Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/ZgwCc5_6MulL4iL_zC1XUNHyAbI.roa
File: ZgwCc5_6MulL4iL_zC1XUNHyAbI.roa (raw, json)
Hash identifier: /jcVyr8eQJZjytkrqctvHq37ILkIvanUDZTLnrClopA=
Subject key identifier: 66:0C:02:73:9F:FA:32:E9:4B:E2:22:FF:CC:2D:57:50:D1:F2:01:B2
Certificate issuer: /CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
Certificate serial: 0197BFD4C8CE4F1B3F85938ACEB04883D454
Authority key identifier: 71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/ZgwCc5_6MulL4iL_zC1XUNHyAbI.roa
Signing time: Mon 30 Jun 2025 07:54:42 +0000
ROA not before: Mon 30 Jun 2025 07:54:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213378
IP address blocks: 2a07:5680:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bf:d4:c8:ce:4f:1b:3f:85:93:8a:ce:b0:48:83:d4:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
Validity
Not Before: Jun 30 07:54:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=660c02739ffa32e94be222ffcc2d5750d1f201b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8e:25:dd:1c:33:62:c6:5d:5d:4e:a4:71:9f:
60:38:44:4e:f6:95:6b:01:b9:d6:96:82:ca:cc:a2:
e6:0b:66:1a:d0:69:26:d5:23:63:7d:c9:d3:aa:f0:
2b:f4:81:d8:74:10:4f:50:d0:ba:15:a4:77:07:7e:
b0:14:7a:b3:50:c6:1d:d1:75:70:16:4f:6c:f2:0f:
95:ed:89:e3:c0:83:42:f0:9f:fe:7b:db:92:3d:53:
55:6a:a9:d6:62:4a:7a:ff:0e:89:99:4b:10:46:c2:
77:7c:b0:83:7b:b7:f7:a5:7a:ef:2a:be:7e:22:f4:
4e:9d:10:58:54:4c:f9:02:37:07:be:13:f2:74:99:
29:d7:bc:dc:13:c9:eb:88:87:d3:1f:c4:6a:51:34:
9c:b5:d6:d4:eb:24:c0:bf:2d:49:85:14:f9:0c:4d:
12:42:1f:5d:73:bf:1e:2c:30:04:8b:8f:a0:b1:62:
80:4b:1f:5d:4b:06:30:4c:50:2b:71:f8:e8:5a:2e:
e9:bd:cf:ea:d8:1a:b8:da:fd:5a:29:6a:62:64:b3:
db:e7:f3:d3:73:ee:8d:9c:db:ae:70:95:01:1d:2c:
30:ab:cf:c3:b1:5f:78:b2:9c:42:04:38:96:56:3c:
04:c4:ad:a5:7e:38:6c:63:98:68:2b:dc:a4:00:17:
f1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:0C:02:73:9F:FA:32:E9:4B:E2:22:FF:CC:2D:57:50:D1:F2:01:B2
X509v3 Authority Key Identifier:
keyid:71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/ZgwCc5_6MulL4iL_zC1XUNHyAbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:5680:2::/48
Signature Algorithm: sha256WithRSAEncryption
2d:bd:05:05:07:ef:f6:03:f9:8e:26:fa:19:4b:e2:62:00:2f:
d0:5e:8c:c0:5a:c6:f0:a9:41:3a:11:11:2e:85:0e:c8:17:f2:
40:4c:90:c0:ed:b2:b4:84:87:47:a9:bb:17:79:a1:24:20:3c:
