Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/zk606_tA-z-IeZTHslWjd57DyoU.roa
File: zk606_tA-z-IeZTHslWjd57DyoU.roa (raw, json)
Hash identifier: OeeTCfdnHGAGbtMXpq4iRnyWATlD9GVuGnayUOxfrkU=
Subject key identifier: CE:4E:B4:EB:FB:40:FB:3F:88:79:94:C7:B2:55:A3:77:9E:C3:CA:85
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 01991650F965368E8965A7286D8CE9480DAC
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/zk606_tA-z-IeZTHslWjd57DyoU.roa
Signing time: Thu 04 Sep 2025 20:00:29 +0000
ROA not before: Thu 04 Sep 2025 20:00:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6079
IP address blocks: 9.142.0.0/16 maxlen: 16
9.142.160.0/19 maxlen: 19
138.226.32.0/20 maxlen: 20
138.226.80.0/21 maxlen: 21
138.226.120.0/21 maxlen: 21
138.226.128.0/18 maxlen: 18
158.120.49.0/24 maxlen: 24
158.120.51.0/24 maxlen: 24
158.120.53.0/24 maxlen: 24
158.120.55.0/24 maxlen: 24
158.120.57.0/24 maxlen: 24
158.120.59.0/24 maxlen: 24
158.120.61.0/24 maxlen: 24
158.120.63.0/24 maxlen: 24
192.46.184.0/21 maxlen: 21
192.46.184.0/22 maxlen: 22
192.46.188.0/24 maxlen: 24
192.46.200.0/22 maxlen: 22
192.53.64.0/22 maxlen: 22
192.53.68.0/22 maxlen: 22
192.53.136.0/22 maxlen: 22
192.53.140.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:50:f9:65:36:8e:89:65:a7:28:6d:8c:e9:48:0d:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Sep 4 20:00:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce4eb4ebfb40fb3f887994c7b255a3779ec3ca85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a6:b9:28:06:d4:5b:c8:70:e7:8d:c1:e3:c2:
48:84:f2:a9:df:d7:52:94:dc:ce:54:0a:0b:50:a2:
e1:c6:9c:ef:a3:e4:bd:d0:bc:c7:84:54:a3:f6:62:
a1:db:0f:25:c9:4c:a6:1b:d8:d6:27:a1:c9:23:31:
9a:54:6d:36:7b:08:c9:8f:cf:54:a0:a5:2c:7b:4a:
5d:74:5d:bb:43:99:c7:f1:0c:81:f4:cf:97:72:8a:
4c:d1:40:48:bd:16:70:fa:a2:68:04:b3:88:a7:65:
72:58:8a:44:cc:3b:53:35:77:b0:50:9b:2e:4d:a8:
08:a7:ef:93:e4:1d:40:2a:b6:24:de:58:0a:c3:46:
0d:b1:c7:75:fb:55:b7:d7:81:49:5e:cc:fa:d5:59:
6b:b0:de:b3:a2:c1:b1:cb:56:b7:a1:3d:5a:4a:01:
fd:ac:69:4a:b3:55:40:81:02:fe:57:8d:47:1c:58:
6f:ca:a9:41:44:6f:7e:b8:c0:d9:66:ed:8d:58:a8:
14:0b:0f:8d:a8:7e:b4:36:61:55:8a:5d:86:87:c0:
93:5c:9b:6b:c8:62:f5:30:8e:e2:9d:ff:fd:16:78:
a1:fa:bd:42:0e:3c:b7:29:81:bc:21:73:7f:e0:4e:
1c:f6:31:7d:d6:fc:cf:f2:21:80:a2:bc:a8:26:03:
d3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:4E:B4:EB:FB:40:FB:3F:88:79:94:C7:B2:55:A3:77:9E:C3:CA:85
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/zk606_tA-z-IeZTHslWjd57DyoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.142.0.0/16
138.226.32.0/20
138.226.80.0/21
138.226.120.0-138.226.191.255
158.120.49.0/24
158.120.51.0/24
158.120.53.0/24
158.120.55.0/24
158.120.57.0/24
158.120.59.0/24
158.120.61.0/24
158.120.63.0/24
192.46.184.0/21
192.46.200.0/22
192.53.64.0/21
192.53.136.0/21
Signature Algorithm: sha256WithRSAEncryption
15:cd:72:16:c9:94:c7:83:d4:70:2c:d2:3c:29:a0:d1:c6:0a:
14:5b:5f:a0:aa:29:3a:55:10:c5:17:65:35:b9:3a:81:48:0d:
9a:26:73:1c:0a:c0:a7:77:95:3a:50:a2:0f:b5:2b:02:a2:4c:
31:47:db:c2:7a:d0:fd:f3:3a:2e:8f:7a:90:53:03:6b:95:ff:
fb:ce:b4:db:68:fe:3b:52:22:e5:e0:10:95:2b:e8:c8:b2:bf:
fe:d0:10:b2:1d:7a:d1:84:ad:98:35:0f:aa:00:0d:1f:93:4f:
fd:7d:b1:a3:81:cd:71:c1:8a:bb:43:62:c2:b2:26:7c:24:27:
cf:e1:34:25:12:86:0d:e4:ad:a4:6a:17:77:be:4b:55:88:64:
c5:3c:77:75:01:b0:91:3f:7b:60:b8:17:2b:d5:23:40:93:a8:
60:a8:12:df:78:cb:a9:c1:08:59:c9:a0:12:90:08:01:e9:67:
d6:c4:a2:5e:0c:5e:06:d7:ec:4d:10:77:e4:f9:14:61:07:e2:
7f:37:74:52:e7:15:52:83:19:a3:93:34:70:66:f3:38:50:5f:
1b:aa:da:3b:2f:e6:80:d4:1b:45:53:c3:bb:b7:f9:6e:15:07:
be:ba:dd:2c:60:91:0d:5e:43:b3:a7:d9:81:a8:6d:f8:1c:f8:
44:b3:28:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 13:47:08 2025 by rpki-client