Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ZR38QH2mupDDhpaWdrJSOCE1PEQ.roa
File: ZR38QH2mupDDhpaWdrJSOCE1PEQ.roa (raw, json)
Hash identifier: Cwsdw4DmNzGdrgjf5ocT9IAaIinP5PMPE7dr+GRaVrY=
Subject key identifier: 65:1D:FC:40:7D:A6:BA:90:C3:86:96:96:76:B2:52:38:21:35:3C:44
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01972688E406FF4B54D08990EF5B7F093625
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ZR38QH2mupDDhpaWdrJSOCE1PEQ.roa
Signing time: Sat 31 May 2025 13:29:54 +0000
ROA not before: Sat 31 May 2025 13:29:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49581
IP address blocks: 5.231.26.0/24 maxlen: 24
89.106.69.0/24 maxlen: 24
89.106.71.0/24 maxlen: 24
2a02:2fc0:11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Jun 2025 04:07:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:26:88:e4:06:ff:4b:54:d0:89:90:ef:5b:7f:09:36:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 31 13:29:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=651dfc407da6ba90c386969676b2523821353c44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:75:c8:82:c2:ca:89:79:f6:90:f9:9e:31:6a:
79:ce:47:00:cd:1c:6f:22:be:60:86:4f:ec:62:a7:
85:7a:b7:b4:07:4b:78:1c:20:33:6b:a6:0a:57:d9:
a2:fc:81:db:e0:ef:3e:13:76:e6:39:ec:6a:25:3e:
c1:e2:8a:12:f7:55:02:28:c4:e2:86:d3:bc:af:34:
cb:2e:2e:8c:ff:32:4f:fb:59:28:a5:fe:75:cb:fd:
d8:b7:d9:dd:7c:8b:f5:31:a3:c2:83:96:e8:b2:e3:
5b:c2:3c:b2:f8:8a:c0:e2:92:2f:26:4c:b9:fc:0e:
79:7f:82:93:81:37:cf:af:6c:72:a4:ef:d1:90:2f:
e8:9a:a5:a0:87:39:dd:7e:1d:60:93:52:f3:85:75:
5e:b0:43:42:07:1b:f1:8d:bc:98:cf:bc:c3:70:73:
e8:a7:46:a3:5a:3d:30:c6:63:07:a2:9e:8f:64:9d:
d4:63:43:48:01:ca:bc:bb:56:bc:e7:6d:c0:b7:33:
1a:65:3b:9c:cf:c4:b1:aa:b4:88:d4:a4:39:07:66:
68:3a:4a:84:54:fb:d9:58:15:a3:12:47:8a:43:1e:
12:86:67:39:66:ad:1c:06:6b:ca:f2:95:84:cf:d7:
39:e0:68:8a:be:56:7c:a1:e8:a4:3c:5a:90:50:a0:
7c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:1D:FC:40:7D:A6:BA:90:C3:86:96:96:76:B2:52:38:21:35:3C:44
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ZR38QH2mupDDhpaWdrJSOCE1PEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.26.0/24
89.106.69.0/24
89.106.71.0/24
IPv6:
2a02:2fc0:11::/48
Signature Algorithm: sha256WithRSAEncryption
7c:96:5a:c5:47:74:44:88:e5:d2:24:b5:2c:73:92:bd:38:de:
58:89:de:8c:0d:6b:5b:64:eb:89:9c:75:8c:24:4c:01:dc:72:
9e:92:df:86:b8:3e:3e:c0:84:c9:68:aa:fb:10:1c:51:8e:ef:
70:86:aa:67:4b:05:6a:da:77:32:9f:2c:f8:01:32:8f:a7:a8:
55:23:f6:90:9c:4d:07:c4:98:76:91:3d:94:e8:b7:74:15:33:
b7:66:10:ac:c7:d5:31:c2:12:d0:57:1f:e2:1d:71:c3:81:68:
63:d6:fb:ed:8d:96:60:6e:86:fe:76:ed:f0:90:5c:8b:40:2a:
d6:11:1a:d2:b1:f2:48:49:87:e4:05:4b:c7:83:39:73:0e:bd:
99:6d:0d:5f:13:d5:3b:ae:48:6f:5f:3b:f2:31:9b:7a:9e:1f:
0e:40:4a:cf:ca:dc:2f:ad:41:c4:7d:38:b9:f7:7a:53:fb:4b:
71:0d:c6:93:1f:38:02:5b:51:0a:72:d1:af:c9:bc:22:98:4e:
fa:1d:b1:f1:31:b7:9f:c5:57:a2:71:e5:1b:37:a0:ea:a2:7a:
ad:90:e2:79:56:7d:df:81:61:bf:c2:92:7e:fd:90:5a:cd:7d:
c9:76:82:63:8a:ef:29:34:c4:36:72:a4:66:03:d1:b2:c2:05:
1b:26:a5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 13:02:46 2025 by rpki-client