Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/zMJTAmcHfhPygeRGw0akn5BVjiE.roa
File: zMJTAmcHfhPygeRGw0akn5BVjiE.roa (raw, json)
Hash identifier: 64YD3oejRwoQqSEq4heIfb2pYf1YBqxtvQb2DS8JHbY=
Subject key identifier: CC:C2:53:02:67:07:7E:13:F2:81:E4:46:C3:46:A4:9F:90:55:8E:21
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 01980C60090FFDCCA2F47939B01EF8DEF91B
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/zMJTAmcHfhPygeRGw0akn5BVjiE.roa
Signing time: Tue 15 Jul 2025 04:37:57 +0000
ROA not before: Tue 15 Jul 2025 04:37:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212835
IP address blocks: 87.251.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0c:60:09:0f:fd:cc:a2:f4:79:39:b0:1e:f8:de:f9:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Jul 15 04:37:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ccc2530267077e13f281e446c346a49f90558e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ec:9a:e9:83:49:00:fe:48:8e:87:b8:7b:5a:
7b:6c:24:2a:a0:38:88:19:43:6b:d8:7b:18:dc:76:
78:65:5f:6e:bf:b3:55:c9:ac:95:c8:9d:6f:d7:6c:
0d:c3:10:e6:25:ef:b9:d2:46:5a:d0:67:7e:a9:36:
d3:5c:3c:68:35:40:bb:4f:e1:40:8b:ea:db:5b:97:
8d:b3:c5:b4:56:31:7f:c3:98:6b:c8:22:d5:d1:09:
00:e2:7c:55:c0:99:e2:20:92:8f:7f:f2:3b:3f:1b:
c8:87:68:1b:68:77:b9:28:bd:36:c4:30:e4:b2:fd:
1d:48:26:90:e3:87:98:2d:57:d7:e2:e5:d6:cc:00:
4f:cf:c4:fb:89:a6:4b:d8:7c:36:70:86:40:5c:eb:
5d:91:a4:66:ae:c3:61:9d:c8:a0:d6:65:df:9f:1e:
85:bd:0c:a6:ff:77:0d:26:aa:36:c1:e2:23:50:2d:
05:3d:79:ba:57:03:55:ea:9a:91:5a:36:ab:7f:54:
a1:56:03:4c:a1:9a:33:55:6f:b5:a7:f6:44:3a:34:
d8:60:76:03:1f:17:81:bf:3b:ee:96:b5:50:6c:29:
7c:1a:db:89:11:da:3d:fd:83:08:ed:1c:b4:90:6b:
1b:90:60:29:aa:36:a0:31:9b:e6:62:d9:95:58:f7:
76:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C2:53:02:67:07:7E:13:F2:81:E4:46:C3:46:A4:9F:90:55:8E:21
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/zMJTAmcHfhPygeRGw0akn5BVjiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.251.67.0/24
Signature Algorithm: sha256WithRSAEncryption
87:25:b1:f1:f7:e7:49:96:ce:11:2f:cb:b1:65:75:93:2a:4e:
81:e4:6c:c5:27:50:e3:78:5f:a9:8a:e3:89:cc:b1:ca:cb:c9:
ae:cd:6d:5f:43:2c:31:9f:05:87:75:08:a4:b5:b0:9b:df:36:
70:44:bb:4c:50:74:2e:50:e1:e8:4d:de:9a:e0:76:aa:77:ca:
1f:10:89:1a:70:45:2a:c7:81:e2:94:60:8d:7a:7b:17:34:ac:
ad:5f:c4:12:a8:e7:ab:de:11:dd:4a:0d:66:ab:73:1b:62:ba:
6f:b9:0e:de:fd:74:b9:ad:f9:df:fc:a9:63:fd:b9:38:4b:89:
42:aa:62:08:3d:df:4d:3f:62:06:99:0d:5d:f3:e9:cf:7c:70:
41:fb:8b:3c:6b:30:70:d6:f2:0a:19:bf:ed:d8:34:bf:3b:15:
bd:fe:fb:c0:d1:3f:ef:b8:8d:fa:b9:b6:5c:9c:6e:81:57:b1:
62:2a:e8:1c:52:f9:bc:5d:6e:05:93:a1:98:e6:14:e2:6e:cc:
e0:42:f2:78:0e:3d:9f:61:df:b2:d3:9d:31:f1:6d:86:6d:0f:
f7:99:e4:7d:4c:2c:de:21:ce:fb:77:db:d6:cc:ab:7c:ac:18:
a4:29:85:d0:59:4d:b0:83:aa:32:ab:41:66:ca:c7:9c:7d:60:
9e:b3:0c:15
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZgMYAkP/cyi9Hk5sB743vkbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3M2I0YzEyNDhjNGJjZjIyYjA1NzdkZmNhOWIxNGQ5MDYz
YzI4YzAwHhcNMjUwNzE1MDQzNzU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjY2MyNTMwMjY3MDc3ZTEzZjI4MWU0NDZjMzQ2YTQ5ZjkwNTU4ZTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuya6YNJAP5Ijoe4e1p7bCQqoDiI
GUNr2HsY3HZ4ZV9uv7NVyayVyJ1v12wNwxDmJe+50kZa0Gd+qTbTXDxoNUC7T+FA
i+rbW5eNs8W0VjF/w5hryCLV0QkA4nxVwJniIJKPf/I7PxvIh2gbaHe5KL02xDDk
sv0dSCaQ44eYLVfX4uXWzABPz8T7iaZL2Hw2cIZAXOtdkaRmrsNhncig1mXfnx6F
vQym/3cNJqo2weIjUC0FPXm6VwNV6pqRWjarf1ShVgNMoZozVW+1p/ZEOjTYYHYD
HxeBvzvulrVQbCl8GtuJEdo9/YMI7Ry0kGsbkGApqjagMZvmYtmVWPd2eQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMzCUwJnB34T8oHkRsNGpJ+QVY4hMB8GA1UdIwQY
MBaAFAc7TBJIxLzyKwV338qbFNkGPCjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQt
YThkMzYxY2U2NGFhLzEvek1KVEFtY0hmaFB5Z2VSR3cwYWtuNUJWamlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQtYThkMzYxY2U2NGFh
LzEvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV/tDMA0G
CSqGSIb3DQEBCwUAA4IBAQCHJbHx9+dJls4RL8uxZXWTKk6B5GzFJ1DjeF+piuOJ
zLHKy8muzW1fQywxnwWHdQiktbCb3zZwRLtMUHQuUOHoTd6a4Haqd8ofEIkacEUq
x4HilGCNensXNKytX8QSqOer3hHdSg1mq3MbYrpvuQ7e/XS5rfnf/Klj/bk4S4lC
qmIIPd9NP2IGmQ1d8+nPfHBB+4s8azBw1vIKGb/t2DS/OxW9/vvA0T/vuI36ubZc
nG6BV7FiKugcUvm8XW4Fk6GY5hTibszgQvJ4Dj2fYd+y050x8W2GbQ/3meR9TCze
Ic77d9vWzKt8rBikKYXQWU2wg6oyq0FmysecfWCeswwV
-----END CERTIFICATE-----
Generated at Wed Jul 23 23:19:55 2025 by rpki-client