Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Zfov-GmPhjRMrCpB_i1rFWc0-qg.roa
File: Zfov-GmPhjRMrCpB_i1rFWc0-qg.roa (raw, json)
Hash identifier: MezmOV0ddv/vjQfpiUDs/idZfxFl9raH4oi6JdqSnKc=
Subject key identifier: 65:FA:2F:F8:69:8F:86:34:4C:AC:2A:41:FE:2D:6B:15:67:34:FA:A8
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019A5DC1E0D8091CB996B492371D1196DC85
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Zfov-GmPhjRMrCpB_i1rFWc0-qg.roa
Signing time: Fri 07 Nov 2025 09:59:38 +0000
ROA not before: Fri 07 Nov 2025 09:59:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216043
IP address blocks: 109.176.254.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Nov 2025 03:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5d:c1:e0:d8:09:1c:b9:96:b4:92:37:1d:11:96:dc:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Nov 7 09:59:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65fa2ff8698f86344cac2a41fe2d6b156734faa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:86:ee:4e:e9:3a:49:ed:5c:4b:87:a8:5e:ba:
d0:e3:4e:5e:0c:94:4e:ba:f0:40:4b:82:71:df:c6:
23:8c:de:d3:c5:8f:98:03:da:24:7c:ff:44:fe:14:
c0:90:af:e0:ba:f4:e8:43:c1:d1:ca:94:bd:8b:2f:
67:e6:62:43:17:87:84:9a:6a:6a:35:e7:59:4f:28:
79:1d:51:10:ea:90:70:b2:e3:b6:22:2e:aa:cf:f1:
43:06:78:cc:f0:a7:14:27:67:10:77:2f:d1:2b:96:
b3:e8:d0:53:13:40:8a:6d:78:41:69:c2:ef:d7:18:
9d:55:03:c5:3d:21:dd:3a:86:5a:09:94:5a:8a:ab:
ba:90:ab:e0:34:6d:3b:0c:cb:16:a1:ac:31:79:a2:
b1:a0:b6:ce:0f:3c:57:e7:18:5b:8c:fd:bc:0c:19:
d7:49:c5:11:0f:93:24:2c:a3:9e:a0:bc:a9:ad:30:
65:19:9f:db:34:9f:85:b3:67:82:69:78:7f:8e:4e:
a5:8a:58:84:8d:6d:df:21:c7:0f:de:a3:ff:7a:d6:
6f:13:44:c2:21:cf:70:61:e7:2a:9f:09:77:96:50:
c9:b5:62:f9:f3:55:4d:25:97:d1:6e:c2:aa:cf:db:
8a:e0:1d:b7:11:b5:78:b5:4d:d2:98:a6:f4:f0:55:
2b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:FA:2F:F8:69:8F:86:34:4C:AC:2A:41:FE:2D:6B:15:67:34:FA:A8
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Zfov-GmPhjRMrCpB_i1rFWc0-qg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.254.0/23
Signature Algorithm: sha256WithRSAEncryption
14:b8:13:35:d6:8f:0c:81:4d:46:5b:bb:52:67:82:53:f7:d3:
40:de:b7:72:92:7c:c8:41:0f:3e:1c:1e:bf:95:6d:e4:75:82:
18:d5:15:d8:40:de:f1:70:c7:b8:7c:ec:56:03:d4:7c:e9:ec:
be:30:d1:c4:d7:f6:85:f6:6a:bf:0c:f3:55:10:3d:ea:87:30:
9e:35:1c:a2:c2:d8:fc:8d:3d:f0:68:67:a7:77:6c:d5:5b:72:
d2:6c:dc:57:10:ad:17:f9:d6:33:13:1d:35:f0:31:19:de:73:
42:00:92:d2:0e:10:e8:6e:24:7a:8f:5d:26:f4:7f:51:09:9b:
b7:06:a2:be:35:0d:2a:56:61:c8:1f:2e:54:fa:d6:19:9b:b5:
e9:b4:b0:7a:96:59:70:cb:b6:fa:32:89:ba:be:b9:01:41:fa:
64:7e:0a:81:ad:3f:dc:e8:9a:cf:b9:01:d8:0c:05:65:e1:42:
fa:4b:6e:92:ef:be:fc:43:ae:ed:10:c1:e3:b0:14:84:9c:31:
e5:a3:f3:f5:9d:15:10:fa:90:0a:b7:18:59:63:f4:cd:76:2b:
6d:50:e3:a7:da:da:af:68:34:99:d4:b6:89:36:dd:67:27:ab:
1a:2b:89:d7:a0:e7:2a:67:ac:18:d6:4b:e0:93:86:13:88:04:
61:7b:cc:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 9 10:12:26 2025 by rpki-client