Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/z81n6AUGugd-fohZglzjQCicxA4.roa
File: z81n6AUGugd-fohZglzjQCicxA4.roa (raw, json)
Hash identifier: 0hBQ/1HxbaJOpKXV1shdUJ5JyTh7BxeDTPXQkN2uGL0=
Subject key identifier: CF:CD:67:E8:05:06:BA:07:7E:7E:88:59:82:5C:E3:40:28:9C:C4:0E
Certificate issuer: /CN=0747d06d14ba4e278097f35a80c715684cac2661
Certificate serial: 01981C5763527DFB695044130E83BF7CFC8E
Authority key identifier: 07:47:D0:6D:14:BA:4E:27:80:97:F3:5A:80:C7:15:68:4C:AC:26:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B0fQbRS6TieAl_NagMcVaEysJmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/z81n6AUGugd-fohZglzjQCicxA4.roa
Signing time: Fri 18 Jul 2025 07:02:25 +0000
ROA not before: Fri 18 Jul 2025 07:02:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48716
IP address blocks: 83.97.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/B0fQbRS6TieAl_NagMcVaEysJmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:1c:57:63:52:7d:fb:69:50:44:13:0e:83:bf:7c:fc:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0747d06d14ba4e278097f35a80c715684cac2661
Validity
Not Before: Jul 18 07:02:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cfcd67e80506ba077e7e8859825ce340289cc40e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:98:7f:db:1c:bd:a9:ba:0b:67:e7:4f:92:e1:
02:88:2d:28:ab:39:46:94:91:8b:49:95:1a:d3:af:
31:ec:a1:4c:e4:9e:69:37:53:f0:c5:1a:43:b3:8e:
54:8a:89:98:8e:35:5c:8a:0c:39:7d:fd:9a:37:ce:
54:4e:a1:5c:16:68:64:96:25:b6:24:c8:56:bb:82:
7d:35:09:99:96:35:1b:a2:de:ee:d2:02:8f:bb:e3:
85:17:bd:c7:d8:0f:b3:2e:11:7a:60:e3:a9:12:4e:
83:50:7c:5b:2c:95:03:67:8c:26:3b:34:8b:d8:35:
c0:38:79:9e:be:8a:d7:10:0f:ad:19:64:d5:d9:fd:
f1:96:4f:5f:c6:33:c6:85:db:8e:f9:b3:d6:99:62:
ec:e6:8c:f2:71:ae:cc:67:14:01:63:d5:3c:27:06:
4d:9d:5a:b9:1d:68:14:3a:6d:23:8b:6e:ad:d8:e8:
af:77:b9:dc:7d:bd:fd:39:8e:91:07:be:1c:f0:a5:
46:b9:8f:77:fa:e1:f7:ee:27:ed:1c:84:1a:3a:fa:
28:1a:cd:74:4d:f0:43:fe:0c:a4:90:e7:6f:89:47:
fd:45:03:c7:f4:d0:9f:d7:45:f3:f7:a3:75:84:7b:
44:6b:31:2b:50:d2:02:4d:c3:12:e7:db:d6:02:2f:
ea:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:CD:67:E8:05:06:BA:07:7E:7E:88:59:82:5C:E3:40:28:9C:C4:0E
X509v3 Authority Key Identifier:
keyid:07:47:D0:6D:14:BA:4E:27:80:97:F3:5A:80:C7:15:68:4C:AC:26:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0fQbRS6TieAl_NagMcVaEysJmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/z81n6AUGugd-fohZglzjQCicxA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.97.77.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:3b:2e:66:78:17:1e:ff:c7:16:44:c3:59:da:73:23:bc:7c:
d9:67:9e:38:d8:ca:02:1e:b3:fa:0b:cd:28:26:00:92:de:ba:
22:69:89:40:a8:54:d0:09:fc:be:2d:36:1f:6c:89:ba:08:27:
05:da:4f:33:2d:8f:6f:48:00:96:c5:23:c4:48:75:92:25:f3:
d3:9d:24:d7:99:d0:3a:24:92:f5:25:5b:7d:e5:30:63:06:f8:
23:ef:66:ea:84:6a:86:1f:9f:25:be:48:99:52:24:ea:31:1b:
48:a0:bc:1f:9d:bd:e1:82:fa:a6:86:f6:d3:ca:fb:1b:06:5d:
c8:0f:5e:e1:6d:d7:c5:60:5f:82:db:9a:06:ec:19:8d:4f:b1:
bc:3c:be:e2:a7:9f:bd:45:8b:cf:4a:11:0c:0d:04:01:04:fd:
da:48:f5:6a:7c:25:30:8d:71:49:10:fa:58:a9:a2:75:c8:bf:
bc:d2:cb:74:b0:87:5d:40:75:bc:cc:ed:65:9d:6a:ce:21:df:
1f:21:8d:46:15:16:36:f1:f6:d8:09:99:16:9b:08:2b:c7:80:
e4:e4:5a:1d:fd:52:b3:8c:64:79:02:ad:67:95:31:3b:cc:51:
62:a6:a2:f1:19:ee:a8:c0:27:e1:f0:1a:d0:54:09:8d:68:3e:
fc:c8:19:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:38:55 2025 by rpki-client