Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/zeqX-4ngsCGD2Y4pwGbqJh4HQYw.roa
File: zeqX-4ngsCGD2Y4pwGbqJh4HQYw.roa (raw, json)
Hash identifier: KAYfqgoq5ZBvonKqM43MFg2S2Gi1Jp8WijPkzVbT/lo=
Subject key identifier: CD:EA:97:FB:89:E0:B0:21:83:D9:8E:29:C0:66:EA:26:1E:07:41:8C
Certificate issuer: /CN=ef3ee31d2f0ef103296ddec3c66b07a3f442ac98
Certificate serial: 01990989D66BDFCD165FD5D5201CAB50C4D8
Authority key identifier: EF:3E:E3:1D:2F:0E:F1:03:29:6D:DE:C3:C6:6B:07:A3:F4:42:AC:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7z7jHS8O8QMpbd7DxmsHo_RCrJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/zeqX-4ngsCGD2Y4pwGbqJh4HQYw.roa
Signing time: Tue 02 Sep 2025 08:27:32 +0000
ROA not before: Tue 02 Sep 2025 08:27:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212286
IP address blocks: 2a0e:fc80::/29 maxlen: 29
2a0e:fc87:fffe::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7z7jHS8O8QMpbd7DxmsHo_RCrJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:09:89:d6:6b:df:cd:16:5f:d5:d5:20:1c:ab:50:c4:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef3ee31d2f0ef103296ddec3c66b07a3f442ac98
Validity
Not Before: Sep 2 08:27:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cdea97fb89e0b02183d98e29c066ea261e07418c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f3:6d:b0:e3:bd:d3:a3:dc:e5:c9:b1:0a:f0:
1c:3a:6d:3f:16:88:97:37:29:63:33:f8:f2:14:1d:
4c:f7:9c:ce:99:89:0b:06:9f:5e:ab:a2:af:c8:34:
d0:5d:0f:4f:42:3b:3c:0e:b3:90:9a:f0:85:51:14:
86:a9:48:c8:ea:03:36:01:ad:ce:a1:13:a6:c4:66:
f2:4a:85:33:f4:cf:d1:42:05:df:ee:92:68:e9:11:
45:9e:17:bd:f8:47:88:72:a9:bb:7c:89:2d:d2:f4:
c4:ca:d0:46:8e:86:55:e7:c4:90:34:02:80:58:da:
a2:e5:6e:99:e1:66:b7:6d:47:6d:2b:96:cf:90:0c:
04:79:66:19:b3:e4:8d:f2:1c:c2:4d:59:ac:8b:55:
ca:f7:db:f5:ce:3f:b2:06:e2:6b:de:dc:89:94:18:
03:9c:67:25:11:3f:aa:81:42:4e:e3:67:e2:98:7b:
76:df:fe:57:42:6c:09:2d:a2:95:8d:8f:3a:e2:35:
c6:f3:9f:d5:bc:92:b9:79:18:3e:b8:46:db:de:19:
4a:eb:26:f0:28:dc:ec:dc:e5:93:08:2d:65:b0:7a:
63:91:c1:71:ef:4d:a5:82:db:96:8f:44:fe:fb:fc:
ad:80:99:18:4b:a3:d9:c4:9d:02:f6:d8:ae:57:09:
e3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:EA:97:FB:89:E0:B0:21:83:D9:8E:29:C0:66:EA:26:1E:07:41:8C
X509v3 Authority Key Identifier:
keyid:EF:3E:E3:1D:2F:0E:F1:03:29:6D:DE:C3:C6:6B:07:A3:F4:42:AC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7z7jHS8O8QMpbd7DxmsHo_RCrJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/zeqX-4ngsCGD2Y4pwGbqJh4HQYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:fc80::/29
Signature Algorithm: sha256WithRSAEncryption
81:d4:08:48:5c:95:35:17:e4:8e:31:de:1d:3b:74:07:62:b6:
04:4a:9c:75:06:e2:e1:d0:0a:46:8f:73:a6:0e:19:51:c0:5c:
ca:34:f8:95:cd:00:32:9c:b0:f6:a7:ba:e7:47:16:d6:34:40:
47:bf:d0:f3:97:77:01:1e:63:01:57:58:73:a6:e9:f7:6b:24:
31:86:25:08:71:97:b2:47:88:ef:f1:57:33:00:32:06:83:21:
2a:a9:d9:b5:65:b5:4a:f9:39:ae:c9:f3:ad:a0:65:ef:2a:b4:
f4:f1:a4:f7:8f:5e:75:28:8f:50:f9:ee:bc:01:07:f6:d4:b0:
47:2d:f9:61:a6:c1:be:54:5f:1e:04:1c:0c:00:63:1f:5a:19:
03:6c:6a:ec:97:2c:fd:66:42:4b:f7:f9:b2:8b:bf:d0:07:7c:
70:21:60:19:09:26:a6:70:a9:cd:ad:91:73:43:90:ae:cb:eb:
85:1f:76:de:84:bd:6f:1a:3d:67:87:8d:0f:04:c1:bf:c3:2b:
f0:19:ae:f5:00:76:c0:5c:fb:29:7d:5d:8e:c4:13:46:e4:37:
80:b5:56:f2:af:4d:f5:7e:91:ec:03:51:9a:05:c5:ef:d0:46:
b5:c7:87:ca:60:89:52:ac:27:7a:e7:4c:e5:0c:d2:12:9d:1d:
ed:25:1b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:38:57 2025 by rpki-client