Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/ZgsJ4mKKbbIsgFOoVyjqV8FKBWE.roa
File: ZgsJ4mKKbbIsgFOoVyjqV8FKBWE.roa (raw, json)
Hash identifier: EtvOvEJo6Cyf77jVld5ZTV+Rsw+jH9y+Q9afLM+AFLk=
Subject key identifier: 66:0B:09:E2:62:8A:6D:B2:2C:80:53:A8:57:28:EA:57:C1:4A:05:61
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 019A4A953456D25ECED158F6185EAE106DAE
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/ZgsJ4mKKbbIsgFOoVyjqV8FKBWE.roa
Signing time: Mon 03 Nov 2025 16:38:03 +0000
ROA not before: Mon 03 Nov 2025 16:38:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34450
IP address blocks: 212.111.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4a:95:34:56:d2:5e:ce:d1:58:f6:18:5e:ae:10:6d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Nov 3 16:38:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=660b09e2628a6db22c8053a85728ea57c14a0561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ea:f4:16:fd:2d:64:99:69:aa:57:2d:b6:df:
ac:1c:38:6f:1e:6b:13:ac:40:91:6b:14:e7:0d:75:
1d:22:f7:28:27:c9:e2:7b:12:44:6f:ee:04:2d:4f:
5f:be:03:b7:91:7c:bc:08:72:37:6f:5b:84:3c:b3:
7b:5d:47:65:d3:3e:1e:92:74:91:9f:d8:0e:00:4e:
cc:5e:b8:b4:c5:3b:f1:20:a1:da:a6:6b:89:96:2f:
01:08:71:d6:60:eb:20:af:77:72:ea:79:be:de:6f:
26:25:6d:4b:20:fb:ee:09:e7:56:54:4f:cc:54:bf:
9a:47:bc:ef:80:9b:5c:5b:91:98:f0:aa:09:97:b3:
b4:13:ec:c2:cb:6f:37:4b:72:97:c7:ce:5f:d7:d3:
4b:bb:8f:63:41:6b:4a:ea:c8:02:e8:09:2d:93:c0:
90:5e:ab:fc:7e:d2:8c:f7:24:df:af:af:e2:a1:65:
c3:7e:fb:b7:cd:df:2b:9c:53:4d:fc:b4:3a:8f:4e:
bd:a1:4a:38:aa:cf:c6:62:bd:f6:32:4f:9f:43:32:
d9:83:54:1f:95:70:5d:aa:79:8d:3b:ec:cc:53:45:
98:78:14:28:11:00:59:82:df:72:5d:31:cd:44:ae:
d9:3d:a4:6b:b8:4a:13:8c:f1:f8:0c:42:b8:d8:42:
25:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:0B:09:E2:62:8A:6D:B2:2C:80:53:A8:57:28:EA:57:C1:4A:05:61
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/ZgsJ4mKKbbIsgFOoVyjqV8FKBWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.111.200.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:90:50:63:78:17:b1:4c:f9:7f:84:36:f0:ab:74:7e:00:ad:
be:16:41:1e:fb:cf:b8:50:7e:28:35:62:49:74:b7:92:64:8f:
c0:7f:4a:06:a8:02:23:ca:e1:77:fe:a5:69:01:11:a3:a6:2b:
e1:ce:7b:4d:a0:84:39:bf:5b:a8:db:06:b5:99:c5:57:c0:8c:
72:12:36:3b:9b:07:0c:f1:f9:e0:37:eb:e5:e8:02:a7:ab:94:
b9:08:2f:35:f9:cf:c8:97:61:8f:d5:f8:79:d3:17:27:e3:b8:
c5:84:e5:2d:d7:ae:af:f6:b4:5a:8a:c9:e3:b9:0b:0b:2c:2c:
c3:39:76:57:12:c0:a0:2a:16:02:61:82:1d:4a:14:84:2e:7e:
a5:f8:b5:5f:6a:05:bf:6b:c6:b9:b4:60:75:90:02:a1:f7:df:
c1:37:54:8d:e1:d8:8a:06:ac:e3:13:e8:c9:a2:2a:9e:f1:6d:
59:29:15:ac:5a:8a:23:d0:c3:6d:ea:ff:c8:b2:94:68:8f:f1:
d3:19:25:68:cb:f0:f3:7b:59:fd:fb:21:6e:3e:ea:cd:af:ac:
ab:ba:dc:30:b2:bb:9a:d0:e4:6c:b9:9f:ec:f0:11:99:5c:ef:
00:10:78:e9:0c:91:f3:a2:41:5b:ba:12:04:46:38:5f:f4:e1:
1a:59:ee:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:12:25 2025 by rpki-client