Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/ZvRJrTWQfMOoVK-yV_Cqwkgeu5A.roa
File: ZvRJrTWQfMOoVK-yV_Cqwkgeu5A.roa (raw, json)
Hash identifier: hHz6N7J+wTDqY/Lm+M/7LMn5tnMNWvw100eCFcrE1zM=
Subject key identifier: 66:F4:49:AD:35:90:7C:C3:A8:54:AF:B2:57:F0:AA:C2:48:1E:BB:90
Certificate issuer: /CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Certificate serial: 01980E2DA4A6E58CB188F06449588BCB2120
Authority key identifier: 5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/ZvRJrTWQfMOoVK-yV_Cqwkgeu5A.roa
Signing time: Tue 15 Jul 2025 13:02:08 +0000
ROA not before: Tue 15 Jul 2025 13:02:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.15.106.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0e:2d:a4:a6:e5:8c:b1:88:f0:64:49:58:8b:cb:21:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Validity
Not Before: Jul 15 13:02:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66f449ad35907cc3a854afb257f0aac2481ebb90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:46:66:3f:d1:7b:5b:ea:d9:2e:4e:fb:25:51:
e9:f3:2f:39:23:ae:0e:56:94:9b:dd:f4:e5:52:73:
42:68:c1:6b:32:d1:68:b3:18:8f:66:53:58:78:32:
f4:10:6e:07:ff:54:c4:61:a7:a6:f0:c6:02:18:d3:
c3:98:e6:7b:62:d4:e1:67:9a:4a:37:10:3a:2c:65:
34:2b:eb:86:67:5f:63:57:b3:48:1e:48:55:22:f3:
be:2f:94:d0:3a:d0:cc:2d:37:3b:bf:1d:0a:48:4a:
b3:df:09:4c:c2:dc:d4:24:37:5c:b1:68:26:91:71:
02:61:e6:8d:d0:56:7d:6f:a7:83:93:1a:fa:3c:52:
e3:3e:25:86:4d:7d:22:be:4e:4e:92:4a:a0:3d:66:
e7:23:dd:fb:70:8b:f2:db:de:a9:0a:e7:71:5b:c8:
55:db:7b:73:bd:ab:79:39:6d:89:2e:fa:7e:86:29:
88:81:1e:23:09:34:8f:d4:a4:99:0d:ae:42:ff:bf:
47:07:5f:14:51:48:2b:ad:27:ef:83:5b:4f:a1:97:
e7:6b:7b:7e:22:14:61:a8:00:03:b0:6c:0a:ba:3a:
71:42:4c:ec:ed:57:93:34:36:44:62:ba:a6:12:40:
a1:17:1c:6b:7c:a2:7a:d5:17:51:44:e3:cc:91:d3:
ac:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F4:49:AD:35:90:7C:C3:A8:54:AF:B2:57:F0:AA:C2:48:1E:BB:90
X509v3 Authority Key Identifier:
keyid:5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/ZvRJrTWQfMOoVK-yV_Cqwkgeu5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.106.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:3b:a4:26:59:b7:24:4b:2d:01:9d:f7:72:78:a1:c9:36:04:
aa:e4:5e:bf:79:ed:15:be:e2:e4:93:4c:15:7f:08:fe:a8:f5:
c1:8f:9a:f7:ac:bd:ac:77:75:a1:dd:0b:a2:ac:cd:d4:ad:3f:
d1:79:74:da:24:da:90:d9:6a:69:81:16:ef:44:69:c1:f0:22:
b6:ca:f4:e5:8e:af:e1:77:8e:85:7c:ba:f1:a9:55:a9:cc:26:
75:bb:33:80:8b:9e:eb:33:cc:68:eb:f6:2d:5a:3c:cf:80:d2:
47:cd:ae:fc:21:c2:fa:64:fb:28:83:03:b9:8d:95:d7:99:e1:
82:e7:c7:bd:03:5f:74:e0:60:5c:7e:fd:22:02:49:6c:2a:1d:
bc:5f:ad:b4:43:1d:d6:66:36:61:25:96:e0:55:f3:cf:be:b1:
b0:df:3b:3e:8c:8a:43:bf:10:90:38:92:af:44:ad:ef:23:ea:
3e:9a:2a:e7:b8:27:58:a5:14:6a:e7:7b:52:1d:d5:ee:7c:40:
10:a8:c0:63:43:0e:6c:1f:2c:c1:ea:84:44:cf:aa:eb:68:41:
41:de:01:63:ea:3a:d6:25:a0:d3:0e:d4:77:0a:eb:9b:50:53:
31:75:fb:12:a4:52:17:b9:fd:14:70:32:2d:98:d3:90:cf:97:
05:d8:f9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 21:49:05 2025 by rpki-client