Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ZZq4hpQx6cES2wb4HQOnGfIEb3Y.roa
File: ZZq4hpQx6cES2wb4HQOnGfIEb3Y.roa (raw, json)
Hash identifier: KKgrtZocpmb1/k+LreOUviXdipl/X14hekkRg7w43Eo=
Subject key identifier: 65:9A:B8:86:94:31:E9:C1:12:DB:06:F8:1D:03:A7:19:F2:04:6F:76
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019998CE5491A272A99B96F4C3D52D28ECD8
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ZZq4hpQx6cES2wb4HQOnGfIEb3Y.roa
Signing time: Tue 30 Sep 2025 04:08:02 +0000
ROA not before: Tue 30 Sep 2025 04:08:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36352
IP address blocks: 178.18.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 Oct 2025 15:53:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:98:ce:54:91:a2:72:a9:9b:96:f4:c3:d5:2d:28:ec:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 30 04:08:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=659ab8869431e9c112db06f81d03a719f2046f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ac:2b:cc:98:0b:3c:4a:92:83:32:70:41:c2:
f5:70:74:ae:b0:e2:2d:22:37:4c:05:22:51:d9:87:
87:bd:98:a8:d5:1e:c8:e8:c6:37:a2:36:70:42:cb:
ae:57:2c:eb:2d:9a:09:ac:4e:93:05:a5:41:0d:d4:
0e:f7:79:ce:c5:8c:8d:f3:df:9b:fa:1c:4a:5c:2e:
70:47:3c:b9:a1:03:75:93:e5:08:50:d6:e2:13:5d:
34:b7:7e:e0:27:2d:9b:60:9f:0c:80:30:18:ed:52:
d9:cd:0a:e7:75:cc:f1:33:9a:82:31:ec:ca:81:b7:
d2:a3:a1:4c:57:c8:55:09:94:67:78:4a:11:4b:5a:
20:5b:87:fa:8a:be:f3:a6:06:df:19:41:41:5e:6f:
c1:17:0d:4e:2e:16:ca:fb:f3:bd:51:68:38:c3:c8:
61:03:6b:66:81:33:61:77:d8:c3:27:2a:b7:d1:28:
83:ac:61:c1:57:e3:8b:64:87:a3:25:17:15:3d:93:
c6:8c:49:c3:76:9b:6e:e8:b1:c9:8a:8d:94:30:33:
bf:6f:ed:08:30:6d:6d:2b:86:a3:d1:c5:10:fb:2e:
2a:44:59:45:87:13:5b:2d:bd:d1:b9:0e:2d:71:ac:
a1:24:3d:e5:d9:a9:dd:f3:d7:6e:96:65:2e:26:f5:
81:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:9A:B8:86:94:31:E9:C1:12:DB:06:F8:1D:03:A7:19:F2:04:6F:76
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ZZq4hpQx6cES2wb4HQOnGfIEb3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.18.151.0/24
Signature Algorithm: sha256WithRSAEncryption
52:d9:16:c8:06:74:43:22:2a:21:50:70:9d:d6:02:8a:1a:a7:
0e:58:92:29:a9:d5:b0:29:c8:91:e2:ca:ea:bd:4e:a0:94:74:
e7:6c:7c:87:b3:32:0b:20:54:2a:2f:1d:42:4d:21:96:0f:47:
76:ff:74:1e:67:2a:00:1b:a2:27:84:0a:ef:d5:b8:b2:68:90:
24:41:f8:c7:7e:67:85:4f:64:59:86:88:c0:9b:ac:61:14:97:
b7:da:88:4c:fe:ad:66:ef:05:74:b2:2d:6c:1d:c6:52:a3:2f:
01:9d:af:eb:4d:e9:b7:29:f5:1b:e9:38:37:13:db:2a:c1:2f:
12:f4:e7:85:bf:1d:37:3c:32:86:e0:f0:4b:6d:d5:8d:87:68:
65:0a:cb:db:a0:b4:60:9a:2f:4c:e8:c8:77:9d:91:05:5a:de:
51:2b:2c:e8:a5:7c:fc:16:c6:f5:2b:4c:32:c8:11:b5:a8:8f:
05:a9:6f:57:f8:49:bc:2f:1d:9b:1a:bf:c1:55:c1:f1:26:6d:
de:7b:e1:06:1d:9f:f5:dc:39:d1:9e:6e:6d:ee:80:67:c6:09:
02:d4:cf:85:db:cb:c7:0e:bd:92:29:cb:b5:8c:e3:31:e7:8b:
60:a6:bd:9d:50:48:ca:4c:90:08:01:30:e4:2a:c6:1d:3b:da:
44:a9:36:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 2 21:21:20 2025 by rpki-client