Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/vk0CZ3RFiVMIPV6fJBbYIndo60g.roa
File: vk0CZ3RFiVMIPV6fJBbYIndo60g.roa (raw, json)
Hash identifier: nhR9r0G3s61c+Tu68ZLIyGOtCmlcHBQEXfCV7pOI8N4=
Subject key identifier: BE:4D:02:67:74:45:89:53:08:3D:5E:9F:24:16:D8:22:77:68:EB:48
Certificate issuer: /CN=cf275d0fe63998ea1b7d39e518fb329f76bed166
Certificate serial: 019A5EA4005033D1291A48DA984DC73A012F
Authority key identifier: CF:27:5D:0F:E6:39:98:EA:1B:7D:39:E5:18:FB:32:9F:76:BE:D1:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zyddD-Y5mOobfTnlGPsyn3a-0WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/vk0CZ3RFiVMIPV6fJBbYIndo60g.roa
Signing time: Fri 07 Nov 2025 14:06:37 +0000
ROA not before: Fri 07 Nov 2025 14:06:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206506
IP address blocks: 2001:678:360::/48 maxlen: 48
2a0c:8200::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zyddD-Y5mOobfTnlGPsyn3a-0WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5e:a4:00:50:33:d1:29:1a:48:da:98:4d:c7:3a:01:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf275d0fe63998ea1b7d39e518fb329f76bed166
Validity
Not Before: Nov 7 14:06:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be4d026774458953083d5e9f2416d8227768eb48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:34:e9:fd:f2:39:66:16:36:3b:12:e6:25:6a:
ce:60:82:6b:0f:20:13:bb:95:54:db:bd:c8:7c:db:
55:7b:a9:e4:10:72:5b:8b:0e:97:01:7c:78:25:cb:
db:8f:74:fd:02:35:d5:0c:50:89:67:59:5a:26:25:
8d:82:54:b1:3b:4f:06:6d:4f:95:6d:de:d1:c1:9a:
5e:b4:bb:14:48:1c:d8:75:1e:5c:75:60:7b:b4:99:
e7:be:ed:25:00:be:a0:bd:b0:1f:92:e6:ab:bb:37:
2c:ce:4a:95:b9:75:a9:2b:1a:bc:aa:fb:ad:ec:8d:
88:ec:55:55:cb:92:59:70:2e:be:32:63:bb:9a:be:
6e:a1:63:bc:20:7e:c9:76:e1:d1:36:ce:b0:49:ae:
f5:c2:43:ea:27:63:2b:26:12:50:0d:da:c9:e6:9b:
02:ca:32:04:ea:9c:11:14:bc:e3:1a:f6:a2:cf:06:
e9:db:42:9e:c9:51:1c:77:81:e2:fc:7a:b1:1b:9c:
27:72:34:e7:6a:00:f2:94:64:bb:06:ff:c3:69:a4:
14:80:90:76:4b:4f:82:cf:9e:8a:f1:1b:1b:75:25:
7b:6d:5b:d8:17:61:bf:ce:b3:ff:4d:56:63:5f:16:
08:51:c8:ef:77:95:04:f2:26:90:ae:87:8a:2c:c6:
1e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:4D:02:67:74:45:89:53:08:3D:5E:9F:24:16:D8:22:77:68:EB:48
X509v3 Authority Key Identifier:
keyid:CF:27:5D:0F:E6:39:98:EA:1B:7D:39:E5:18:FB:32:9F:76:BE:D1:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zyddD-Y5mOobfTnlGPsyn3a-0WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/vk0CZ3RFiVMIPV6fJBbYIndo60g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:360::/48
2a0c:8200::/29
