Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/zWw8lAKfrFF4RG-Mj_n5dY-0UOY.roa
File: zWw8lAKfrFF4RG-Mj_n5dY-0UOY.roa (raw, json)
Hash identifier: DKYofoTdihA+aTa5YdADLPg4Qah6RWaucr279EDCxes=
Subject key identifier: CD:6C:3C:94:02:9F:AC:51:78:44:6F:8C:8F:F9:F9:75:8F:B4:50:E6
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 019A1110C695A519EF08FD04895D1F6B17DE
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/zWw8lAKfrFF4RG-Mj_n5dY-0UOY.roa
Signing time: Thu 23 Oct 2025 12:35:03 +0000
ROA not before: Thu 23 Oct 2025 12:35:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133153
IP address blocks: 109.111.48.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 14:18:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:11:10:c6:95:a5:19:ef:08:fd:04:89:5d:1f:6b:17:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Oct 23 12:35:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd6c3c94029fac5178446f8c8ff9f9758fb450e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ea:47:1e:9a:22:78:36:eb:0c:49:7b:d9:3e:
8f:a9:44:e7:a8:ed:2c:b9:80:b7:4e:f2:81:f4:fb:
7f:11:6e:39:fb:da:09:cb:2e:d7:2f:46:30:61:3a:
77:d5:af:85:02:0f:40:c5:dc:53:26:28:14:0f:f0:
4f:95:f4:09:18:6e:a5:3b:d2:60:2a:50:47:27:50:
0d:a7:e1:96:cc:ac:de:9c:b8:dd:e9:36:0f:22:a2:
ae:1f:72:e6:f1:5b:36:fa:2b:76:23:b3:6b:2d:d0:
f4:15:c8:1a:26:2a:94:97:85:36:d0:1a:96:4c:c7:
fc:ac:8b:3c:6f:a2:6b:4d:07:ff:f0:40:b8:e9:7d:
3c:07:47:d3:c3:4a:58:e4:60:7a:dd:e0:24:9f:0e:
d7:dd:20:e9:84:9a:66:64:12:33:12:d0:22:68:66:
16:21:ae:fa:17:98:38:03:a9:3f:6d:62:c1:61:16:
09:e2:0f:73:18:69:54:7d:d7:c5:0e:e2:a0:b9:58:
36:37:37:98:20:d4:8f:e5:2f:54:95:fc:c6:86:fc:
f3:41:45:f7:d9:05:ef:4d:ea:3b:9a:a1:1c:35:e3:
1e:67:c0:55:b0:c4:c7:fc:ab:32:11:06:c8:4c:bc:
74:be:66:11:34:f7:28:39:7e:51:52:5f:5a:b3:c5:
cf:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:6C:3C:94:02:9F:AC:51:78:44:6F:8C:8F:F9:F9:75:8F:B4:50:E6
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/zWw8lAKfrFF4RG-Mj_n5dY-0UOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.48.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:88:10:a2:08:f0:fa:26:2f:48:bd:06:98:f2:19:d0:8b:cd:
62:24:4f:54:59:0f:74:e9:8a:38:af:d7:4f:02:e2:54:c3:14:
08:56:0d:9e:70:08:00:db:2a:08:8a:98:60:dd:da:01:a8:81:
bc:cf:61:60:2f:a1:75:d6:d4:13:ae:69:68:c4:8f:c0:7e:3f:
3d:25:26:b3:38:50:d5:b3:82:e6:70:f0:28:3a:cd:3a:7d:ae:
ca:f9:78:ab:ba:6d:47:f1:e5:8e:f8:a1:31:01:c7:8f:b5:15:
bd:18:26:45:6e:8c:ce:f7:9d:01:c4:8c:67:0f:23:5a:da:31:
d4:87:27:7b:99:f7:7f:22:5d:4f:9e:77:7b:6b:01:14:ce:d1:
96:09:ec:07:a7:f3:96:9d:6e:3f:1e:da:45:f7:96:4b:80:8f:
e3:91:69:5f:54:3a:ed:cb:fd:69:21:68:b9:01:a3:b6:99:c3:
cd:24:35:c5:0e:ca:10:29:ce:5a:e4:95:c8:83:11:59:00:10:
f1:6c:4e:96:d6:fa:d6:a9:6f:cb:03:2b:55:fa:5e:70:4c:4d:
5f:9b:e4:0e:14:93:c2:36:30:75:08:d1:92:bd:0d:ee:3f:75:
8d:8f:c7:fb:01:8c:4d:bf:59:d4:12:08:30:7e:c0:06:21:00:
89:4f:26:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 22:14:40 2025 by rpki-client