Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/Zbhs7ceORmznv_4uvlnuPbBDx_c.roa
File: Zbhs7ceORmznv_4uvlnuPbBDx_c.roa (raw, json)
Hash identifier: MJdiewY9l3NAhxc3ZEXNNrBUcBcVMuNcqhqsZh7jqig=
Subject key identifier: 65:B8:6C:ED:C7:8E:46:6C:E7:BF:FE:2E:BE:59:EE:3D:B0:43:C7:F7
Certificate issuer: /CN=d1dbf31fd9379cab5c50afd392a2ee905718835f
Certificate serial: 019A34EAEEE1101F4F7E75C06C4B89AFD872
Authority key identifier: D1:DB:F3:1F:D9:37:9C:AB:5C:50:AF:D3:92:A2:EE:90:57:18:83:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/Zbhs7ceORmznv_4uvlnuPbBDx_c.roa
Signing time: Thu 30 Oct 2025 11:40:03 +0000
ROA not before: Thu 30 Oct 2025 11:40:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60654
IP address blocks: 192.42.253.0/24 maxlen: 24
195.5.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft
rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:34:ea:ee:e1:10:1f:4f:7e:75:c0:6c:4b:89:af:d8:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1dbf31fd9379cab5c50afd392a2ee905718835f
Validity
Not Before: Oct 30 11:40:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65b86cedc78e466ce7bffe2ebe59ee3db043c7f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a9:7d:ed:68:8b:19:7f:5d:6a:80:35:69:44:
23:7d:34:e2:47:e6:b8:0c:04:13:96:b7:fb:21:7b:
90:d2:f0:4c:4a:f7:76:9d:ca:d8:9d:dd:fa:2c:90:
e0:7f:93:7f:66:4d:3e:ac:ee:92:8f:ad:d5:8c:a4:
0e:cc:3b:c6:67:90:30:30:62:61:b2:87:95:9b:3a:
22:38:c2:de:fd:fa:68:32:41:bf:5a:54:d2:b4:55:
5c:68:1e:28:ec:20:14:5a:c4:ef:81:4b:32:5f:a6:
17:e6:5a:7b:cc:20:c8:60:3b:a9:9a:30:8a:41:c1:
99:65:0d:20:d7:8f:fc:1c:bc:4f:bf:1b:bb:5b:9f:
97:f9:80:6b:e3:39:a4:7c:e2:bf:f5:a5:03:8d:c3:
78:21:3e:15:ee:3c:24:44:99:1b:80:10:40:dd:58:
01:98:57:cd:39:9f:4a:02:c8:aa:d9:59:1a:2c:c2:
0a:c0:d4:7a:44:22:1e:9c:79:4c:e3:74:45:d3:93:
06:5f:78:d2:9a:ac:f2:fc:17:f7:06:3d:b0:13:a3:
f8:18:c2:c4:d9:b1:34:55:b7:36:7c:a1:9b:9f:25:
af:d5:df:d2:fe:9d:b7:e8:fd:bc:21:5b:78:5b:bd:
48:9b:94:ee:5a:a2:2c:53:0d:4c:f6:67:83:56:5c:
c0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B8:6C:ED:C7:8E:46:6C:E7:BF:FE:2E:BE:59:EE:3D:B0:43:C7:F7
X509v3 Authority Key Identifier:
keyid:D1:DB:F3:1F:D9:37:9C:AB:5C:50:AF:D3:92:A2:EE:90:57:18:83:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/Zbhs7ceORmznv_4uvlnuPbBDx_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.42.253.0/24
195.5.189.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:97:12:1f:db:47:63:c6:97:c1:04:d0:d0:35:84:b2:1b:a6:
ae:20:b4:db:0f:4f:00:b4:95:d2:aa:24:04:af:0d:3d:81:94:
28:50:7b:17:39:f6:ab:87:d1:36:fc:d1:05:93:78:4c:da:99:
95:ae:f7:2f:bc:b0:05:c6:49:b0:d8:8f:ce:c7:dd:9d:9b:a7:
5e:4a:e4:c1:a2:9e:44:e4:a7:cd:1e:86:26:6d:aa:45:dd:34:
97:13:67:5a:c0:76:8a:aa:1e:d0:69:34:2d:6a:f3:03:a4:1c:
35:2b:d8:08:e1:9d:d5:e8:09:ec:06:19:c8:17:7f:b8:04:42:
42:b8:cb:61:ce:b4:23:4b:57:8a:63:19:cb:03:aa:46:1b:5c:
c7:b3:f5:e7:98:e2:2b:62:a7:8a:e4:5b:9b:9e:47:fa:89:10:
4d:63:8d:1e:f5:36:35:1b:ed:28:62:79:14:1b:b0:41:73:16:
0b:cc:31:ec:7b:27:74:0f:ca:1d:aa:be:28:7f:ba:39:bf:00:
36:3f:4e:4e:04:f4:0c:f9:7e:83:e8:f9:80:8a:77:44:bb:33:
28:3e:32:4e:e4:8f:68:33:53:2d:f2:e3:ac:28:ef:4b:d6:77:
7c:b3:75:0d:07:2e:d5:08:61:28:e8:04:99:48:ad:dc:e5:b7:
43:cb:b1:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:48:41 2025 by rpki-client