Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/ZzkiDwtBZqtMUNkcvV7d7s_Jt5k.roa
File: ZzkiDwtBZqtMUNkcvV7d7s_Jt5k.roa (raw, json)
Hash identifier: pTGPYQviSOj1ZFFzCCHZK/34uo5urkjZrgwZdrFPiTg=
Subject key identifier: 67:39:22:0F:0B:41:66:AB:4C:50:D9:1C:BD:5E:DD:EE:CF:C9:B7:99
Certificate issuer: /CN=09e5518e68467b4290c3509268b6d6d664962c86
Certificate serial: 0196F836102998EA7966BD48D08B17DAC3D9
Authority key identifier: 09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/ZzkiDwtBZqtMUNkcvV7d7s_Jt5k.roa
Signing time: Thu 22 May 2025 13:36:54 +0000
ROA not before: Thu 22 May 2025 13:36:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31515
IP address blocks: 161.30.0.0/16 maxlen: 16
161.30.5.0/24 maxlen: 24
161.30.6.0/24 maxlen: 24
161.30.7.0/24 maxlen: 24
161.30.8.0/24 maxlen: 24
161.30.9.0/24 maxlen: 24
161.30.10.0/23 maxlen: 24
161.30.10.0/24 maxlen: 24
161.30.12.0/22 maxlen: 22
161.30.16.0/22 maxlen: 22
161.30.20.0/24 maxlen: 24
161.30.22.0/23 maxlen: 23
161.30.28.0/24 maxlen: 24
161.30.29.0/24 maxlen: 24
161.30.33.0/24 maxlen: 24
161.30.40.0/23 maxlen: 23
161.30.42.0/23 maxlen: 24
161.30.44.0/23 maxlen: 24
161.30.112.0/23 maxlen: 23
161.30.114.0/23 maxlen: 23
161.30.115.0/24 maxlen: 24
161.30.116.0/23 maxlen: 23
161.30.118.0/24 maxlen: 24
161.30.119.0/24 maxlen: 24
161.30.120.0/24 maxlen: 24
161.30.121.0/24 maxlen: 24
161.30.124.0/23 maxlen: 23
161.30.126.0/23 maxlen: 23
161.30.128.0/23 maxlen: 23
161.30.129.0/24 maxlen: 24
161.30.130.0/24 maxlen: 24
161.30.155.0/24 maxlen: 24
161.30.162.0/24 maxlen: 24
161.30.163.0/24 maxlen: 24
161.30.164.0/24 maxlen: 24
161.30.165.0/24 maxlen: 24
161.30.166.0/24 maxlen: 24
161.30.167.0/24 maxlen: 24
161.30.169.0/24 maxlen: 24
161.30.171.0/24 maxlen: 24
161.30.176.0/20 maxlen: 20
161.30.193.0/24 maxlen: 24
161.30.194.0/23 maxlen: 23
161.30.201.0/24 maxlen: 24
161.30.202.0/24 maxlen: 24
161.30.203.0/24 maxlen: 24
161.30.220.0/24 maxlen: 24
161.30.221.0/24 maxlen: 24
161.30.236.0/22 maxlen: 24
161.30.236.0/24 maxlen: 24
161.30.237.0/24 maxlen: 24
161.30.238.0/24 maxlen: 24
161.30.239.0/24 maxlen: 24
161.30.240.0/24 maxlen: 24
161.30.246.0/24 maxlen: 24
161.30.250.0/24 maxlen: 24
161.30.251.0/24 maxlen: 24
2a11:ae00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 16:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f8:36:10:29:98:ea:79:66:bd:48:d0:8b:17:da:c3:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e5518e68467b4290c3509268b6d6d664962c86
Validity
Not Before: May 22 13:36:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6739220f0b4166ab4c50d91cbd5eddeecfc9b799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1f:61:c6:a1:6a:e8:16:8c:06:93:28:08:20:
8a:d6:9d:67:ec:72:22:be:41:66:31:12:47:7d:49:
9d:52:d6:2f:f4:4a:1e:67:ff:24:47:6f:9d:58:a6:
6d:39:72:0a:7a:82:d0:5a:9f:dd:98:3e:a0:c9:de:
99:48:2b:d4:fd:10:39:52:11:c1:72:38:1b:12:b9:
a9:fc:8a:93:55:0e:9c:21:e8:56:1b:11:63:84:ab:
80:0e:fd:1b:e1:3d:f8:e7:2c:33:21:6c:48:b3:4a:
05:1c:65:c7:5e:52:b0:c0:dd:4b:09:43:32:4f:e2:
63:b1:5c:e7:52:e1:3d:55:48:12:ce:71:7e:bc:33:
4f:ad:7a:7f:df:10:bd:08:23:b4:33:f4:26:ad:2b:
59:f8:48:33:a5:ca:33:66:15:a2:5b:03:c8:22:35:
54:4b:54:0a:54:2c:ed:56:7a:44:a4:87:12:05:5b:
c4:90:3c:18:4e:a7:b2:0a:60:44:77:32:90:bc:e2:
46:25:5e:7c:6a:1b:e6:bc:45:c4:b2:41:5b:83:33:
21:4b:34:d1:aa:a0:52:3d:5a:5b:25:7f:3f:e2:41:
a9:d6:00:1b:dc:2c:8b:dd:7d:ad:b6:17:2e:bd:e5:
be:77:e6:ba:40:0f:1d:5d:49:74:b4:46:48:6e:a3:
cb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:39:22:0F:0B:41:66:AB:4C:50:D9:1C:BD:5E:DD:EE:CF:C9:B7:99
X509v3 Authority Key Identifier:
keyid:09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/ZzkiDwtBZqtMUNkcvV7d7s_Jt5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.30.0.0/16
IPv6:
2a11:ae00::/32
Signature Algorithm: sha256WithRSAEncryption
47:77:9c:4a:d5:ab:8e:ec:dd:6e:db:a9:d7:6f:51:94:10:a1:
59:8e:ab:ca:fc:c9:fd:b7:f0:f1:8e:03:75:9f:25:ed:88:16:
54:63:c3:19:d7:a0:09:17:c1:da:0f:d9:dc:47:ad:22:de:27:
a5:78:8f:ec:86:9a:6e:78:78:25:d6:14:61:f4:93:dc:a0:56:
54:49:5c:7c:82:6e:94:d2:c0:f9:46:1d:4b:8a:1c:ba:2b:d3:
b9:a5:fb:2f:62:dd:35:ed:30:31:df:e3:24:bf:2a:bd:f1:13:
89:78:19:a4:cd:65:5f:4c:d9:c0:0f:50:ec:56:10:b4:49:04:
1b:3d:1b:7b:48:e8:4e:b7:05:8b:d2:da:99:ab:44:6a:97:aa:
f8:68:65:c2:d7:b3:ef:c5:45:fa:47:aa:05:9a:a5:9a:4e:3c:
b3:1d:c5:2a:fe:f4:7b:94:de:03:3a:0d:58:c9:71:c2:45:78:
8d:3b:4a:d9:75:d2:b2:73:2f:da:51:ea:1f:aa:7c:3b:46:e6:
11:8e:b4:25:a3:77:e4:24:2f:62:6e:62:91:b1:ef:fd:d5:04:
8b:5d:88:b7:74:4e:b7:ec:45:86:a1:c9:24:d8:22:44:b3:03:
ca:8b:14:2b:e1:e1:a0:11:5f:6f:fe:86:d0:f9:15:cb:9c:bf:
51:ae:2d:66
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 7 21:49:58 2025 by rpki-client