Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/Zm0Dq2AnN_oGbsWr2dkm8Ah92JY.roa
File: Zm0Dq2AnN_oGbsWr2dkm8Ah92JY.roa (raw, json)
Hash identifier: K56Rc+BrZCeT8J+nXUlf16wW06qkAS6ZBAEr5balTOs=
Subject key identifier: 66:6D:03:AB:60:27:37:FA:06:6E:C5:AB:D9:D9:26:F0:08:7D:D8:96
Certificate issuer: /CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16
Certificate serial: 019A1BFF896EE8FB2FEFE7844016D8210A65
Authority key identifier: 4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/Zm0Dq2AnN_oGbsWr2dkm8Ah92JY.roa
Signing time: Sat 25 Oct 2025 15:32:02 +0000
ROA not before: Sat 25 Oct 2025 15:32:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203038
IP address blocks: 2a0d:bbc0::/48 maxlen: 48
2a0d:bbc0:1::/48 maxlen: 48
2a0d:bbc0:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 21:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:ff:89:6e:e8:fb:2f:ef:e7:84:40:16:d8:21:0a:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16
Validity
Not Before: Oct 25 15:32:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=666d03ab602737fa066ec5abd9d926f0087dd896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b9:ed:a7:53:b0:73:fe:f1:2a:4b:f0:38:68:
e4:5c:11:7d:5e:1b:1e:23:b0:f0:eb:33:94:1e:10:
38:46:3c:89:ef:17:d6:1d:2f:d5:84:18:c8:a6:42:
20:eb:55:d7:41:5b:db:12:f8:a1:a3:95:3f:65:04:
a7:3d:73:a4:38:2a:17:0d:03:12:87:8d:b1:7b:10:
6f:24:1b:de:f3:8c:15:ae:05:11:2a:6c:48:55:07:
09:c2:79:62:5e:3d:59:e0:2b:84:8e:1f:d9:2e:09:
3b:37:5d:10:80:ab:90:e3:3d:9e:6e:1a:aa:59:b6:
8d:f2:af:b7:8a:65:85:02:77:ec:39:4f:6c:9e:c9:
e3:81:3e:47:75:04:ca:15:6f:ed:b6:0a:ed:89:ac:
1b:c4:05:d2:7c:6d:2c:a3:e4:7a:b6:f2:80:a4:ec:
d2:58:8b:6a:d3:c0:1a:3e:c4:81:c3:3e:fb:39:fb:
46:16:a6:c1:f2:26:6e:5d:f0:ae:f9:33:4c:9b:4e:
65:6c:c1:c2:78:6e:5d:b7:30:04:48:a9:dc:40:2e:
ab:98:05:62:8f:23:47:27:10:81:79:6c:68:88:b3:
03:37:d6:3d:f0:f3:3c:36:0e:93:b3:f4:86:5f:00:
3f:9f:85:c3:0e:98:9c:7b:70:2c:04:a6:36:34:dd:
9b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:6D:03:AB:60:27:37:FA:06:6E:C5:AB:D9:D9:26:F0:08:7D:D8:96
X509v3 Authority Key Identifier:
keyid:4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/Zm0Dq2AnN_oGbsWr2dkm8Ah92JY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:bbc0::-2a0d:bbc0:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
4f:bc:62:ec:c6:eb:89:8d:86:1a:ad:93:b3:55:9a:f7:c6:17:
5d:b3:c9:20:a7:a7:90:76:4b:cd:ad:1d:21:a8:c4:07:dd:df:
d8:85:67:c8:8c:54:eb:b1:98:e9:23:70:57:dc:76:6f:b4:8a:
52:87:66:a6:a7:1b:c3:b2:e4:62:32:dd:67:05:dc:ec:87:54:
a6:9e:0e:04:e0:fa:b3:dd:4b:02:17:76:41:35:40:b1:24:a0:
2a:43:af:c1:c3:81:a0:43:40:18:c0:7e:d3:03:ce:02:a4:32:
67:ca:bb:4b:fe:0d:df:98:4a:40:ee:c1:2c:14:40:3a:ca:ee:
58:aa:53:95:f2:c6:f6:4d:3b:0a:a6:0f:1d:18:e9:40:9d:8d:
cb:da:1a:c3:d8:86:48:88:f7:8a:a1:61:e5:3c:60:8f:9a:60:
71:71:3e:0a:ba:b9:a5:5a:f2:4a:9d:59:ee:bb:fb:f2:cb:90:
a8:dd:64:b6:48:81:df:cc:fe:00:a5:ae:4c:95:65:42:84:66:
98:dc:24:6e:70:64:51:27:92:91:48:1b:d6:56:50:0c:51:23:
7f:fd:48:e2:1e:b5:e9:35:07:67:ae:04:a0:24:e2:3a:6e:00:
ef:57:08:e3:93:30:88:81:d6:9c:46:60:29:9e:38:cc:06:93:
92:b9:17:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 06:43:38 2025 by rpki-client