Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/ZeIEHartq1R0GkkGrxvb5PkAMj8.roa
File: ZeIEHartq1R0GkkGrxvb5PkAMj8.roa (raw, json)
Hash identifier: TfsCvICUSIpt9OVTvUrF6OVsZKt7DLmusohzrsRT1kU=
Subject key identifier: 65:E2:04:1D:AA:ED:AB:54:74:1A:49:06:AF:1B:DB:E4:F9:00:32:3F
Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Certificate serial: 019A5E0ECAA1F0C2BAAF39C015FF51E69F6B
Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/ZeIEHartq1R0GkkGrxvb5PkAMj8.roa
Signing time: Fri 07 Nov 2025 11:23:38 +0000
ROA not before: Fri 07 Nov 2025 11:23:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216366
IP address blocks: 194.113.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5e:0e:ca:a1:f0:c2:ba:af:39:c0:15:ff:51:e6:9f:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Validity
Not Before: Nov 7 11:23:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65e2041daaedab54741a4906af1bdbe4f900323f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a5:68:ed:e4:f9:71:52:f1:25:59:fc:dc:a4:
6a:2e:37:70:4a:8a:63:37:c2:2f:bf:77:12:ba:0d:
ba:34:11:9a:df:55:5f:1d:54:68:55:31:61:db:3a:
8c:66:96:41:95:a6:34:83:18:69:15:70:aa:6a:c9:
f0:50:86:51:3a:88:e1:14:da:21:99:0f:1e:0d:7d:
de:fe:a6:73:0f:99:2a:0b:a7:69:35:e0:3e:ad:be:
ec:c6:81:aa:6e:bf:0c:40:a1:eb:be:1f:ef:e2:d8:
cc:75:0b:da:d7:e2:7f:73:8a:69:cb:fd:1c:1f:c4:
63:c1:ac:b4:41:cf:ae:12:38:93:a6:8b:7b:ac:a3:
db:6f:e0:8c:bc:72:b7:0d:a6:4b:af:d3:c7:2c:82:
4c:d2:04:e2:6f:0d:c7:1f:d9:bd:3c:52:8c:46:de:
25:44:f7:8d:e8:2d:57:6d:c4:3f:ec:0c:3c:d5:dd:
f7:3f:1d:82:43:f7:3c:30:72:f0:25:a9:28:88:5e:
19:c0:59:51:cc:91:14:f4:cb:1e:c5:07:c6:c1:82:
1e:a2:33:d2:54:92:2c:3b:58:1f:33:72:e4:3c:d5:
55:15:22:4e:a8:a7:c5:bd:a8:63:e3:d8:71:dd:de:
0f:78:97:92:9c:0c:54:03:b8:6a:79:2b:a9:4a:09:
21:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E2:04:1D:AA:ED:AB:54:74:1A:49:06:AF:1B:DB:E4:F9:00:32:3F
X509v3 Authority Key Identifier:
keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/ZeIEHartq1R0GkkGrxvb5PkAMj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.151.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:4c:4a:1d:fa:6a:db:98:a7:f5:48:8a:67:c5:df:f7:b9:51:
00:8e:d1:56:62:eb:6c:11:e0:b8:c8:70:da:2c:f6:74:37:ac:
2d:3b:b7:68:95:a8:a4:e8:dd:18:8d:8b:1f:b8:35:95:79:e7:
59:42:55:87:65:1a:da:c8:dc:0d:29:b0:7f:c5:27:39:08:eb:
13:b0:dd:6d:38:db:a7:42:b6:8c:7b:20:d0:cf:ae:7d:23:44:
45:26:db:4a:11:35:fc:f1:b2:63:46:6b:d3:55:d3:76:38:43:
9d:81:86:15:34:f8:c7:cb:a5:ae:e3:6f:0d:b1:fb:f8:99:b5:
47:29:5f:69:ab:cf:0e:1a:2f:a2:d2:86:80:80:ac:3e:ce:d8:
1d:a6:44:b2:02:da:88:98:19:ea:aa:0d:8b:f9:38:eb:e6:c0:
a7:ff:92:e3:6d:71:3b:c8:bd:a6:c2:5a:4b:2e:ee:00:57:71:
0f:08:cc:07:ec:90:ee:a5:a2:96:a0:aa:09:0c:74:0b:c1:97:
0a:da:46:0f:ff:65:eb:8f:e9:18:0a:0e:89:8f:7f:9f:3a:ce:
f1:a4:02:9a:77:b1:9a:15:f9:db:7f:aa:4c:62:ef:b5:97:8e:
a1:71:85:27:d2:6f:44:84:55:21:62:5d:53:69:ec:e1:40:f4:
95:ea:80:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:16:11 2025 by rpki-client