Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZaBpGuT7aZLBWL60N6RfNc-X_Lc.roa
File: ZaBpGuT7aZLBWL60N6RfNc-X_Lc.roa (raw, json)
Hash identifier: k24JRYEbFTQc7mkNsYJAvEj0arjNGXAur7D//ehQfjs=
Subject key identifier: 65:A0:69:1A:E4:FB:69:92:C1:58:BE:B4:37:A4:5F:35:CF:97:FC:B7
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0197E96830496B72656231B4002F8831F34B
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZaBpGuT7aZLBWL60N6RfNc-X_Lc.roa
Signing time: Tue 08 Jul 2025 09:40:08 +0000
ROA not before: Tue 08 Jul 2025 09:40:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 18186
IP address blocks: 89.213.1.0/24 maxlen: 24
213.218.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 12:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e9:68:30:49:6b:72:65:62:31:b4:00:2f:88:31:f3:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 8 09:40:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65a0691ae4fb6992c158beb437a45f35cf97fcb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b4:3d:54:14:9e:dd:ad:5d:32:5e:5a:a1:2a:
a3:07:59:c1:4e:ef:55:01:1c:8e:74:36:2e:60:23:
51:43:66:3c:10:ed:2e:d7:3c:a8:e7:aa:a5:fe:17:
78:bc:df:de:66:2b:1a:d7:71:ed:53:79:73:18:02:
d8:89:15:2e:84:1a:41:6d:16:ac:94:64:1f:be:34:
8f:6a:68:7e:b1:e3:6d:bc:75:b5:12:9f:80:36:76:
64:d5:14:9b:c9:92:71:86:3f:57:4a:d0:b8:69:55:
f2:c2:81:ef:dd:ff:1c:42:12:01:5b:88:8c:78:c5:
f3:e2:bc:dd:1d:c6:07:eb:69:44:f0:95:65:9f:39:
61:9e:83:7e:03:d0:d3:2b:dc:b5:96:6d:31:e8:d7:
af:74:9b:47:87:9a:75:09:cb:ca:a0:24:69:cf:e2:
a8:4a:42:03:cc:00:a1:d5:e0:5f:72:8b:b4:89:bd:
91:e8:c6:19:5c:d7:45:e4:5b:c3:47:d1:da:ef:39:
8b:88:33:f5:3e:68:00:83:78:c4:72:6e:ab:1f:5c:
55:1c:1d:76:23:69:fa:bf:68:7f:ba:35:3d:18:27:
32:87:69:64:39:81:4e:46:86:ec:07:ce:26:39:3d:
59:dd:4b:9b:d7:79:c3:3a:01:d3:a6:b9:74:13:6a:
65:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A0:69:1A:E4:FB:69:92:C1:58:BE:B4:37:A4:5F:35:CF:97:FC:B7
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZaBpGuT7aZLBWL60N6RfNc-X_Lc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.1.0/24
213.218.216.0/24
Signature Algorithm: sha256WithRSAEncryption
40:0c:00:b7:48:31:15:4e:61:35:b1:72:16:67:82:a4:fd:f6:
ab:ae:17:dd:d8:90:96:18:f7:e9:21:8a:c3:5c:9d:b7:28:44:
e1:72:8d:1c:77:ec:fc:ac:e7:b8:6b:87:07:ff:cd:2a:07:e4:
80:ef:b3:12:1e:fc:ac:ba:b2:26:5e:cd:dd:7c:9a:23:28:d8:
ba:95:8a:90:1e:bf:73:ff:10:ac:5c:4b:32:4e:a1:82:ba:77:
8b:8e:42:4e:03:8d:fe:d0:6b:c2:ca:4c:f1:f2:7e:4e:2a:0a:
5f:69:73:ed:d0:96:ca:b3:1b:65:cc:f3:f9:1f:8a:82:93:16:
b3:c7:c1:cb:d9:61:74:e4:7e:5b:2a:7d:f2:75:9c:18:f2:d5:
25:df:c5:b9:6d:be:46:b4:eb:74:41:b5:d5:ce:50:66:c3:28:
01:60:2b:c4:f8:b0:ec:de:ca:58:e9:00:b7:40:1a:c8:d5:92:
23:4a:0e:66:21:6f:c4:0f:bb:d6:28:39:a2:56:28:60:bf:99:
b8:05:93:a5:fc:12:df:71:7b:68:5a:3f:1f:29:38:a1:16:81:
4a:f4:8c:7f:a8:de:2a:ec:1c:d2:be:fd:b2:9a:63:21:3e:89:
5c:f9:b1:b6:d6:f1:1e:f4:48:0a:3e:6f:15:a4:84:1f:39:67:
73:07:33:1e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZfpaDBJa3JlYjG0AC+IMfNLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjUwNzA4MDk0MDA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NWEwNjkxYWU0ZmI2OTkyYzE1OGJlYjQzN2E0NWYzNWNmOTdmY2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbQ9VBSe3a1dMl5aoSqjB1nBTu9V
ARyOdDYuYCNRQ2Y8EO0u1zyo56ql/hd4vN/eZisa13HtU3lzGALYiRUuhBpBbRas
lGQfvjSPamh+seNtvHW1Ep+ANnZk1RSbyZJxhj9XStC4aVXywoHv3f8cQhIBW4iM
eMXz4rzdHcYH62lE8JVlnzlhnoN+A9DTK9y1lm0x6NevdJtHh5p1CcvKoCRpz+Ko
SkIDzACh1eBfcou0ib2R6MYZXNdF5FvDR9Ha7zmLiDP1PmgAg3jEcm6rH1xVHB12
I2n6v2h/ujU9GCcyh2lkOYFORobsB84mOT1Z3Uub13nDOgHTprl0E2plnQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGWgaRrk+2mSwVi+tDekXzXPl/y3MB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvWmFCcEd1VDdhWkxCV0w2ME42UmZOYy1YX0xjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWdUBAwQA
1drYMA0GCSqGSIb3DQEBCwUAA4IBAQBADAC3SDEVTmE1sXIWZ4Kk/farrhfd2JCW
GPfpIYrDXJ23KEThco0cd+z8rOe4a4cH/80qB+SA77MSHvysurImXs3dfJojKNi6
lYqQHr9z/xCsXEsyTqGCuneLjkJOA43+0GvCykzx8n5OKgpfaXPt0JbKsxtlzPP5
H4qCkxazx8HL2WF05H5bKn3ydZwY8tUl38W5bb5GtOt0QbXVzlBmwygBYCvE+LDs
3spY6QC3QBrI1ZIjSg5mIW/ED7vWKDmiVihgv5m4BZOl/BLfcXtoWj8fKTihFoFK
9Ix/qN4q7BzSvv2ymmMhPolc+bG21vEe9EgKPm8VpIQfOWdzBzMe
-----END CERTIFICATE-----
Generated at Sun Jul 20 21:09:55 2025 by rpki-client