Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/ZlfJVHTaxlQ14qr6f59VEATMQMg.roa
File: ZlfJVHTaxlQ14qr6f59VEATMQMg.roa (raw, json)
Hash identifier: kCmxAUvmHsDqUetuxWchAg7DF0yBJAhQalecPB3wyW0=
Subject key identifier: 66:57:C9:54:74:DA:C6:54:35:E2:AA:FA:7F:9F:55:10:04:CC:40:C8
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 0198E114FCD1DA260C6F2B984FA0D8394C69
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/ZlfJVHTaxlQ14qr6f59VEATMQMg.roa
Signing time: Mon 25 Aug 2025 11:55:05 +0000
ROA not before: Mon 25 Aug 2025 11:55:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34295
IP address blocks: 46.10.217.0/24 maxlen: 24
62.176.118.0/24 maxlen: 24
87.126.120.0/22 maxlen: 24
90.154.144.0/21 maxlen: 24
90.154.152.0/22 maxlen: 22
90.154.152.0/24 maxlen: 24
90.154.153.0/24 maxlen: 24
90.154.154.0/24 maxlen: 24
90.154.155.0/24 maxlen: 24
95.43.128.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e1:14:fc:d1:da:26:0c:6f:2b:98:4f:a0:d8:39:4c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Aug 25 11:55:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6657c95474dac65435e2aafa7f9f551004cc40c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:fd:b2:d2:74:3c:8f:04:b6:47:33:78:36:82:
73:a6:15:05:ee:71:27:47:cf:9b:f4:47:f9:b2:3a:
0c:45:70:57:a6:44:38:3d:2c:69:34:23:8f:46:38:
0a:e5:98:1c:46:c7:60:9c:b2:8e:dd:1e:74:17:43:
9b:61:e3:76:a6:57:e7:2d:08:0c:22:60:23:93:0d:
b8:01:3c:58:e0:28:43:4f:37:44:51:6a:bf:0c:22:
e7:aa:58:19:f5:7d:0e:42:59:4f:be:9d:4c:b6:a4:
1c:06:a2:f6:3d:e6:6c:17:24:43:3c:17:d4:93:37:
6b:7c:15:97:22:8e:63:7e:cb:e2:5e:f7:cb:67:e7:
81:3c:a0:e9:06:cb:2f:de:df:bc:1f:4b:f9:ec:37:
d8:d5:e3:0f:aa:4e:7a:91:3b:b1:3f:2f:c8:16:72:
b5:ba:16:29:33:49:a7:3f:28:a3:90:4b:3a:ec:dc:
37:52:2c:3b:ec:05:e9:e9:61:f3:af:8b:6f:be:cc:
e6:2e:9e:73:05:70:5a:42:3a:f1:ab:42:6c:57:0e:
82:79:a6:7a:71:c6:21:6c:53:e2:8e:c3:7d:1b:60:
52:0b:6e:c1:90:89:28:1f:29:36:71:49:32:e6:ae:
3e:19:3c:96:ce:ff:d2:98:54:3a:9b:df:52:46:46:
f3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:57:C9:54:74:DA:C6:54:35:E2:AA:FA:7F:9F:55:10:04:CC:40:C8
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/ZlfJVHTaxlQ14qr6f59VEATMQMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.10.217.0/24
62.176.118.0/24
87.126.120.0/22
90.154.144.0-90.154.155.255
95.43.128.0/20
Signature Algorithm: sha256WithRSAEncryption
4c:4d:47:1f:df:7f:83:a4:67:47:69:a0:0b:40:ac:69:0c:a8:
bf:34:3b:56:bf:f6:33:c2:c3:5f:68:a9:14:73:3b:c2:f6:ee:
db:6c:5a:23:e5:1a:96:89:95:34:04:0a:6e:55:3a:32:f0:3e:
c0:b3:be:3c:6d:75:db:2b:4c:ee:0a:e6:ed:fc:ab:97:b7:88:
3b:ec:e0:21:a1:b0:fa:77:dc:66:4e:ac:88:b0:b2:2d:d1:cb:
10:ed:c9:cc:2d:db:e9:29:4b:c5:c8:0f:18:30:e6:8d:69:b6:
6a:66:7b:9d:d0:1e:59:69:30:5f:7e:15:9b:69:18:41:37:70:
64:c9:dc:69:a1:4f:ba:e9:6d:6e:5e:85:35:74:fc:12:15:6e:
30:df:65:7e:e8:5f:b3:9c:13:fa:83:61:ce:e5:a1:a3:cc:9f:
e1:51:1c:7f:0e:b4:13:5d:02:c2:d0:45:78:cb:11:fa:ba:3b:
21:94:f7:ff:29:ff:fa:ea:33:11:24:a8:19:09:0c:8c:bf:3d:
d2:d0:ea:c0:90:18:5d:ef:c8:fc:9e:a1:2a:6c:80:50:0d:dc:
5d:5e:d5:9c:ea:82:03:08:e9:88:9f:65:06:6e:84:13:f1:ff:
0e:1b:aa:b1:12:03:09:d8:68:74:bb:32:e6:03:a9:c1:23:dd:
16:d6:ea:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 06:14:43 2025 by rpki-client