Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/zzlmCLmWYnGg9ZjYar01iK2FyUU.roa
File: zzlmCLmWYnGg9ZjYar01iK2FyUU.roa (raw, json)
Hash identifier: TL42wvO1bLGPbvJgdBTitkLNg97roEm6dPaEpnpjGYE=
Subject key identifier: CF:39:66:08:B9:96:62:71:A0:F5:98:D8:6A:BD:35:88:AD:85:C9:45
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0198F3FCB196667AF66403025426F1748304
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/zzlmCLmWYnGg9ZjYar01iK2FyUU.roa
Signing time: Fri 29 Aug 2025 04:01:20 +0000
ROA not before: Fri 29 Aug 2025 04:01:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5650
IP address blocks: 206.245.136.0/21 maxlen: 21
206.245.144.0/21 maxlen: 21
208.123.184.0/24 maxlen: 24
208.123.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f3:fc:b1:96:66:7a:f6:64:03:02:54:26:f1:74:83:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 29 04:01:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf396608b9966271a0f598d86abd3588ad85c945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ac:00:4d:2b:eb:fa:9c:33:3f:4b:f7:2a:7c:
f6:77:1f:b1:b8:64:2c:01:81:1e:02:b4:21:84:79:
dd:0f:de:2c:60:0d:84:60:5c:49:27:2d:f7:77:3d:
0c:cf:84:38:e0:45:3f:81:c6:69:af:69:ac:1b:db:
5f:b2:a8:15:cd:7e:0a:ab:06:9a:35:42:9d:55:f7:
26:dd:3b:43:b1:e6:d8:be:84:ca:cf:f3:22:2e:e0:
cc:be:19:61:46:d0:43:da:10:cb:26:e9:ef:9c:4f:
df:14:ce:39:fb:b1:f8:30:3f:67:41:20:70:d0:a1:
e6:c0:1f:4d:84:c1:11:e2:b6:48:dd:8b:5a:52:4b:
36:70:b8:ba:2c:8c:e7:10:23:16:20:24:9e:a8:a1:
1d:ab:12:73:c6:6b:ad:bf:cb:96:79:a5:ed:48:e8:
25:e4:46:16:cc:a8:f2:22:ad:6d:13:c8:df:08:27:
6a:5a:84:6a:91:79:1c:7e:46:1e:61:fb:c0:c3:f1:
1c:49:a7:d2:38:25:fc:38:2a:57:d3:71:54:d4:6d:
85:18:1f:97:75:d3:3b:f9:72:d6:a3:8e:b3:93:3e:
1a:14:00:5d:c5:f7:a5:4c:28:0a:5d:bf:d2:72:d0:
21:d7:b4:5f:f9:f5:44:41:8e:5d:95:3b:34:ce:53:
87:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:39:66:08:B9:96:62:71:A0:F5:98:D8:6A:BD:35:88:AD:85:C9:45
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/zzlmCLmWYnGg9ZjYar01iK2FyUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.245.136.0-206.245.151.255
208.123.184.0/24
208.123.186.0/24
Signature Algorithm: sha256WithRSAEncryption
05:b3:83:90:1a:75:ae:a6:fb:24:b9:ac:52:f4:58:bc:76:17:
2d:73:81:9c:41:ca:8f:89:2f:35:9d:fd:4b:56:78:d5:f9:85:
85:79:04:7f:82:77:3b:33:79:b4:9b:65:c0:fe:78:48:50:16:
04:1f:0d:c8:34:2a:ab:9b:00:3a:eb:26:4b:19:d4:65:06:51:
0b:d8:3d:3b:d5:b8:c4:0d:e0:dc:51:9c:02:11:65:e6:b7:55:
ba:e8:b3:8b:32:f8:f3:06:3d:1a:bb:39:14:42:3d:67:c5:a8:
54:d9:04:d0:04:30:6d:77:dd:d6:d9:77:b9:7b:17:6b:38:ce:
9f:66:42:18:99:ff:b9:f3:4d:f4:0c:42:96:31:84:56:53:b5:
0d:af:1d:9d:7a:3c:6a:eb:3f:f0:e8:a4:82:81:30:83:2f:26:
13:9d:43:2d:21:5a:e8:7a:12:bb:1b:ce:2c:e3:db:3e:18:37:
82:29:5c:4f:38:a3:0b:ef:58:a2:1f:0a:36:51:3a:05:fc:3a:
7d:ad:3b:a3:f1:6a:e8:77:79:38:a6:71:92:ac:23:ab:dc:bd:
25:e9:8e:96:ba:eb:9e:7c:2c:49:82:11:f3:33:06:67:eb:eb:
c6:04:ec:7e:2b:c1:63:79:d1:21:3b:d6:8f:ed:b3:c2:45:53:
23:a2:7c:b5
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZjz/LGWZnr2ZAMCVCbxdIMEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjUwODI5MDQwMTIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjM5NjYwOGI5OTY2MjcxYTBmNTk4ZDg2YWJkMzU4OGFkODVjOTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1awATSvr+pwzP0v3Knz2dx+xuGQs
AYEeArQhhHndD94sYA2EYFxJJy33dz0Mz4Q44EU/gcZpr2msG9tfsqgVzX4Kqwaa
NUKdVfcm3TtDsebYvoTKz/MiLuDMvhlhRtBD2hDLJunvnE/fFM45+7H4MD9nQSBw
0KHmwB9NhMER4rZI3YtaUks2cLi6LIznECMWICSeqKEdqxJzxmutv8uWeaXtSOgl
5EYWzKjyIq1tE8jfCCdqWoRqkXkcfkYeYfvAw/EcSafSOCX8OCpX03FU1G2FGB+X
ddM7+XLWo46zkz4aFABdxfelTCgKXb/SctAh17Rf+fVEQY5dlTs0zlOHpQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFM85Zgi5lmJxoPWY2Gq9NYithclFMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvenpsbUNMbVdZbkdnOVpqWWFyMDFpSzJGeVVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAPO9YgD
BAPO9ZADBADQe7gDBADQe7owDQYJKoZIhvcNAQELBQADggEBAAWzg5Aada6m+yS5
rFL0WLx2Fy1zgZxByo+JLzWd/UtWeNX5hYV5BH+CdzszebSbZcD+eEhQFgQfDcg0
KqubADrrJksZ1GUGUQvYPTvVuMQN4NxRnAIRZea3Vbros4sy+PMGPRq7ORRCPWfF
qFTZBNAEMG133dbZd7l7F2s4zp9mQhiZ/7nzTfQMQpYxhFZTtQ2vHZ16PGrrP/Do
pIKBMIMvJhOdQy0hWuh6Ersbzizj2z4YN4IpXE84owvvWKIfCjZROgX8On2tO6Px
auh3eTimcZKsI6vcvSXpjpa66558LEmCEfMzBmfr68YE7H4rwWN50SE71o/ts8JF
UyOifLU=
-----END CERTIFICATE-----
Generated at Fri Sep 5 05:56:13 2025 by rpki-client