Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/pZe8y0zd1BII-mOVTh8KzTSzhDM.roa
File: pZe8y0zd1BII-mOVTh8KzTSzhDM.roa (raw, json)
Hash identifier: E7HzgTGYZVIG0O6cCy2qrR7NdozcyKE6DXuLBH0yAFI=
Subject key identifier: A5:97:BC:CB:4C:DD:D4:12:08:FA:63:95:4E:1F:0A:CD:34:B3:84:33
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01980EC6887F76E31CB92B26490644E58F79
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/pZe8y0zd1BII-mOVTh8KzTSzhDM.roa
Signing time: Tue 15 Jul 2025 15:49:08 +0000
ROA not before: Tue 15 Jul 2025 15:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49981
IP address blocks: 193.8.94.0/24 maxlen: 24
2a13:18c5:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0e:c6:88:7f:76:e3:1c:b9:2b:26:49:06:44:e5:8f:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 15 15:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a597bccb4cddd41208fa63954e1f0acd34b38433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:42:cf:65:d6:4c:f8:71:cd:d9:82:26:93:6b:
30:f6:8a:66:5e:3d:62:af:fb:48:cc:35:a6:16:3b:
dc:20:5e:96:e4:bb:18:03:ee:c3:91:d7:f8:f0:cd:
95:d7:ab:81:87:e1:16:9a:3a:a6:b0:9a:44:d3:c0:
33:d9:5f:fc:d7:fa:b0:dc:cd:d7:9d:cc:c5:0d:da:
a3:1f:1c:97:5d:66:c3:e5:65:89:b5:be:8a:24:c3:
db:2d:e0:e1:11:12:91:a6:b2:c3:11:17:84:49:ec:
63:d1:7c:ad:f0:2d:ba:a2:c1:68:5d:15:a6:ca:6b:
6b:a3:1b:a2:99:66:50:a7:e1:24:bb:93:5d:dd:73:
aa:8f:b0:0b:cc:bf:91:97:71:f5:fa:eb:bd:36:75:
68:9b:0e:d9:87:47:c3:61:8d:c6:6c:97:16:04:05:
36:43:48:f9:ca:a9:d9:da:73:36:a4:7b:35:d6:c7:
f0:32:b3:d0:05:f8:fc:cf:2f:57:71:c4:52:4f:13:
a5:21:73:ca:ce:93:a0:25:14:db:35:58:c8:d7:9e:
fa:5c:84:bb:a6:b9:e0:95:50:a7:9e:04:3c:ea:de:
1c:4a:36:d2:a4:5e:19:f4:5a:6f:dd:fe:4d:55:e6:
f0:58:46:69:00:b2:36:f9:ee:37:16:af:f9:34:ba:
21:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:97:BC:CB:4C:DD:D4:12:08:FA:63:95:4E:1F:0A:CD:34:B3:84:33
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/pZe8y0zd1BII-mOVTh8KzTSzhDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.94.0/24
IPv6:
2a13:18c5:1::/48
Signature Algorithm: sha256WithRSAEncryption
36:e4:1d:ba:44:05:52:e6:39:b3:59:d3:ff:c9:18:ad:7c:36:
06:d9:f2:48:cd:fc:10:31:ec:5b:d1:94:ca:c0:29:ef:42:2a:
23:72:41:be:3b:22:28:cc:95:2d:c0:90:86:34:3b:8b:c9:cd:
24:b7:1d:c7:63:87:74:1d:f0:c8:12:36:a0:24:5e:4c:8a:d1:
c9:c5:ea:54:0e:68:3b:9c:1d:fd:c4:37:36:60:0e:af:0e:ea:
9f:af:71:6c:dd:99:bf:2d:7f:1e:96:eb:32:6b:fa:7f:d2:84:
1a:93:0e:6c:16:f9:b7:90:e8:5c:65:3f:21:9d:a8:46:0e:5e:
e9:26:92:00:1d:ed:33:73:6f:f4:1f:21:00:f2:47:21:df:9f:
53:a3:ac:b3:a9:3c:eb:3f:51:70:d4:0f:74:3a:88:2a:46:b5:
51:f0:90:63:1c:15:2f:30:3b:d7:e6:cd:0d:35:11:a0:03:74:
98:5a:2b:ec:4d:5b:62:1c:04:f3:b5:2a:66:66:4e:26:5f:9c:
87:f0:8a:8a:01:b2:14:86:2d:a1:4f:c1:c4:4d:03:22:c2:d6:
e3:98:af:46:1d:58:be:b0:6e:f4:f4:c2:c9:9e:8b:ce:21:5d:
78:06:f8:24:83:0b:57:4b:16:14:4d:0b:e4:60:ff:de:ed:e0:
ba:46:3a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:30:59 2025 by rpki-client