Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/Cz4X9MPRs8p_ImW4tUel1Ly3B_A.roa
File: Cz4X9MPRs8p_ImW4tUel1Ly3B_A.roa (raw, json)
Hash identifier: mCOTukj35b5NKqry7uD/1PQ8/wQManDEmCJ3x3rHtng=
Subject key identifier: 0B:3E:17:F4:C3:D1:B3:CA:7F:22:65:B8:B5:47:A5:D4:BC:B7:07:F0
Certificate issuer: /CN=87e64170f9d82c51670b9a44f329b20613a8082d
Certificate serial: 019996026376A258993573994507C02BA336
Authority key identifier: 87:E6:41:70:F9:D8:2C:51:67:0B:9A:44:F3:29:B2:06:13:A8:08:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/Cz4X9MPRs8p_ImW4tUel1Ly3B_A.roa
Signing time: Mon 29 Sep 2025 15:06:02 +0000
ROA not before: Mon 29 Sep 2025 15:06:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34766
IP address blocks: 195.72.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Oct 2025 00:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:96:02:63:76:a2:58:99:35:73:99:45:07:c0:2b:a3:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87e64170f9d82c51670b9a44f329b20613a8082d
Validity
Not Before: Sep 29 15:06:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b3e17f4c3d1b3ca7f2265b8b547a5d4bcb707f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:05:98:38:c1:3d:16:7d:7d:32:98:3d:96:59:
86:91:dd:78:9f:f9:fc:55:d4:aa:8b:c7:ce:db:dd:
f1:89:c6:a5:88:b8:05:2c:cb:a1:5c:0b:e9:bc:50:
76:11:23:2e:65:8a:84:e6:43:ee:f9:26:22:ad:f1:
f4:62:82:18:d3:0b:df:05:bf:a9:fc:ab:a3:be:42:
52:81:27:e6:43:d7:51:66:65:58:db:e8:fe:3e:78:
35:2a:14:78:f3:ad:b7:2a:21:a2:67:02:94:17:69:
c3:eb:e0:75:91:cc:b4:7f:c9:7e:3c:a7:ec:d9:94:
35:65:49:95:97:21:e4:b1:b7:4a:bb:2a:4b:d9:67:
99:60:dc:79:39:6c:20:b3:11:31:65:56:fb:b0:3d:
61:8c:d9:13:e9:13:09:be:2d:c7:81:16:f6:0e:99:
d3:16:55:62:a7:20:73:43:4e:07:0b:de:9c:9a:06:
d5:bb:b0:4f:ae:d1:c4:dc:bd:03:68:b2:a5:f0:0a:
4d:9f:a3:54:da:42:39:9f:25:dc:9a:7a:85:ee:1d:
ea:d3:70:99:45:7b:eb:16:40:38:3b:6e:60:11:c9:
4a:16:e7:5b:bf:7c:25:0b:24:ed:47:33:71:18:0a:
d2:92:c4:2b:a7:1f:fa:c2:67:1d:b5:e1:bc:6b:71:
fe:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:3E:17:F4:C3:D1:B3:CA:7F:22:65:B8:B5:47:A5:D4:BC:B7:07:F0
X509v3 Authority Key Identifier:
keyid:87:E6:41:70:F9:D8:2C:51:67:0B:9A:44:F3:29:B2:06:13:A8:08:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/Cz4X9MPRs8p_ImW4tUel1Ly3B_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.72.121.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:6f:11:d8:d5:f5:62:c3:49:46:fe:a9:af:01:aa:3c:e1:f3:
