Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/zbCfBdVOZmhXGP9q4k4ZTrDsnIk.roa
File: zbCfBdVOZmhXGP9q4k4ZTrDsnIk.roa (raw, json)
Hash identifier: mLNKPxnYAjveMADBK3UXMnP5fduEwq6hy7Z6HfW/Mk8=
Subject key identifier: CD:B0:9F:05:D5:4E:66:68:57:18:FF:6A:E2:4E:19:4E:B0:EC:9C:89
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01990EFB5002728BFBCD41A52D1C9494C809
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/zbCfBdVOZmhXGP9q4k4ZTrDsnIk.roa
Signing time: Wed 03 Sep 2025 09:49:35 +0000
ROA not before: Wed 03 Sep 2025 09:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.8.21.0/24 maxlen: 24
45.90.17.0/24 maxlen: 24
45.131.134.0/24 maxlen: 24
185.108.204.0/24 maxlen: 24
185.126.82.0/24 maxlen: 24
185.199.54.0/24 maxlen: 24
185.206.251.0/24 maxlen: 24
185.209.38.0/24 maxlen: 24
185.209.73.0/24 maxlen: 24
185.209.74.0/24 maxlen: 24
185.209.75.0/24 maxlen: 24
185.210.233.0/24 maxlen: 24
185.210.235.0/24 maxlen: 24
185.214.108.0/24 maxlen: 24
185.218.20.0/24 maxlen: 24
185.218.101.0/24 maxlen: 24
185.220.248.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
185.222.28.0/24 maxlen: 24
185.222.29.0/24 maxlen: 24
185.223.80.0/24 maxlen: 24
185.223.155.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.225.1.0/24 maxlen: 24
185.225.2.0/24 maxlen: 24
185.225.3.0/24 maxlen: 24
185.226.104.0/24 maxlen: 24
185.226.107.0/24 maxlen: 24
185.227.144.0/24 maxlen: 24
185.227.146.0/23 maxlen: 24
185.227.147.0/24 maxlen: 24
185.228.75.0/24 maxlen: 24
185.232.206.0/24 maxlen: 24
185.246.112.0/24 maxlen: 24
193.8.112.0/23 maxlen: 24
193.8.112.0/24 maxlen: 24
193.8.114.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
193.58.146.0/24 maxlen: 24
194.5.64.0/24 maxlen: 24
194.5.67.0/24 maxlen: 24
194.76.169.0/24 maxlen: 24
194.76.172.0/24 maxlen: 24
194.124.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Sep 2025 21:38:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0e:fb:50:02:72:8b:fb:cd:41:a5:2d:1c:94:94:c8:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 3 09:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cdb09f05d54e66685718ff6ae24e194eb0ec9c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:66:11:62:5f:01:b2:cf:9d:cc:b9:13:49:d4:
87:8a:ab:7f:d5:ab:95:24:36:da:0a:e7:30:d1:b9:
1d:9c:3c:15:26:ab:49:2b:84:3b:6f:80:40:11:c6:
6b:b5:b4:ab:d4:cd:dc:89:8f:b2:81:28:14:cc:7b:
d6:3a:ac:43:e8:be:8e:40:7c:b6:e9:94:65:cf:47:
d1:c4:5d:44:e3:ca:91:9e:af:4b:69:12:be:61:b2:
09:23:d1:55:d7:93:f9:76:98:cb:4b:b8:2f:82:8b:
33:1f:b3:73:ca:aa:77:48:b9:a7:89:3f:61:a7:9d:
e4:d1:d0:76:ad:44:d8:db:25:37:49:fd:00:fa:8e:
e3:49:d8:d0:89:01:5c:2b:f2:81:34:36:3a:63:9d:
5f:88:91:42:d4:ee:b2:bb:b9:75:76:e0:5d:a4:2a:
3f:d4:3b:e4:7c:13:0c:0f:4d:d0:e8:6f:77:bd:d2:
6c:d4:ee:ca:5a:c5:2f:da:14:c6:7b:5d:f7:0a:86:
09:db:b3:45:55:9f:9b:8f:ca:a9:f0:2b:cf:6e:99:
3b:f7:66:67:9e:0c:82:bb:ec:88:9d:ec:23:a5:94:
4a:de:23:56:04:82:f3:ae:dc:81:65:6e:b3:0f:a5:
97:53:63:7e:3b:c0:ec:bc:ac:36:79:d1:40:fb:62:
03:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B0:9F:05:D5:4E:66:68:57:18:FF:6A:E2:4E:19:4E:B0:EC:9C:89
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/zbCfBdVOZmhXGP9q4k4ZTrDsnIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
45.90.17.0/24
45.131.134.0/24
185.108.204.0/24
185.126.82.0/24
185.199.54.0/24
185.206.251.0/24
185.209.38.0/24
185.209.73.0-185.209.75.255
185.210.233.0/24
185.210.235.0/24
185.214.108.0/24
185.218.20.0/24
185.218.101.0/24
185.220.248.0/24
185.220.250.0/23
185.222.28.0/23
185.223.80.0/24
185.223.155.0/24
185.225.0.0/22
185.226.104.0/24
185.226.107.0/24
185.227.144.0/24
185.227.146.0/23
185.228.75.0/24
185.232.206.0/24
185.246.112.0/24
193.8.112.0-193.8.114.255
193.58.146.0/23
194.5.64.0/24
194.5.67.0/24
194.76.169.0/24
194.76.172.0/24
194.124.69.0/24
Signature Algorithm: sha256WithRSAEncryption
19:3f:34:a0:d3:44:c5:89:7f:2e:a3:86:46:aa:d6:ab:5d:8f:
fd:f2:57:19:a9:de:24:a9:d5:9d:74:96:db:56:e9:ff:32:00:
e6:c2:69:42:3c:cf:b2:33:7f:2f:5a:3e:77:37:69:73:7d:3f:
71:70:d7:d3:c2:a1:f2:fb:10:b6:12:d6:fe:86:01:53:2a:ec:
33:21:ea:68:ec:09:91:db:e4:53:3c:a1:4a:a2:16:b5:16:60:
89:d1:97:87:ae:cd:0c:83:c8:c8:30:ee:32:02:5d:7c:e4:fe:
8d:21:e7:c1:92:e0:8f:7f:3d:bc:d9:a4:e5:d3:cf:23:d3:c9:
78:a0:88:4b:ce:39:c7:0d:da:a4:99:1e:c3:ba:da:34:9a:85:
ea:b9:6c:20:b0:d1:4d:42:dd:0a:6d:70:8e:f0:0d:82:35:95:
c5:25:aa:2e:1a:cb:d9:37:da:71:f6:5a:dd:dd:e8:fa:6a:bb:
e3:bb:14:6a:91:e9:e8:ae:ea:f5:38:e6:3b:49:74:5b:02:d2:
fd:e9:34:84:1d:55:4f:b5:eb:eb:ea:ac:e3:7a:65:9b:54:28:
e3:0b:3f:62:94:e4:35:f1:35:2b:30:a4:3e:f0:35:da:90:0b:
48:b4:38:ec:a0:e8:99:6b:6c:67:49:fd:3f:e1:35:f6:a2:41:
50:df:f9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 06:17:46 2025 by rpki-client