51:a2:19:e1:a1:70:08:1b:49:a2:68:9e:17:60:8b:fc:9f:28:
33:21:de:f6:e6:9e:58:eb:0a:02:f7:60:8d:2e:eb:0c:11:57:
1e:25:6c:af:b6:4b:76:be:a9:a6:6b:50:08:3d:4b:db:12:26:
1c:9d:dc:6a:26:69:90:ca:12:99:ed:b9:15:86:c5:0e:47:28:
b5:39:ba:87:0b:75:90:4c:7a:27:95:9d:7f:ea:66:31:b5:7b:
56:3f:40:c4:e3:8d:13:13:9d:de:c1:bd:aa:91:dd:4d:0b:0c:
29:16:ce:14:e6:cc:7a:a9:82:23:da:81:15:86:9b:62:b7:af:
e8:2e:0c:1f:9d:10:f7:e9:ba:1d:39:50:cd:a3:ea:ed:d6:fa:
42:7f:84:0d:eb:c0:86:40:fc:84:04:52:e9:ca:2d:8f:09:c3:
8e:b7:fc:dd:98:0d:e5:fb:cc:32:3a:da:27:ef:a5:df:bd:e0:
b5:a8:fc:11:b2:3b:0a:e5:9e:f0:d0:a6:58:3b:02:01:1f:71:
f7:fe:50:33
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZe/1MjOTxs/hZOKzrBIg9RUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMmYyMjY5ZDE1NjMzYmRiYzcxZDhjZDNmNDU4Y2JkMDNm
ZTAzMWYwHhcNMjUwNjMwMDc1NDQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjBjMDI3MzlmZmEzMmU5NGJlMjIyZmZjYzJkNTc1MGQxZjIwMWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwY4l3RwzYsZdXU6kcZ9gOERO9pVr
AbnWloLKzKLmC2Ya0Gkm1SNjfcnTqvAr9IHYdBBPUNC6FaR3B36wFHqzUMYd0XVw
Fk9s8g+V7YnjwINC8J/+e9uSPVNVaqnWYkp6/w6JmUsQRsJ3fLCDe7f3pXrvKr5+
IvROnRBYVEz5AjcHvhPydJkp17zcE8nriIfTH8RqUTSctdbU6yTAvy1JhRT5DE0S
Qh9dc78eLDAEi4+gsWKASx9dSwYwTFArcfjoWi7pvc/q2Bq42v1aKWpiZLPb5/PT
c+6NnNuucJUBHSwwq8/DsV94spxCBDiWVjwExK2lfjhsY5hoK9ykABfxuQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFGYMAnOf+jLpS+Ii/8wtV1DR8gGyMB8GA1UdIwQY
MBaAFHEvImnRVjO9vHHYzT9FjL0D/gMfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1M4aWFkRldNNzI4Y2RqTlAwV012UVAtQXg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9lNjM3M2MtNTNjZC00ZmQ1LWE0MzUt
ZDE4YmFiOTUxNWJmLzEvWmd3Q2M1XzZNdWxMNGlMX3pDMVhVTkh5QWJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9lNjM3M2MtNTNjZC00ZmQ1LWE0MzUtZDE4YmFiOTUxNWJm
LzEvY1M4aWFkRldNNzI4Y2RqTlAwV012UVAtQXg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdWgAAC
MA0GCSqGSIb3DQEBCwUAA4IBAQAtvQUFB+/2A/mOJvoZS+JiAC/QXozAWsbwqUE6
EREuhQ7IF/JATJDA7bK0hIdHqbsXeaEkIDxRohnhoXAIG0miaJ4XYIv8nygzId72
5p5Y6woC92CNLusMEVceJWyvtkt2vqmma1AIPUvbEiYcndxqJmmQyhKZ7bkVhsUO
Ryi1ObqHC3WQTHonlZ1/6mYxtXtWP0DE440TE53ewb2qkd1NCwwpFs4U5sx6qYIj
2oEVhptit6/oLgwfnRD36bodOVDNo+rt1vpCf4QN68CGQPyEBFLpyi2PCcOOt/zd
mA3l+8wyOton76XfveC1qPwRsjsK5Z7w0KZYOwIBH3H3/lAz
-----END CERTIFICATE-----
Generated at Sat Jul 26 18:38:34 2025 by rpki-client