Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/Z__qWjsTqKN6H6Uy48R_joDrg6A.roa
File: Z__qWjsTqKN6H6Uy48R_joDrg6A.roa (raw, json)
Hash identifier: hy+rnvr7Ps+zzGaNk6QHsEt8A1/U9k/JFaxCitWq0s8=
Subject key identifier: 67:FF:EA:5A:3B:13:A8:A3:7A:1F:A5:32:E3:C4:7F:8E:80:EB:83:A0
Certificate issuer: /CN=83e6403cf73221c117ea49bc9234fe6f4a11d780
Certificate serial: 01983674A5B636A5E6D125A4421C215B051D
Authority key identifier: 83:E6:40:3C:F7:32:21:C1:17:EA:49:BC:92:34:FE:6F:4A:11:D7:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-ZAPPcyIcEX6km8kjT-b0oR14A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/Z__qWjsTqKN6H6Uy48R_joDrg6A.roa
Signing time: Wed 23 Jul 2025 08:44:30 +0000
ROA not before: Wed 23 Jul 2025 08:44:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42687
IP address blocks: 185.203.176.0/22 maxlen: 24
185.203.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-ZAPPcyIcEX6km8kjT-b0oR14A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:36:74:a5:b6:36:a5:e6:d1:25:a4:42:1c:21:5b:05:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e6403cf73221c117ea49bc9234fe6f4a11d780
Validity
Not Before: Jul 23 08:44:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67ffea5a3b13a8a37a1fa532e3c47f8e80eb83a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:78:db:ff:e9:79:e3:32:9d:27:59:6d:06:b5:
64:5e:cd:24:da:bb:53:01:b3:27:16:68:f0:7a:db:
64:bd:05:e0:99:f6:df:ca:03:a6:b8:cd:cd:18:a6:
dd:86:5a:90:6f:3c:d6:9a:6b:b6:5f:47:4e:06:59:
ee:7f:6d:c0:5c:cf:3d:35:c2:31:ce:48:52:a6:10:
07:22:93:41:b1:1b:92:02:9e:ac:0b:fb:f4:d7:75:
f1:71:c3:5a:9d:20:22:21:a1:25:f2:e2:1e:c7:a5:
8a:d0:39:20:8d:fb:c0:b2:fb:04:84:6b:36:80:50:
67:6f:5f:56:5a:3c:6b:7e:6f:de:28:e2:58:f6:f2:
53:e4:ba:98:ed:d5:ae:8e:7b:20:29:41:07:a4:12:
35:c7:13:1e:4b:72:97:43:ae:59:ef:24:46:17:14:
c0:cc:c6:42:75:f5:4f:d3:92:6f:62:c2:8b:f4:97:
4b:0e:93:22:d1:4d:b8:38:ab:fd:b4:f5:db:b6:36:
0f:e7:33:dc:41:c9:3f:3a:a9:44:6c:55:2a:00:cd:
8c:0c:59:94:2a:c2:ae:21:e3:85:5f:19:27:75:53:
cc:47:58:5e:ac:40:32:03:ae:4a:83:b0:97:bd:c5:
db:fc:e4:96:79:c1:6a:1a:1f:61:29:a8:77:44:d2:
3c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:FF:EA:5A:3B:13:A8:A3:7A:1F:A5:32:E3:C4:7F:8E:80:EB:83:A0
X509v3 Authority Key Identifier:
keyid:83:E6:40:3C:F7:32:21:C1:17:EA:49:BC:92:34:FE:6F:4A:11:D7:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-ZAPPcyIcEX6km8kjT-b0oR14A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/Z__qWjsTqKN6H6Uy48R_joDrg6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.176.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:91:2b:f1:0c:87:b7:62:cc:7d:e1:72:40:56:e4:af:fa:7a:
61:d9:1b:1b:df:0b:84:df:9a:bc:82:42:35:27:6a:bf:96:96:
21:ea:ec:83:3a:15:de:c2:32:5a:90:37:59:96:8c:b1:37:b1:
2c:7f:e6:3e:30:b5:f3:4f:c2:0a:08:c3:4b:9e:58:ea:b2:84:
71:c2:7c:6e:d0:e0:4d:f5:60:2e:e1:8d:9f:5c:e0:c6:98:d7:
bc:2b:dd:db:19:fa:b7:fb:a7:85:bc:86:d8:b9:5d:21:93:63:
00:b0:68:57:3a:d4:4c:19:8b:e5:1c:ab:de:8d:9e:63:95:7b:
9d:a0:46:c4:f4:8a:b4:ed:ba:69:9b:23:46:17:ff:43:a6:79:
f0:03:4f:bb:68:6d:af:da:07:54:f4:91:41:69:6e:03:30:f8:
d8:53:c7:19:8b:59:a4:b3:52:00:0e:29:68:b9:b1:49:19:2c:
28:01:3f:79:41:df:d6:92:00:ca:3a:14:9b:a3:00:4b:62:50:
10:a5:b7:57:b0:ad:55:45:6f:76:65:b7:b4:ab:04:0e:5b:4b:
9c:71:a8:fe:b8:0e:78:4d:57:9c:f0:38:b1:07:38:29:d3:85:
a0:a5:e5:16:dd:5a:3f:98:4d:a1:a0:9f:b1:bb:eb:84:05:63:
85:cb:1c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:43:56 2025 by rpki-client