raw, json)
Hash identifier: NK5M1wuv8SZ2zP40bZYi2MQNmp6KED1qYY75Icn9mak=
Subject key identifier: 66:19:A3:25:94:68:F1:26:F0:73:7D:79:64:E6:70:D5:35:AE:7C:C7
Certificate issuer: /CN=293e0cd8b3e044edb823aef688aafb0b75de8675
Certificate serial: 019A267AF472AC69CBC285445D676FD3004C
Authority key identifier: 29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/ZhmjJZRo8Sbwc315ZOZw1TWufMc.roa
Signing time: Mon 27 Oct 2025 16:23:03 +0000
ROA not before: Mon 27 Oct 2025 16:23:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208555
IP address blocks: 45.129.36.0/22 maxlen: 22
45.129.36.0/24 maxlen: 24
45.129.37.0/24 maxlen: 24
45.129.38.0/23 maxlen: 23
45.129.38.0/24 maxlen: 24
45.129.39.0/24 maxlen: 24
185.53.140.0/22 maxlen: 24
185.53.140.0/23 maxlen: 23
185.53.140.0/24 maxlen: 24
185.53.141.0/24 maxlen: 24
185.53.142.0/23 maxlen: 23
185.53.142.0/24 maxlen: 24
185.53.143.0/24 maxlen: 24
185.126.202.0/23 maxlen: 23
185.126.202.0/24 maxlen: 24
185.126.203.0/24 maxlen: 24
2a0a:2fc4::/64 maxlen: 64
2a0d:9680::/48 maxlen: 48
2a0e:4a40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:7a:f4:72:ac:69:cb:c2:85:44:5d:67:6f:d3:00:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=293e0cd8b3e044edb823aef688aafb0b75de8675
Validity
Not Before: Oct 27 16:23:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6619a3259468f126f0737d7964e670d535ae7cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:cf:69:69:45:21:a3:2f:c4:e9:7b:5f:c3:bd:
76:1e:19:b0:4f:52:a4:1f:f1:df:0b:3a:4b:be:b3:
70:5d:8a:b7:63:1c:0e:c7:fe:8c:7c:2d:4d:08:d1:
57:79:06:11:cf:11:4c:5a:42:d4:5e:33:78:36:4a:
d5:5a:4e:e7:0f:32:7b:61:23:38:30:7e:70:dc:c3:
35:e7:5c:ae:44:6c:ec:93:31:b7:17:1d:6b:a4:e9:
3e:c0:10:52:d7:2a:62:c0:b9:53:42:df:85:85:0a:
aa:39:35:8d:c2:bf:07:c5:15:f5:d6:9b:d3:0b:cf:
47:3b:5e:ae:87:6c:2f:09:06:48:f0:fd:a0:52:2b:
52:aa:49:fc:ee:ed:58:10:4e:b7:6c:18:5a:bf:7b:
a4:e7:ea:79:68:92:6c:18:84:63:89:55:e0:8b:bf:
be:7d:2d:a6:31:4c:9c:90:14:66:c4:aa:8e:24:dc:
b2:f2:af:84:05:51:cc:68:a3:d3:17:93:2b:72:17:
f1:bb:60:aa:1b:08:01:31:30:0e:0a:de:ec:80:31:
b2:f2:60:eb:b0:74:dd:10:0f:9e:36:cd:54:df:76:
78:4d:b4:5e:5b:db:bd:7b:01:80:76:a4:59:0a:73:
a5:77:f4:1d:48:7c:5c:cc:24:e0:f0:a2:24:02:3d:
d7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:19:A3:25:94:68:F1:26:F0:73:7D:79:64:E6:70:D5:35:AE:7C:C7
X509v3 Authority Key Identifier:
keyid:29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/ZhmjJZRo8Sbwc315ZOZw1TWufMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.36.0/22
185.53.140.0/22
185.126.202.0/23
IPv6:
2a0a:2fc4::/64
2a0d:9680::/48
2a0e:4a40::/29
Signature Algorithm: sha256WithRSAEncryption
37:24:da:f1:f9:c5:c5:2f:be:63:3c:c4:ee:4f:fd:ba:b1:53:
69:ec:b8:5d:9c:e1:71:1a:d2:8d:f9:8d:e3:6a:cd:91:38:49:
d4:50:2c:36:31:f5:60:fc:28:a2:ef:a1:5e:3d:e6:52:c4:2a:
53:4b:4c:0d:7b:54:ea:72:46:c5:d0:53:68:d3:1a:2f:e8:0d:
3c:db:f5:0c:37:2f:c5:a9:e7:be:92:b4:80:a7:cf:27:39:ff:
d2:14:89:43:8a:f2:d0:72:48:d0:24:0e:71:7b:ce:8e:8c:d5:
b0:ca:f9:dd:1d:c9:77:dc:65:cd:b4:60:e4:28:af:e6:c4:e8:
ad:7d:8b:a2:2f:a3:3f:09:c7:15:9f:fe:87:74:a1:82:9e:b5:
9d:36:34:5e:ed:e7:6b:68:6c:97:eb:11:de:ee:ad:21:aa:d6:
01:7e:26:30:77:5c:bb:30:3b:83:16:94:66:95:54:c5:82:45:
be:af:9c:62:18:01:ad:7b:0e:63:06:40:59:a4:36:24:ff:51:
d2:5e:f1:75:e5:8a:76:21:bd:ee:12:e2:fd:f0:3e:9c:0a:23:
68:97:a7:4e:2b:c5:aa:64:82:52:95:18:d2:ae:27:99:01:48:
50:e6:00:1f:48:22:4f:79:51:a8:58:8c:29:3c:60:87:56:3f:
f2:fb:61:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 21:39:58 2025 by rpki-client