Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/1-ZL92pBvmLmsFkFwjoPraYV-lmk.roa
File: 1-ZL92pBvmLmsFkFwjoPraYV-lmk.roa (raw, json)
Hash identifier: 8GeHeU/ZbqCG3e/9dpSkHP1UnCP8xK4IoGXKHOFjl60=
Subject key identifier: F9:92:FD:DA:90:6F:98:B9:AC:16:41:70:8E:83:EB:69:85:7E:96:69
Certificate issuer: /CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Certificate serial: 01981833346BB1D9130B2078F7A1D64A74D8
Authority key identifier: 62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/1-ZL92pBvmLmsFkFwjoPraYV-lmk.roa
Signing time: Thu 17 Jul 2025 11:44:25 +0000
ROA not before: Thu 17 Jul 2025 11:44:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214098
IP address blocks: 158.173.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 02:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:18:33:34:6b:b1:d9:13:0b:20:78:f7:a1:d6:4a:74:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Validity
Not Before: Jul 17 11:44:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f992fdda906f98b9ac1641708e83eb69857e9669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a0:9e:9e:4a:e5:f5:9e:82:1e:ee:77:04:98:
63:27:5b:31:9c:27:97:01:17:31:8c:d4:c3:9b:64:
06:0a:43:e6:6f:83:35:b2:e3:fe:72:ca:f7:72:51:
f2:0a:1c:f5:be:51:10:15:ba:75:8a:65:b9:1e:83:
23:06:02:7d:ad:b5:bf:08:71:b5:ca:b8:64:f7:bb:
69:47:36:f0:ab:45:cc:f3:19:cf:ff:4d:4e:23:a5:
ed:f9:91:60:8c:d7:ca:5c:2a:2a:f4:1f:df:09:eb:
b4:f1:5b:fe:81:42:6c:50:a4:3c:a5:b6:7d:81:e6:
de:95:5a:2e:e2:6c:86:d3:e2:3c:8a:1e:0a:fd:1d:
1e:eb:f2:7c:f8:0e:eb:c4:b3:ee:fc:6a:86:68:ec:
17:de:33:dc:67:5b:c5:18:60:00:00:67:57:54:18:
0e:67:57:00:af:6c:49:75:70:d9:f0:a6:56:ee:3d:
9f:4e:b4:42:f5:a3:88:ab:58:95:b7:b1:5e:a4:3a:
38:04:0e:d1:bf:72:56:8e:95:42:d4:d3:2d:da:eb:
59:36:57:63:6b:61:2a:c0:c3:09:f1:db:d3:15:6f:
fa:51:c1:19:76:ef:cd:7e:cf:23:db:17:9e:48:e5:
f3:de:04:b0:2e:30:aa:2d:0e:6f:bc:46:e3:36:6a:
13:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:92:FD:DA:90:6F:98:B9:AC:16:41:70:8E:83:EB:69:85:7E:96:69
X509v3 Authority Key Identifier:
keyid:62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/1-ZL92pBvmLmsFkFwjoPraYV-lmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.173.1.0/24
Signature Algorithm: sha256WithRSAEncryption
85:79:7a:1c:5f:54:c3:62:2e:a2:9a:dd:76:d4:9f:19:0d:1a:
2d:15:63:ef:4b:43:b1:cf:f3:1e:5e:5c:c7:f3:9a:99:9a:8b:
a5:b8:9e:a1:0d:b4:49:0b:1d:ea:10:60:d9:51:26:10:cd:b6:
5a:69:42:fa:33:0a:ad:d2:0d:bf:d5:7b:0c:c9:3c:82:ba:93:
35:3a:00:ee:5f:4e:04:89:a4:34:a1:f4:bc:75:d3:fe:7a:87:
23:6e:b1:08:47:b1:70:bb:01:3e:c6:4e:e9:b4:7b:c0:93:bd:
b7:a9:a3:73:39:a5:1b:36:cf:38:81:1b:cd:c8:8a:25:99:ff:
3f:9b:c9:15:02:b5:b6:49:7b:15:a6:90:22:0e:23:fb:fe:5f:
ed:e8:8f:e9:c1:55:84:e7:af:dd:33:81:9f:b4:ab:ca:db:bb:
5c:52:ab:0b:28:d0:ad:86:d8:46:de:46:1a:7a:33:a4:1d:20:
46:38:81:e2:39:ef:bd:72:21:9a:0d:9b:1b:69:a3:23:af:14:
b6:b9:ab:90:1f:8c:46:30:2b:da:dd:59:b1:62:64:17:f8:ce:
ce:ac:70:9e:9f:a4:61:59:64:6e:0c:a6:30:89:79:0c:eb:dd:
82:64:ed:2c:8b:c6:b9:af:87:09:ed:cc:ea:a0:a6:60:73:22:
87:28:6c:cf
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZgYMzRrsdkTCyB496HWSnTYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNmEyOGI3YzYzZWY2YWIyMTRhNTJjZmE3YzNlNzhkYjlh
NDA4MjMwHhcNMjUwNzE3MTE0NDI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTkyZmRkYTkwNmY5OGI5YWMxNjQxNzA4ZTgzZWI2OTg1N2U5NjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraCenkrl9Z6CHu53BJhjJ1sxnCeX
ARcxjNTDm2QGCkPmb4M1suP+csr3clHyChz1vlEQFbp1imW5HoMjBgJ9rbW/CHG1
yrhk97tpRzbwq0XM8xnP/01OI6Xt+ZFgjNfKXCoq9B/fCeu08Vv+gUJsUKQ8pbZ9
gebelVou4myG0+I8ih4K/R0e6/J8+A7rxLPu/GqGaOwX3jPcZ1vFGGAAAGdXVBgO
Z1cAr2xJdXDZ8KZW7j2fTrRC9aOIq1iVt7FepDo4BA7Rv3JWjpVC1NMt2utZNldj
a2EqwMMJ8dvTFW/6UcEZdu/Nfs8j2xeeSOXz3gSwLjCqLQ5vvEbjNmoTJQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPmS/dqQb5i5rBZBcI6D62mFfpZpMB8GA1UdIwQY
MBaAFGJqKLfGPvarIUpSz6fD5425pAgjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWW1vb3Q4WS05cXNoU2xMUHA4UG5qYm1rQ0NNLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zYzA3ODUtYjI3My00MDcyLWE2MzUt
ZDJjZDI2YjY5ZGYxLzEvMS1aTDkycEJ2bUxtc0ZrRndqb1ByYVlWLWxtay5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNGUvM2MwNzg1LWIyNzMtNDA3Mi1hNjM1LWQyY2QyNmI2OWRm
MS8xL1ltb290OFktOXFzaFNsTFBwOFBuamJta0NDTS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ6tATAN
BgkqhkiG9w0BAQsFAAOCAQEAhXl6HF9Uw2IuoprddtSfGQ0aLRVj70tDsc/zHl5c
x/OamZqLpbieoQ20SQsd6hBg2VEmEM22WmlC+jMKrdINv9V7DMk8grqTNToA7l9O
BImkNKH0vHXT/nqHI26xCEexcLsBPsZO6bR7wJO9t6mjczmlGzbPOIEbzciKJZn/
P5vJFQK1tkl7FaaQIg4j+/5f7eiP6cFVhOev3TOBn7Srytu7XFKrCyjQrYbYRt5G
GnozpB0gRjiB4jnvvXIhmg2bG2mjI68UtrmrkB+MRjAr2t1ZsWJkF/jOzqxwnp+k
YVlkbgymMIl5DOvdgmTtLIvGua+HCe3M6qCmYHMihyhszw==
-----END CERTIFICATE-----
Generated at Wed Jul 23 12:15:32 2025 by rpki-client