Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/zGrKv0NNYS_xjhh1uLNHNu5c_wY.roa
File: zGrKv0NNYS_xjhh1uLNHNu5c_wY.roa (raw, json)
Hash identifier: OEzd69K7Il75QSQW6UQvA0dRBfsE2azJdJL9XybJ68I=
Subject key identifier: CC:6A:CA:BF:43:4D:61:2F:F1:8E:18:75:B8:B3:47:36:EE:5C:FF:06
Certificate issuer: /CN=883f7260650026b973a18a7f3e9958d321ece1db
Certificate serial: 01980D099541904D065E86C2A1BA47F1F9A0
Authority key identifier: 88:3F:72:60:65:00:26:B9:73:A1:8A:7F:3E:99:58:D3:21:EC:E1:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/zGrKv0NNYS_xjhh1uLNHNu5c_wY.roa
Signing time: Tue 15 Jul 2025 07:43:08 +0000
ROA not before: Tue 15 Jul 2025 07:43:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215767
IP address blocks: 195.211.71.0/24 maxlen: 24
2a04:aa00::/29 maxlen: 29
2a04:aa00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0d:09:95:41:90:4d:06:5e:86:c2:a1:ba:47:f1:f9:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=883f7260650026b973a18a7f3e9958d321ece1db
Validity
Not Before: Jul 15 07:43:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc6acabf434d612ff18e1875b8b34736ee5cff06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ec:8c:14:71:93:22:52:52:17:3c:06:49:c4:
e3:d9:c2:b5:f6:ff:e6:54:98:46:85:fc:55:25:df:
d5:eb:c6:7e:33:b7:17:bf:e3:79:34:e8:f3:23:59:
86:7f:4b:3c:8a:4b:e2:6e:cd:22:d8:70:14:ac:ca:
85:5a:83:b6:02:38:63:c6:91:91:11:2a:c0:f3:e3:
de:e3:c3:6a:55:a5:4a:25:5f:0b:04:90:91:96:5d:
72:74:3e:c7:ad:d9:af:32:83:f6:2c:f8:d9:0c:a9:
df:c9:e9:03:8c:05:c0:36:a9:5c:2f:e2:dc:e9:1e:
5c:99:21:06:3d:be:0e:e2:9e:ec:56:34:2d:72:33:
1c:ec:b9:9c:d9:70:21:da:db:e7:1a:cd:5e:e5:d1:
f6:49:da:d2:f8:bb:a5:5a:16:0c:69:48:df:7e:3d:
d8:9f:41:50:b1:51:b0:31:b3:8e:7a:5d:bd:77:60:
c3:be:32:31:7a:0d:37:e4:2c:69:12:0a:f7:f3:95:
8b:b2:00:20:50:03:de:ec:a9:b7:82:cc:c8:8e:6a:
37:3d:e1:bd:7b:4d:78:cb:51:87:6f:45:17:39:d5:
68:e7:f0:27:a7:34:7e:e6:5b:6a:27:5b:5d:67:9b:
dc:bd:b9:4d:d1:c5:45:ec:c0:29:82:96:67:05:4d:
1a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:6A:CA:BF:43:4D:61:2F:F1:8E:18:75:B8:B3:47:36:EE:5C:FF:06
X509v3 Authority Key Identifier:
keyid:88:3F:72:60:65:00:26:B9:73:A1:8A:7F:3E:99:58:D3:21:EC:E1:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/zGrKv0NNYS_xjhh1uLNHNu5c_wY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.211.71.0/24
IPv6:
2a04:aa00::/29
Signature Algorithm: sha256WithRSAEncryption
78:a7:c5:69:33:16:a9:d0:3c:7c:04:d8:1a:04:f5:29:df:14:
19:e7:f8:45:23:a9:21:51:59:26:58:5e:d5:07:53:dd:98:94:
b0:f5:89:48:f1:c7:11:34:63:7c:a7:26:b9:b8:f6:8c:fd:f7:
81:8c:ad:33:60:ae:c2:69:a3:6c:6c:73:bf:c4:8f:dc:b2:ee:
f7:2f:76:fe:50:75:27:4a:de:84:16:2f:fe:bf:7a:49:66:54:
97:39:9a:55:c6:70:14:a3:7f:6c:0e:00:f8:56:4b:d1:08:7a:
02:de:b2:72:47:30:e9:68:95:43:3a:25:01:72:aa:9e:f9:cd:
e9:fb:c8:7a:21:15:63:26:8c:ad:49:17:f9:93:92:36:d9:82:
fa:6f:8d:c9:7f:26:de:80:05:18:b3:a8:01:84:72:f3:a5:f5:
72:75:a9:dd:29:f2:29:1f:bb:15:99:94:16:ef:cd:27:ad:1c:
27:15:07:30:8f:39:dd:7e:1c:98:82:51:e5:4c:06:44:f2:52:
ae:f8:85:05:f0:be:1a:9a:9e:9a:03:4f:21:7b:3e:13:24:11:
e3:02:84:09:7c:4c:ef:7e:e1:17:21:8e:72:2f:cc:b7:b6:f9:
6c:ec:f9:96:4b:a3:74:00:9d:51:53:ec:37:91:ce:7e:f1:3c:
93:f2:c9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 09:04:06 2025 by rpki-client