Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/Sz-b4-QbhIC7xDSO3GZPl02NDx0.roa
File: Sz-b4-QbhIC7xDSO3GZPl02NDx0.roa (raw, json)
Hash identifier: K++hh01f53GwzwelKdiUa6NMrdylOFTSKN76htrbTUo=
Subject key identifier: 4B:3F:9B:E3:E4:1B:84:80:BB:C4:34:8E:DC:66:4F:97:4D:8D:0F:1D
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01992932F763A975E49CB4B50D2E2B7DE0D2
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/Sz-b4-QbhIC7xDSO3GZPl02NDx0.roa
Signing time: Mon 08 Sep 2025 12:00:29 +0000
ROA not before: Mon 08 Sep 2025 12:00:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209737
IP address blocks: 5.180.105.0/24 maxlen: 24
5.180.106.0/24 maxlen: 24
5.180.107.0/24 maxlen: 24
45.131.0.0/24 maxlen: 24
45.136.4.0/24 maxlen: 24
45.141.148.0/24 maxlen: 24
45.141.149.0/24 maxlen: 24
45.147.44.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
77.83.203.0/24 maxlen: 24
194.116.228.0/24 maxlen: 24
194.116.236.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
194.146.36.0/24 maxlen: 24
194.146.47.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
2a0f:b700::/29 maxlen: 29
2a0f:e900::/29 maxlen: 29
2a0f:eb00::/29 maxlen: 29
2a0f:eb00::/32 maxlen: 32
2a0f:eb07::/32 maxlen: 32
2a0f:ed00::/29 maxlen: 29
2a0f:ed03::/32 maxlen: 32
2a0f:f900::/29 maxlen: 29
2a13:a440:7::/48 maxlen: 48
2a13:a441::/32 maxlen: 32
2a13:a445::/32 maxlen: 32
2a13:a447::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:29:32:f7:63:a9:75:e4:9c:b4:b5:0d:2e:2b:7d:e0:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Sep 8 12:00:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b3f9be3e41b8480bbc4348edc664f974d8d0f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:42:b4:36:03:db:cf:02:39:bb:e7:c1:6c:4f:
88:b7:34:31:d7:01:91:4d:7f:66:32:91:cd:d2:54:
83:13:52:a8:3e:d6:82:10:1d:c3:7e:3f:8f:df:28:
ba:37:2a:f8:33:d0:3d:03:61:c7:ff:c7:f1:a7:f2:
f5:00:90:c6:42:81:45:8d:42:0e:a4:36:d8:b0:40:
e1:e2:18:75:13:07:be:93:40:30:28:f5:74:07:8e:
a0:3e:ca:67:11:52:27:c4:f9:bb:9d:f2:1a:fa:c3:
05:9f:ce:bb:34:7a:c8:48:c3:ae:a3:a1:79:a0:c9:
d9:d9:f2:80:b4:89:94:9e:ec:09:a9:d9:fa:bc:ca:
d9:09:b8:aa:fb:3c:08:d4:a1:38:50:eb:38:61:7f:
8b:bc:9e:0e:21:5c:76:01:d4:59:09:a9:88:79:2b:
37:3d:6d:72:46:fd:38:6a:41:e9:57:6c:86:1a:3c:
9f:51:10:76:fa:27:08:28:11:a5:09:d8:96:f5:3d:
10:7f:6e:2e:09:8c:a3:98:13:40:ef:d5:a3:b0:8b:
b1:03:4c:6f:11:52:28:e6:26:43:5c:6f:2a:29:5c:
7d:d5:04:db:d2:bd:a6:50:a1:0a:66:46:cf:08:c1:
b2:d2:2d:b7:09:5d:b9:d3:e1:81:45:45:4e:17:99:
09:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3F:9B:E3:E4:1B:84:80:BB:C4:34:8E:DC:66:4F:97:4D:8D:0F:1D
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/Sz-b4-QbhIC7xDSO3GZPl02NDx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.105.0-5.180.107.255
45.131.0.0/24
45.136.4.0/24
