Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/ZgcT_xGBKMNrtMGkPvAQGbK57CA.roa
File: ZgcT_xGBKMNrtMGkPvAQGbK57CA.roa (raw, json)
Hash identifier: LO9lnXYZVLFxsVnwJH0koPAP9i66m3dDGUnErEHvsko=
Subject key identifier: 66:07:13:FF:11:81:28:C3:6B:B4:C1:A4:3E:F0:10:19:B2:B9:EC:20
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 01993836225D21B0C54DE4C151BAE811551B
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/ZgcT_xGBKMNrtMGkPvAQGbK57CA.roa
Signing time: Thu 11 Sep 2025 09:58:15 +0000
ROA not before: Thu 11 Sep 2025 09:58:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52116
IP address blocks: 89.23.71.0/24 maxlen: 24
178.254.170.0/24 maxlen: 24
178.254.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Sep 2025 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:36:22:5d:21:b0:c5:4d:e4:c1:51:ba:e8:11:55:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Sep 11 09:58:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=660713ff118128c36bb4c1a43ef01019b2b9ec20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:25:df:80:65:3f:17:47:dc:6d:68:46:76:81:
d2:9a:d1:20:d3:eb:56:87:c9:60:82:d3:41:22:01:
95:c1:6a:09:0b:99:85:bd:3e:61:db:9a:84:41:87:
af:70:cf:1e:5c:b9:f5:f1:9f:90:4b:55:01:3e:0c:
be:02:54:8a:5e:31:65:ce:c0:73:ac:64:08:fc:3a:
73:88:1e:37:2b:34:18:c4:8c:67:c3:81:2e:4a:be:
d8:64:be:25:9a:40:8d:14:0d:a2:93:77:ff:bd:9c:
fa:75:86:92:a7:74:2d:ac:47:d8:4d:27:06:6c:01:
60:42:07:55:46:f9:0c:21:23:a9:57:46:26:60:e4:
3f:0e:3e:83:71:15:8c:ed:f1:01:5c:cf:fa:03:7b:
bb:32:67:11:a7:2d:3c:c7:fd:63:ec:35:38:94:10:
a6:db:38:ad:93:8b:ca:88:12:0d:2f:9c:d7:b8:f9:
8b:86:ad:cc:a3:ce:59:c9:e4:ae:74:3b:3b:e7:b7:
97:24:2d:92:aa:46:06:1d:54:a8:aa:22:bc:23:90:
38:0d:e3:ae:6d:e8:1f:89:f0:14:42:dc:4c:fa:97:
69:a7:58:38:59:e7:fb:c1:4c:e2:7d:cf:cb:09:fb:
4a:4a:7a:4b:7a:a7:33:79:62:1b:76:77:3c:0d:3a:
05:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:07:13:FF:11:81:28:C3:6B:B4:C1:A4:3E:F0:10:19:B2:B9:EC:20
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/ZgcT_xGBKMNrtMGkPvAQGbK57CA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.71.0/24
178.254.170.0/24
178.254.180.0/24
Signature Algorithm: sha256WithRSAEncryption
42:91:13:75:2c:51:cf:b3:b0:2f:2b:f8:64:92:dd:3b:3f:7b:
79:c5:14:4e:2a:08:a8:6c:7c:de:8b:36:aa:e7:ef:fd:f3:6d:
c1:c3:d1:77:bb:7a:4f:5f:22:fa:11:fe:7c:47:8d:3a:72:5b:
f2:f2:87:06:86:32:6c:fd:fb:64:8f:bd:c1:55:f8:6e:a0:d8:
f7:68:fa:2f:7d:f1:bc:78:d5:41:67:30:44:f5:35:37:7d:b1:
e4:31:9d:47:91:d9:f4:ee:48:e9:c3:53:c6:bd:41:db:1f:2f:
83:d8:53:a1:de:12:9c:da:c6:e9:9d:ba:13:7d:45:48:ff:63:
45:45:79:74:91:39:f9:4b:db:bc:d9:93:bd:00:16:10:11:c1:
7b:88:f4:c2:71:58:64:37:71:f4:7a:ed:0e:cc:34:e9:fa:2c:
6b:77:cf:9c:5c:bd:d0:06:b8:da:70:f7:8a:af:82:3b:9f:e7:
2a:21:7d:22:cc:0d:d1:26:7f:b2:e9:39:ad:d8:9b:8e:a2:be:
63:90:d4:81:2b:2d:0c:91:ab:e9:d1:ca:29:54:25:67:82:8e:
49:ec:3f:14:c9:a7:64:60:8e:6f:ba:c3:0c:17:30:fb:b2:04:
a9:e6:eb:6e:13:fe:27:39:d5:ea:a5:68:46:70:44:9f:bc:48:
19:f7:f5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 13 23:25:42 2025 by rpki-client