Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/ZEaWX4vp4W7zRNcPf0TP02hgItQ.roa
File: ZEaWX4vp4W7zRNcPf0TP02hgItQ.roa (raw, json)
Hash identifier: sJ0gPMef931rqzhVp0zgr8podzklf3D6mI15/1mXqB8=
Subject key identifier: 64:46:96:5F:8B:E9:E1:6E:F3:44:D7:0F:7F:44:CF:D3:68:60:22:D4
Certificate issuer: /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Certificate serial: 0198F0D0BB88FA75EAA106AB83AA2096B3EC
Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/ZEaWX4vp4W7zRNcPf0TP02hgItQ.roa
Signing time: Thu 28 Aug 2025 13:14:28 +0000
ROA not before: Thu 28 Aug 2025 13:14:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 62.164.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f0:d0:bb:88:fa:75:ea:a1:06:ab:83:aa:20:96:b3:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Validity
Not Before: Aug 28 13:14:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6446965f8be9e16ef344d70f7f44cfd3686022d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e4:64:03:51:31:80:c1:a6:5b:16:14:cc:10:
b3:f2:e1:ed:4c:a6:bc:30:08:91:2f:ad:e7:c1:ff:
db:ee:28:6a:6b:da:c6:79:91:0b:ef:c1:9c:96:a3:
b8:fd:80:9c:81:44:48:be:d1:6a:85:7b:9f:36:82:
29:75:20:e2:d9:69:08:c9:38:93:02:5d:44:32:65:
f7:78:8a:d0:6b:f5:11:ba:dd:24:4e:7a:8b:6e:aa:
be:34:3e:f7:5d:e4:e3:ad:04:14:af:34:15:7f:e8:
d0:42:8f:00:c5:f6:ea:e7:65:1d:39:d9:b7:c9:70:
f8:92:cf:3c:20:2a:72:12:5e:e2:de:e5:ed:0c:16:
b1:e7:18:0a:53:fd:f7:e8:8c:70:ac:5d:c3:7d:89:
de:4a:21:bc:90:47:d7:59:dd:93:9e:5f:1e:4f:df:
3e:f4:f5:76:e0:25:1a:05:2e:fa:f5:f9:2d:49:ea:
b6:d7:2f:37:a2:68:e2:27:bb:c1:05:38:a8:1a:1b:
0b:ae:64:75:28:d8:d1:25:63:b1:5c:67:2e:40:a5:
7d:6a:d7:e1:9a:45:2e:95:f6:10:9d:a1:9c:31:f1:
63:b2:0f:25:75:fb:a8:5e:d0:12:ef:0a:a1:54:1b:
74:17:96:7e:f3:2d:a1:48:79:72:b3:60:14:a3:ff:
dc:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:46:96:5F:8B:E9:E1:6E:F3:44:D7:0F:7F:44:CF:D3:68:60:22:D4
X509v3 Authority Key Identifier:
keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/ZEaWX4vp4W7zRNcPf0TP02hgItQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.164.195.0/24
Signature Algorithm: sha256WithRSAEncryption
64:d6:f1:ba:46:b9:0a:88:e7:36:9a:68:af:ac:44:da:b4:47:
cb:2d:b2:70:69:be:ed:a2:a5:78:ba:69:ed:ab:ba:4c:27:ab:
d4:f1:21:68:e8:1b:3e:80:8b:54:2d:3a:fd:dd:41:bf:67:6e:
87:92:60:f1:24:63:a3:ce:b3:a2:e7:bd:cf:99:5d:d8:1a:c6:
f0:2d:dc:1c:37:68:e6:14:7f:d8:3e:3b:d5:27:d9:42:17:34:
ba:eb:51:3f:24:ff:7c:0e:9d:6d:f8:1b:6e:e1:9a:07:b2:26:
96:b8:d9:c7:69:48:b0:ac:d7:9a:6f:f5:7b:0c:5b:ad:53:cf:
3d:9e:0b:c9:e1:9b:40:93:de:2d:f9:80:34:ae:f9:83:38:17:
25:46:3f:9d:35:e4:23:c4:bd:17:a2:3a:45:e8:cb:40:b2:e8:
06:dd:a1:b3:70:61:a3:46:a5:24:ca:54:6a:a0:49:91:1b:98:
dc:e4:7a:01:b6:90:21:bf:87:19:bd:e9:f7:0c:93:32:47:fa:
31:79:83:c1:b0:71:6a:51:96:de:dc:55:73:16:70:7e:88:88:
15:e8:63:14:ea:89:e8:66:38:cc:20:ff:b7:c1:10:f3:f7:63:
bf:2f:ef:62:a0:cf:3f:3b:f0:af:b6:dd:83:69:36:40:85:a7:
75:80:d1:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 15:41:49 2025 by rpki-client