45.141.148.0/23
45.147.44.0/24
77.83.200.0/22
194.116.228.0/24
194.116.236.0/23
194.146.36.0/24
194.146.47.0/24
IPv6:
2a09:8780::/29
2a0f:b700::/29
2a0f:e900::/29
2a0f:eb00::/29
2a0f:ed00::/29
2a0f:f900::/29
2a13:a440:7::/48
2a13:a441::/32
2a13:a445::/32
2a13:a447::/32
Signature Algorithm: sha256WithRSAEncryption
45:a7:a4:bc:0b:45:fc:64:dd:d9:c5:df:cf:48:20:07:be:1f:
a5:36:28:05:0d:4c:a5:46:1a:54:22:c6:4c:1a:d1:01:cd:3d:
65:04:32:56:52:49:bf:8a:62:a0:47:bd:9d:c7:02:e1:85:ed:
68:1b:b7:b3:63:0c:e6:4b:93:1b:a1:78:4c:f3:a8:f8:ba:04:
aa:6a:66:2a:1f:08:49:b1:76:cf:d8:0d:d0:66:00:c1:56:f0:
be:62:a8:7b:3b:b2:fe:c6:65:fd:ab:c7:09:84:7e:ec:51:21:
6c:87:40:02:e8:93:18:6a:3f:b3:ef:50:75:f3:37:f2:bd:28:
57:20:96:c2:dc:d3:53:c5:f0:80:76:09:08:93:ba:c2:ec:f2:
e7:f8:5d:07:89:99:19:14:05:c9:cd:e2:ac:38:d6:a8:62:b2:
f2:d3:31:b4:57:57:fc:31:c5:78:10:33:8d:0a:02:28:50:95:
3b:0c:e8:0f:c7:d8:03:b3:ed:2e:fe:d6:ea:62:90:97:80:11:
0b:54:c6:7b:04:e8:51:70:5c:d6:61:92:01:f7:b6:ff:18:6e:
b4:e8:11:fc:9a:17:01:32:49:a3:22:d8:cb:0b:6f:8a:c4:c7:
26:10:31:cc:1b:a2:6e:80:16:b8:55:1f:a0:82:cb:c5:0c:00:
0d:31:7d:d6
-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgISAZkpMvdjqXXknLS1DS4rfeDSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl
ZjVkYWYwHhcNMjUwOTA4MTIwMDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjNmOWJlM2U0MWI4NDgwYmJjNDM0OGVkYzY2NGY5NzRkOGQwZjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EK0NgPbzwI5u+fBbE+ItzQx1wGR
TX9mMpHN0lSDE1KoPtaCEB3Dfj+P3yi6Nyr4M9A9A2HH/8fxp/L1AJDGQoFFjUIO
pDbYsEDh4hh1Ewe+k0AwKPV0B46gPspnEVInxPm7nfIa+sMFn867NHrISMOuo6F5
oMnZ2fKAtImUnuwJqdn6vMrZCbiq+zwI1KE4UOs4YX+LvJ4OIVx2AdRZCamIeSs3
PW1yRv04akHpV2yGGjyfURB2+icIKBGlCdiW9T0Qf24uCYyjmBNA79WjsIuxA0xv
EVIo5iZDXG8qKVx91QTb0r2mUKEKZkbPCMGy0i23CV250+GBRUVOF5kJywIDAQAB
o4ICmjCCApYwHQYDVR0OBBYEFEs/m+PkG4SAu8Q0jtxmT5dNjQ8dMB8GA1UdIwQY
MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt
NWRkNmUyMmViYWIwLzEvU3otYjQtUWJoSUM3eERTTzNHWlBsMDJORHgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw
LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGvBggrBgEFBQcBBwEB/wSBnzCBnDBKBAIAATBEMAwDBAAF
tGkDBAIFtGgDBAAtgwADBAAtiAQDBAEtjZQDBAAtkywDBAJNU8gDBADCdOQDBAHC
dOwDBADCkiQDBADCki8wTgQCAAIwSAMFAyoJh4ADBQMqD7cAAwUDKg/pAAMFAyoP
6wADBQMqD+0AAwUDKg/5AAMHACoTpEAABwMFACoTpEEDBQAqE6RFAwUAKhOkRzAN
BgkqhkiG9w0BAQsFAAOCAQEARaekvAtF/GTd2cXfz0ggB74fpTYoBQ1MpUYaVCLG
TBrRAc09ZQQyVlJJv4pioEe9nccC4YXtaBu3s2MM5kuTG6F4TPOo+LoEqmpmKh8I
SbF2z9gN0GYAwVbwvmKoezuy/sZl/avHCYR+7FEhbIdAAuiTGGo/s+9QdfM38r0o
VyCWwtzTU8XwgHYJCJO6wuzy5/hdB4mZGRQFyc3irDjWqGKy8tMxtFdX/DHFeBAz
jQoCKFCVOwzoD8fYA7PtLv7W6mKQl4ARC1TGewToUXBc1mGSAfe2/xhutOgR/JoX
ATJJoyLYywtvisTHJhAxzBuiboAWuFUfoILLxQwADTF91g==
-----END CERTIFICATE-----
Generated at Tue Sep 9 13:46:02 2025 by rpki-client