Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/pZtzii1jgkGYoc1y6GKVBQfqg68.roa
File: pZtzii1jgkGYoc1y6GKVBQfqg68.roa (raw, json)
Hash identifier: nmon7qbV197+DbZTeTn/O06ArYrOq8M4igVzRCuDf7w=
Subject key identifier: A5:9B:73:8A:2D:63:82:41:98:A1:CD:72:E8:62:95:05:07:EA:83:AF
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 019840EB16141ED02F0CD6CD3185AF7CFAC1
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/pZtzii1jgkGYoc1y6GKVBQfqg68.roa
Signing time: Fri 25 Jul 2025 09:30:05 +0000
ROA not before: Fri 25 Jul 2025 09:30:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49199
IP address blocks: 62.76.74.0/23 maxlen: 24
62.76.96.0/23 maxlen: 24
193.232.183.0/24 maxlen: 24
194.190.11.0/24 maxlen: 24
194.226.34.0/23 maxlen: 24
194.226.137.0/24 maxlen: 24
195.19.10.0/23 maxlen: 24
195.208.16.0/24 maxlen: 24
195.208.220.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:40:eb:16:14:1e:d0:2f:0c:d6:cd:31:85:af:7c:fa:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jul 25 09:30:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a59b738a2d63824198a1cd72e862950507ea83af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c4:57:9a:b9:fe:21:a9:0f:21:69:00:0c:42:
76:51:76:df:c8:9a:7e:65:24:01:ac:8e:f0:cc:25:
74:ca:48:be:a4:f0:5d:65:6a:c9:e1:4e:64:5a:c0:
63:21:4a:e6:ed:a2:ea:a1:ec:2a:0b:0c:3d:c1:7b:
e5:a1:5d:69:d9:9b:06:f0:d2:eb:fb:ce:ba:8e:61:
42:77:23:e3:1c:13:53:1c:bb:6d:b5:99:86:91:8d:
99:a0:d9:ee:6d:0c:1f:a8:5c:ae:ff:de:5f:15:59:
94:d0:cb:5c:ca:1a:bf:54:cf:f1:da:30:07:16:46:
f6:0d:ea:3a:31:6d:d6:64:6d:fc:70:0e:91:ea:72:
83:6d:d7:80:9a:3b:6f:0d:af:7c:4d:a4:d6:2b:d0:
88:1d:6f:5e:02:7d:c0:b9:9a:d4:df:3d:f6:ef:1c:
9e:4e:3f:92:2b:5a:a5:de:ee:3f:18:c3:eb:20:d8:
e5:c1:39:3b:5a:e6:d4:88:48:a2:69:43:bf:8c:33:
9a:0f:bb:7a:87:1b:d6:0c:66:98:f3:73:3e:bb:a3:
43:23:8c:8c:87:8a:50:6f:6e:ee:46:78:b9:92:e0:
79:8d:a2:38:c2:f7:1b:54:66:49:bf:66:52:a0:44:
4d:bb:b1:28:e6:e1:f2:77:02:8e:63:a2:b1:18:22:
0b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:9B:73:8A:2D:63:82:41:98:A1:CD:72:E8:62:95:05:07:EA:83:AF
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/pZtzii1jgkGYoc1y6GKVBQfqg68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.74.0/23
62.76.96.0/23
193.232.183.0/24
194.190.11.0/24
194.226.34.0/23
194.226.137.0/24
195.19.10.0/23
195.208.16.0/24
195.208.220.0/23
Signature Algorithm: sha256WithRSAEncryption
75:5a:ae:79:29:f2:2b:4d:03:04:2f:c5:94:b7:8b:9e:39:a8:
c2:63:2d:f1:2d:55:6d:d8:79:fc:bb:f7:bf:51:c9:5a:25:ef:
3f:b1:68:b2:3c:e3:ac:07:94:04:b9:ae:95:b2:c7:44:c4:df:
ba:09:a1:0a:2d:80:0b:ba:df:71:ca:40:d0:ff:4c:ae:6d:02:
a7:af:0c:8c:67:db:bc:67:fa:f4:a1:87:71:12:ff:5d:f3:17:
86:19:59:58:a9:89:d5:77:a6:64:26:d1:2f:bd:c0:d3:53:55:
f2:dd:02:e4:af:b4:8f:7f:25:6f:ea:0d:6b:fc:4e:db:c0:44:
de:9f:ca:79:97:d8:2a:0d:41:4c:d9:a6:3b:df:fd:18:49:b1:
de:4f:f3:41:c6:7a:57:aa:bb:0c:cf:42:d5:ce:01:96:b0:24:
ce:75:3b:44:f8:e9:3f:ed:ba:c0:02:e1:81:37:11:44:d3:a7:
e4:f0:e9:7d:fb:4a:b6:90:f3:7d:b4:81:c7:21:ee:bf:30:c1:
a6:39:a8:e8:cd:5a:d9:48:4a:4e:3e:79:2b:27:da:f0:f2:8e:
72:46:15:7a:66:dc:f9:ae:a2:bf:e3:84:f4:78:ab:4a:3b:e9:
80:32:a6:e7:37:1b:af:36:57:f4:a5:2d:27:aa:9b:dd:82:f3:
5f:83:26:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:56:25 2025 by rpki-client