Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/ZTQZTuLauBHiGKTld9JnjezgqOg.roa
File: ZTQZTuLauBHiGKTld9JnjezgqOg.roa (raw, json)
Hash identifier: 65y7nBou84F4bzQFdYgr5T7QPfwypx7IoDskfxC/cVA=
Subject key identifier: 65:34:19:4E:E2:DA:B8:11:E2:18:A4:E5:77:D2:67:8D:EC:E0:A8:E8
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 019A000E77559E0D3C89E15C5882F4E489B4
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/ZTQZTuLauBHiGKTld9JnjezgqOg.roa
Signing time: Mon 20 Oct 2025 05:18:59 +0000
ROA not before: Mon 20 Oct 2025 05:18:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396356
IP address blocks: 5.182.184.0/24 maxlen: 24
78.31.207.0/24 maxlen: 24
104.232.37.0/24 maxlen: 24
162.218.92.0/24 maxlen: 24
162.218.94.0/24 maxlen: 24
185.187.213.0/24 maxlen: 24
185.205.207.0/24 maxlen: 24
185.230.120.0/24 maxlen: 24
2a0a:8f40:31::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:0e:77:55:9e:0d:3c:89:e1:5c:58:82:f4:e4:89:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Oct 20 05:18:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6534194ee2dab811e218a4e577d2678dece0a8e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:37:38:c9:27:8e:26:72:6b:77:f4:19:d4:ea:
7c:35:92:f3:9c:da:f2:c1:65:7c:a8:28:24:73:4d:
11:b4:d7:69:96:6b:56:08:1b:b7:14:d4:31:6b:58:
43:1c:28:b5:7e:cb:2f:a7:a5:5b:d3:bd:96:1d:a6:
67:f5:5c:f6:73:00:45:f5:34:c7:32:ec:e6:54:ef:
3f:43:36:52:f3:e4:8e:3d:f7:96:95:81:88:99:0e:
60:1c:46:0f:25:ea:d6:03:6a:86:8d:41:3d:7e:9c:
27:4e:f9:7f:fa:f4:ba:9b:13:ce:46:5e:d1:99:18:
cf:c7:fc:4b:40:79:6a:94:92:22:a3:56:0d:e1:02:
32:c2:43:22:6c:4f:17:24:a4:43:bf:f2:53:a9:5f:
39:47:0b:c0:84:7e:16:84:8c:2d:f8:04:2b:a8:b5:
70:4e:09:b3:b1:70:09:a1:66:4f:a8:e4:85:12:f0:
a7:c3:af:da:37:25:45:cd:81:6b:31:ce:c5:3c:1f:
43:77:b7:17:f9:0c:b8:ea:ad:6b:19:b1:81:c1:8e:
23:01:b7:75:b8:46:ad:8d:d3:05:e6:e9:af:a3:28:
79:45:3c:c1:65:6a:8d:8c:c1:9c:b5:76:7b:37:8a:
e5:73:1d:69:3d:8b:bb:28:b2:13:b6:72:5c:51:10:
a2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:34:19:4E:E2:DA:B8:11:E2:18:A4:E5:77:D2:67:8D:EC:E0:A8:E8
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/ZTQZTuLauBHiGKTld9JnjezgqOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.184.0/24
78.31.207.0/24
104.232.37.0/24
162.218.92.0/24
162.218.94.0/24
185.187.213.0/24
185.205.207.0/24
185.230.120.0/24
IPv6:
2a0a:8f40:31::/48
Signature Algorithm: sha256WithRSAEncryption
14:cc:50:17:f2:0e:c3:42:b6:c9:13:05:21:17:82:b8:63:db:
a0:7f:e6:11:c5:d3:b1:2c:9e:df:66:08:69:3d:1a:92:a8:25:
d0:46:a8:88:5e:85:6f:21:1d:f4:4d:63:3c:58:c6:9b:26:0d:
fb:56:66:d7:65:85:5c:00:08:c7:b8:fe:a0:64:78:97:7c:c1:
e6:0e:5c:74:38:dd:10:2d:0e:38:a9:16:79:62:cf:3b:d6:ab:
60:0f:97:41:88:03:10:89:a3:71:8b:af:81:ac:12:ac:19:aa:
0d:75:60:85:e4:30:a8:3e:f6:9d:f8:1f:ea:d3:55:69:fc:f3:
8c:1e:2a:fb:3e:37:d1:28:0b:f7:09:f8:b3:d2:75:d4:45:bc:
6e:e7:29:31:f6:23:f1:bf:30:be:25:cc:e7:cb:56:66:52:81:
9c:e7:80:c2:24:80:ea:7b:05:f0:97:4b:61:65:4a:fc:2e:c8:
d5:25:af:3e:10:2b:00:02:1c:a0:52:b1:04:8c:50:04:5d:06:
91:eb:e4:58:3f:c4:e3:da:27:57:67:f5:4d:b4:f1:f3:90:60:
82:df:c9:05:70:c6:1a:6e:8f:67:31:02:29:40:e3:38:4e:b0:
73:08:9c:d5:bc:e6:af:fb:39:20:15:97:a0:f5:21:f5:8f:52:
12:14:f5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 16:46:24 2025 by rpki-client