Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/zlBh7hgpYyrbC4_2eqa4mvgQ-Fg.roa
File: zlBh7hgpYyrbC4_2eqa4mvgQ-Fg.roa (raw, json)
Hash identifier: NJpJH89yvGcV6DUNwmyYU4VRyXL14dUQqqiwiwJ2TRg=
Subject key identifier: CE:50:61:EE:18:29:63:2A:DB:0B:8F:F6:7A:A6:B8:9A:F8:10:F8:58
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0198092F912A95739B5ECF6DA963B44FD65F
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/zlBh7hgpYyrbC4_2eqa4mvgQ-Fg.roa
Signing time: Mon 14 Jul 2025 13:46:08 +0000
ROA not before: Mon 14 Jul 2025 13:46:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214556
IP address blocks: 94.249.215.0/24 maxlen: 24
2a02:2fc0:13::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:09:2f:91:2a:95:73:9b:5e:cf:6d:a9:63:b4:4f:d6:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 14 13:46:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce5061ee1829632adb0b8ff67aa6b89af810f858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6e:2e:c8:da:66:68:95:26:59:f6:9d:6e:88:
59:d7:fa:74:34:1b:c0:f5:71:b8:a6:64:be:b4:c2:
01:5b:9a:58:51:5b:de:47:99:36:31:a4:fa:e9:a9:
80:0a:46:31:49:d2:60:8b:d1:57:5e:cd:a7:01:37:
71:d4:a2:62:8c:ee:8c:74:be:65:34:5f:a1:a8:0f:
d5:85:81:e6:99:63:47:60:1a:8e:44:7c:0f:84:73:
31:e2:e4:23:82:36:cf:f8:ad:bb:58:db:7e:ef:8e:
e9:07:75:56:88:cf:a1:90:85:b3:40:0f:76:3c:7c:
da:a3:1f:9c:34:bf:8f:4a:4e:4b:bc:b0:e4:74:22:
6f:94:80:1e:2a:3c:61:63:4f:fd:81:44:27:8d:c7:
6d:5f:fa:8c:4d:5f:b0:e0:88:a7:2e:37:f0:82:62:
9f:4c:bc:a1:2e:c3:99:b1:3a:ee:3a:c6:51:db:53:
94:75:13:14:c3:03:77:e0:1e:42:07:c9:e3:06:3d:
06:ad:7f:ce:9d:56:65:be:50:74:5e:77:a0:be:ef:
3b:bd:55:c7:e5:b0:b6:51:ab:9e:3a:24:8d:9d:73:
cd:a8:55:38:ac:a7:2f:16:21:2a:20:76:e1:62:55:
8c:c2:fc:8a:33:22:9b:4b:dc:dc:5c:a5:c1:a8:ff:
5f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:50:61:EE:18:29:63:2A:DB:0B:8F:F6:7A:A6:B8:9A:F8:10:F8:58
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/zlBh7hgpYyrbC4_2eqa4mvgQ-Fg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.249.215.0/24
IPv6:
2a02:2fc0:13::/48
Signature Algorithm: sha256WithRSAEncryption
83:e3:5c:d9:c3:46:3b:7c:b4:49:51:df:7a:2f:49:8c:4a:01:
e8:6a:9a:7d:12:dd:83:5b:30:90:1c:19:b1:8f:8b:bd:44:01:
79:91:01:20:1e:dd:07:ba:5f:d6:35:fa:5d:ff:57:57:6f:14:
2d:5e:cc:46:a4:20:34:47:26:4b:4e:44:67:89:fd:80:8b:6a:
e3:97:eb:e4:24:21:30:6f:70:8b:40:ea:7d:9a:b5:12:be:93:
3b:79:c4:c5:b7:46:97:a0:ea:54:3d:7a:f2:70:c5:39:44:5d:
85:a9:ec:07:42:4f:fa:32:d5:48:c0:49:68:8b:dc:13:4b:24:
fa:04:cb:89:8c:da:70:ab:38:86:ea:26:16:fc:59:e8:fe:33:
cf:2f:2a:fd:27:46:85:35:78:85:71:b9:cd:4b:b0:54:6f:c8:
e0:b6:10:7d:6b:5a:a4:db:1b:6e:98:e6:a3:44:74:1c:a3:0c:
5f:65:f2:3a:61:eb:a4:5a:6d:d3:30:6e:a4:d0:e5:76:6e:d0:
b3:92:a2:be:3a:ce:a9:47:d3:ae:8a:a7:4c:ee:c4:8c:6e:c0:
50:b3:f3:79:01:82:0c:f0:58:64:c5:e2:5a:3e:94:3e:81:15:
34:ac:54:5e:1a:e6:51:1f:c7:3e:c7:02:b3:93:2c:35:ea:3e:
8b:1e:fa:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 08:05:12 2025 by rpki-client