Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zJ4BwngUWeS3nc4xGM2vUrIitrY.roa
File: zJ4BwngUWeS3nc4xGM2vUrIitrY.roa (raw, json)
Hash identifier: KXqbywk0yXuFh/raeiudnAmFBinYT2UqmDBW5pusvE0=
Subject key identifier: CC:9E:01:C2:78:14:59:E4:B7:9D:CE:31:18:CD:AF:52:B2:22:B6:B6
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019A48B2B7BA544F8744CD9284DFD7E86882
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zJ4BwngUWeS3nc4xGM2vUrIitrY.roa
Signing time: Mon 03 Nov 2025 07:51:03 +0000
ROA not before: Mon 03 Nov 2025 07:51:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50368
IP address blocks: 87.121.128.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Nov 2025 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:48:b2:b7:ba:54:4f:87:44:cd:92:84:df:d7:e8:68:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 3 07:51:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc9e01c2781459e4b79dce3118cdaf52b222b6b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:11:d8:b9:43:14:7c:a0:b6:48:e9:de:7e:8c:
42:1c:54:a9:96:7c:56:b3:fd:b3:d0:e8:7e:b1:76:
af:bc:d5:87:1f:2e:58:2b:d5:2a:6c:cc:80:b7:10:
1f:fe:e4:f9:e1:bc:b4:38:e5:08:0d:b3:64:83:a2:
50:0a:6e:96:b7:ea:41:43:a6:fd:73:4a:60:f2:99:
4a:dc:c4:6e:e6:c9:53:88:f3:1e:fd:2a:f6:66:27:
3e:d9:bb:7a:c5:51:dc:78:0d:24:f0:54:5b:33:69:
3b:64:71:17:80:48:6a:a1:3b:2a:65:8d:59:39:7b:
6d:94:9e:bc:ff:0d:0f:a9:bb:4c:57:d6:4b:d8:4f:
13:a4:a0:df:fc:a3:3d:60:42:f0:07:ac:46:f6:83:
90:b3:28:65:ec:fd:e2:bd:73:60:54:1f:7c:64:76:
18:39:63:21:da:f2:55:f3:2e:53:5f:54:39:8a:30:
96:29:c1:8c:85:7c:be:1b:b0:ac:f9:c4:78:22:fe:
76:b5:ca:2d:7c:9b:f5:34:73:74:61:8e:f8:e8:f2:
83:bc:a3:15:83:df:e5:76:49:de:15:b8:b4:55:00:
cc:75:f0:b7:c1:40:a1:58:0b:16:65:8a:78:b1:69:
5d:10:e0:63:dd:39:84:ce:30:f1:67:41:97:ca:42:
1d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:9E:01:C2:78:14:59:E4:B7:9D:CE:31:18:CD:AF:52:B2:22:B6:B6
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zJ4BwngUWeS3nc4xGM2vUrIitrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.128.0/22
Signature Algorithm: sha256WithRSAEncryption
57:18:58:88:c1:c2:20:d2:4d:22:45:99:55:24:40:2c:55:7e:
28:b1:f2:0a:ba:e0:2e:0c:08:cd:ba:49:f9:dc:4b:8c:04:62:
51:a9:78:b5:7f:87:a8:c9:28:04:40:58:72:3f:37:75:47:13:
74:19:77:e3:1e:d1:e0:aa:3c:82:be:21:7a:f9:7d:76:33:13:
2b:cb:e8:8d:05:9f:78:69:f1:8f:50:29:1e:7a:6b:e5:8c:d4:
82:3b:7c:3e:ef:f5:63:4a:e0:48:42:43:ae:ec:38:5e:cc:9e:
9e:be:e7:d2:a4:7d:72:18:53:2e:50:02:4d:e4:14:11:fe:39:
30:5b:a0:f0:be:6d:d9:90:72:17:d4:e1:55:c7:8f:9a:e5:ce:
8e:33:97:03:4a:67:f6:b5:75:2e:98:7e:0e:6d:53:36:61:97:
93:f1:e3:ec:74:39:ad:77:07:fd:ca:80:62:65:09:23:5e:ee:
d6:4b:d8:f1:ac:44:07:ed:c0:a6:02:e1:0d:44:6c:41:ff:3d:
55:90:5b:b4:82:1c:20:4f:68:32:a0:5e:11:bd:ba:58:59:e3:
86:0a:a1:bd:ec:dc:cc:2b:25:9d:f8:1e:d6:3e:11:7c:22:b1:
2b:78:0e:47:b5:18:74:14:22:df:8a:0c:6a:83:98:fb:1a:6e:
e1:51:a7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 10 11:38:34 2025 by rpki-client