19:ca:ad:83:bc:cf:d3:40:16:f7:42:23:0b:65:90:33:c1:16:
af:e3:a5:c7:57:55:b4:49:2d:64:35:89:39:31:85:bf:51:72:
f2:0e:a8:28:40:8d:2b:6c:32:09:ca:70:d3:6f:11:6e:ad:b3:
3f:e6:24:bc:01:d8:7e:ea:db:0f:87:47:00:d8:31:55:0c:89:
27:d8:3d:f0:97:46:a3:8d:2e:08:64:be:44:05:7c:f2:a2:25:
b1:c7:56:f1:e3:79:eb:a8:d3:a7:a0:f0:56:50:31:a2:b7:e9:
7d:67:e5:e2:41:dd:47:bb:4e:79:fe:df:4f:ce:12:65:01:4a:
81:b4:96:08:2d:9f:9a:7f:15:05:9e:0c:fa:7d:a4:23:81:c2:
6f:e8:20:05:96:f2:a0:bc:11:56:2b:7c:b7:1f:06:f0:84:e8:
2c:8c:93:4e:da:0f:50:98:dc:be:dd:73:7b:8b:35:f3:da:d0:
dc:26:93:76:74:b1:e2:35:54:99:ae:39:13:c6:22:d6:d1:ef:
ff:d8:45:b3:f0:f6:da:a1:c7:3c:ef:ce:a4:d7:0a:1f:6e:ba:
b4:01:b3:57:dc:ea:f1:88:81:9f:78:fa:a7:68:65:bc:83:9d:
c6:e9:c6:88
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZmWAmN2oliZNXOZRQfAK6M2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3ZTY0MTcwZjlkODJjNTE2NzBiOWE0NGYzMjliMjA2MTNh
ODA4MmQwHhcNMjUwOTI5MTUwNjAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjNlMTdmNGMzZDFiM2NhN2YyMjY1YjhiNTQ3YTVkNGJjYjcwN2YwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5gWYOME9Fn19Mpg9llmGkd14n/n8
VdSqi8fO293xicaliLgFLMuhXAvpvFB2ESMuZYqE5kPu+SYirfH0YoIY0wvfBb+p
/KujvkJSgSfmQ9dRZmVY2+j+Png1KhR48623KiGiZwKUF2nD6+B1kcy0f8l+PKfs
2ZQ1ZUmVlyHksbdKuypL2WeZYNx5OWwgsxExZVb7sD1hjNkT6RMJvi3HgRb2DpnT
FlVipyBzQ04HC96cmgbVu7BPrtHE3L0DaLKl8ApNn6NU2kI5nyXcmnqF7h3q03CZ
RXvrFkA4O25gEclKFudbv3wlCyTtRzNxGArSksQrpx/6wmcdteG8a3H+uQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAs+F/TD0bPKfyJluLVHpdS8twfwMB8GA1UdIwQY
MBaAFIfmQXD52CxRZwuaRPMpsgYTqAgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaC1aQmNQbllMRkZuQzVwRTh5bXlCaE9vQ0MwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9iZWIyOWQtZjBlZS00MDdhLTk3MDIt
NmUxM2NjYmY0OTA2LzEvQ3o0WDlNUFJzOHBfSW1XNHRVZWwxTHkzQl9BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9iZWIyOWQtZjBlZS00MDdhLTk3MDItNmUxM2NjYmY0OTA2
LzEvaC1aQmNQbllMRkZuQzVwRTh5bXlCaE9vQ0MwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw0h5MA0G
CSqGSIb3DQEBCwUAA4IBAQAtbxHY1fViw0lG/qmvAao84fMZyq2DvM/TQBb3QiML
ZZAzwRav46XHV1W0SS1kNYk5MYW/UXLyDqgoQI0rbDIJynDTbxFurbM/5iS8Adh+
6tsPh0cA2DFVDIkn2D3wl0ajjS4IZL5EBXzyoiWxx1bx43nrqNOnoPBWUDGit+l9
Z+XiQd1Hu055/t9PzhJlAUqBtJYILZ+afxUFngz6faQjgcJv6CAFlvKgvBFWK3y3
HwbwhOgsjJNO2g9QmNy+3XN7izXz2tDcJpN2dLHiNVSZrjkTxiLW0e//2EWz8Pba
occ8786k1wofbrq0AbNX3OrxiIGfePqnaGW8g53G6caI
-----END CERTIFICATE-----
Generated at Thu Oct 9 08:48:03 2025 by rpki-client