Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ZVpAbpy6TNlcsgw3mLnCVNJMuSo.roa
File: ZVpAbpy6TNlcsgw3mLnCVNJMuSo.roa (raw, json)
Hash identifier: C7tXyKEMzUCGUswjrEK/CO/fm6rxkcfNgUvSUSY7wes=
Subject key identifier: 65:5A:40:6E:9C:BA:4C:D9:5C:B2:0C:37:98:B9:C2:54:D2:4C:B9:2A
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019A0AD8AC6A8034638484F3BCC1C3136D67
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ZVpAbpy6TNlcsgw3mLnCVNJMuSo.roa
Signing time: Wed 22 Oct 2025 07:36:03 +0000
ROA not before: Wed 22 Oct 2025 07:36:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30058
IP address blocks: 62.192.116.0/23 maxlen: 23
62.192.118.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 08:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0a:d8:ac:6a:80:34:63:84:84:f3:bc:c1:c3:13:6d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 22 07:36:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=655a406e9cba4cd95cb20c3798b9c254d24cb92a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1a:73:0e:c1:cd:9f:6f:f4:0a:71:9b:66:63:
d8:2f:13:9f:78:86:82:8f:69:56:ae:a9:fe:2b:ff:
94:40:bd:97:f8:35:bd:7d:be:a7:0a:1d:d3:53:89:
76:82:ed:d2:b1:21:ea:77:95:6e:fb:ec:5c:91:a6:
b5:ca:a3:f9:80:bd:d6:de:5e:ec:a9:3a:ec:45:aa:
6a:27:a8:5b:c1:dc:b1:0a:43:77:fe:50:f6:49:f5:
23:50:d2:84:d4:7a:1b:e8:c6:c5:d3:08:36:89:65:
2e:58:e1:1b:54:e3:cb:e7:b1:ef:38:ba:32:0e:82:
23:30:6b:d2:5f:8e:02:40:a4:97:19:12:0e:aa:08:
71:9b:3a:11:88:ba:a5:9e:40:ae:df:c5:68:78:ff:
b6:1e:e9:2a:46:ca:56:89:32:c2:e5:20:0c:a3:0b:
16:3d:3e:a7:26:63:7c:a8:15:7c:4d:63:ec:d9:1c:
86:e8:29:e3:ed:ef:00:51:fe:45:82:41:68:b3:ca:
c3:6a:74:40:28:4f:ce:2f:39:64:55:bc:49:dd:e7:
f7:a2:c8:fe:f1:af:7d:72:a1:2f:c8:e8:27:9b:c7:
60:a3:76:a1:79:47:3b:a2:25:08:69:bc:b7:fb:44:
b3:6e:f2:be:23:b4:18:74:d8:6c:ab:f4:d0:76:dc:
ad:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:5A:40:6E:9C:BA:4C:D9:5C:B2:0C:37:98:B9:C2:54:D2:4C:B9:2A
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ZVpAbpy6TNlcsgw3mLnCVNJMuSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.116.0/22
Signature Algorithm: sha256WithRSAEncryption
48:3e:48:36:d6:34:f5:b0:d3:0f:af:8b:41:5e:5b:0d:1b:d1:
27:72:72:c0:99:e2:19:33:e5:5b:30:7f:a2:66:8a:e3:30:4d:
7c:af:f9:9a:ec:a3:77:b6:90:51:1e:db:e9:44:02:24:01:8e:
8a:7b:b3:71:7e:07:09:ea:13:b8:b2:ad:ae:1b:a9:cc:f3:32:
85:ba:ac:cf:83:8c:da:8d:4d:d8:98:bc:ab:8e:1f:3f:10:3f:
a3:24:62:aa:8d:aa:7d:24:ad:b1:fe:c6:a9:ec:37:af:30:4d:
5b:bf:ef:47:c9:96:3d:b2:d4:e3:d9:dd:a5:58:6a:63:56:a6:
54:6f:38:b6:56:5c:ff:06:f8:51:5b:12:d2:8b:a7:6b:10:5b:
4c:d2:6a:47:a3:2c:4c:85:36:76:29:ba:a3:54:07:7c:32:a3:
0a:6a:27:63:7e:64:f1:bf:41:7c:1e:e9:7a:fb:e9:6a:cd:bf:
bf:10:78:05:b5:6d:9b:9b:6e:34:76:c8:1d:08:4f:22:ea:50:
90:05:31:92:0c:0d:b1:9b:1a:b2:91:60:ef:cd:a5:27:ab:a8:
5f:ee:56:45:00:6e:a0:4c:5b:fd:92:a2:e6:2d:4c:5d:80:ca:
88:9b:32:1c:ff:8b:5c:a4:cc:d7:e9:08:bc:95:1f:73:f3:7f:
23:92:6e:32
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZoK2KxqgDRjhITzvMHDE21nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjUxMDIyMDczNjAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTVhNDA2ZTljYmE0Y2Q5NWNiMjBjMzc5OGI5YzI1NGQyNGNiOTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxpzDsHNn2/0CnGbZmPYLxOfeIaC
j2lWrqn+K/+UQL2X+DW9fb6nCh3TU4l2gu3SsSHqd5Vu++xckaa1yqP5gL3W3l7s
qTrsRapqJ6hbwdyxCkN3/lD2SfUjUNKE1Hob6MbF0wg2iWUuWOEbVOPL57HvOLoy
DoIjMGvSX44CQKSXGRIOqghxmzoRiLqlnkCu38VoeP+2HukqRspWiTLC5SAMowsW
PT6nJmN8qBV8TWPs2RyG6Cnj7e8AUf5FgkFos8rDanRAKE/OLzlkVbxJ3ef3osj+
8a99cqEvyOgnm8dgo3aheUc7oiUIaby3+0SzbvK+I7QYdNhsq/TQdtytGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGVaQG6cukzZXLIMN5i5wlTSTLkqMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvWlZwQWJweTZUTmxjc2d3M21MbkNWTkpNdVNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCPsB0MA0G
CSqGSIb3DQEBCwUAA4IBAQBIPkg21jT1sNMPr4tBXlsNG9EncnLAmeIZM+VbMH+i
ZorjME18r/ma7KN3tpBRHtvpRAIkAY6Ke7NxfgcJ6hO4sq2uG6nM8zKFuqzPg4za
jU3YmLyrjh8/ED+jJGKqjap9JK2x/sap7DevME1bv+9HyZY9stTj2d2lWGpjVqZU
bzi2Vlz/BvhRWxLSi6drEFtM0mpHoyxMhTZ2KbqjVAd8MqMKaidjfmTxv0F8Hul6
++lqzb+/EHgFtW2bm240dsgdCE8i6lCQBTGSDA2xmxqykWDvzaUnq6hf7lZFAG6g
TFv9kqLmLUxdgMqImzIc/4tcpMzX6Qi8lR9z838jkm4y
-----END CERTIFICATE-----
Generated at Sat Oct 25 15:17:02 2025 by rpki-client