Signature Algorithm: sha256WithRSAEncryption
4d:42:cd:e5:5f:53:96:d7:c1:71:74:6a:61:57:98:65:30:4e:
5e:9a:05:8d:af:44:67:35:40:02:5f:69:42:0b:5f:aa:c0:bf:
27:62:e1:21:d9:bc:95:e7:ff:8d:78:27:70:9f:70:3a:23:b7:
6a:a6:76:25:6b:25:c0:a0:39:50:63:47:48:f1:c8:4f:cd:68:
cd:dd:89:6e:f0:fd:e8:50:8b:df:54:3d:dd:7e:d5:fb:d9:33:
d2:65:4f:a4:3b:47:c0:af:af:b6:14:ad:66:f0:68:8b:8e:a6:
a7:cf:b2:9d:69:07:7b:bc:e6:c2:47:94:e5:22:62:8f:c2:bf:
f8:3f:f7:aa:43:a3:ca:6d:28:b4:76:39:12:51:e4:bd:08:a8:
61:e9:1f:f4:4d:fd:cd:da:11:88:cb:d1:9a:d9:17:fe:b2:e0:
cb:82:a3:e7:18:51:e4:e6:70:98:12:bc:9c:8f:fd:bb:10:09:
cf:7c:bd:cb:45:3d:ea:eb:10:ca:79:b3:2d:a0:a4:fd:cd:4a:
02:fe:18:38:dd:70:36:72:89:79:78:64:03:d7:dc:1f:c8:c8:
e6:2a:d1:c9:f8:42:67:18:eb:51:05:0b:a3:a1:60:67:b0:36:
fe:3c:ee:76:1f:74:fe:42:bc:22:a9:d5:c3:2d:9d:21:74:ad:
07:0c:88:ba
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgISAZpepABQM9EpGkjamE3HOgEvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMjc1ZDBmZTYzOTk4ZWExYjdkMzllNTE4ZmIzMjlmNzZi
ZWQxNjYwHhcNMjUxMTA3MTQwNjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTRkMDI2Nzc0NDU4OTUzMDgzZDVlOWYyNDE2ZDgyMjc3NjhlYjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjTp/fI5ZhY2OxLmJWrOYIJrDyAT
u5VU273IfNtVe6nkEHJbiw6XAXx4Jcvbj3T9AjXVDFCJZ1laJiWNglSxO08GbU+V
bd7RwZpetLsUSBzYdR5cdWB7tJnnvu0lAL6gvbAfkuaruzcszkqVuXWpKxq8qvut
7I2I7FVVy5JZcC6+MmO7mr5uoWO8IH7JduHRNs6wSa71wkPqJ2MrJhJQDdrJ5psC
yjIE6pwRFLzjGvaizwbp20KeyVEcd4Hi/HqxG5wncjTnagDylGS7Bv/DaaQUgJB2
S0+Cz56K8RsbdSV7bVvYF2G/zrP/TVZjXxYIUcjvd5UE8iaQroeKLMYeRQIDAQAB
o4ICEzCCAg8wHQYDVR0OBBYEFL5NAmd0RYlTCD1enyQW2CJ3aOtIMB8GA1UdIwQY
MBaAFM8nXQ/mOZjqG3055Rj7Mp92vtFmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenlkZEQtWTVtT29iZlRubEdQc3luM2EtMFdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9hNzg1MWMtYmI3OC00ZjI5LWExZDkt
N2I5OTE4MjRiZDgzLzEvdmswQ1ozUkZpVk1JUFY2ZkpCYllJbmRvNjBnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9hNzg1MWMtYmI3OC00ZjI5LWExZDktN2I5OTE4MjRiZDgz
LzEvenlkZEQtWTVtT29iZlRubEdQc3luM2EtMFdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQAwcAIAEGeANg
AwUDKgyCADANBgkqhkiG9w0BAQsFAAOCAQEATULN5V9TltfBcXRqYVeYZTBOXpoF
ja9EZzVAAl9pQgtfqsC/J2LhIdm8lef/jXgncJ9wOiO3aqZ2JWslwKA5UGNHSPHI
T81ozd2JbvD96FCL31Q93X7V+9kz0mVPpDtHwK+vthStZvBoi46mp8+ynWkHe7zm
wkeU5SJij8K/+D/3qkOjym0otHY5ElHkvQioYekf9E39zdoRiMvRmtkX/rLgy4Kj
5xhR5OZwmBK8nI/9uxAJz3y9y0U96usQynmzLaCk/c1KAv4YON1wNnKJeXhkA9fc
H8jI5irRyfhCZxjrUQULo6FgZ7A2/jzudh90/kK8IqnVwy2dIXStBwyIug==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:53:17 2025 by rpki-client