Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZuhaU3_bsrLRyOv-GJIm_scjVOU.roa
File: ZuhaU3_bsrLRyOv-GJIm_scjVOU.roa (raw, json)
Hash identifier: vUMMSRbXaJHWP8Rw4Kx+eXaFXMRtNk0OzXMXQACpEfw=
Subject key identifier: 66:E8:5A:53:7F:DB:B2:B2:D1:C8:EB:FE:18:92:26:FE:C7:23:54:E5
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0198EFDA1CC9B3DCD7F1CDA8CDE88724D1FF
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZuhaU3_bsrLRyOv-GJIm_scjVOU.roa
Signing time: Thu 28 Aug 2025 08:45:05 +0000
ROA not before: Thu 28 Aug 2025 08:45:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213918
IP address blocks: 81.168.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 21:42:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ef:da:1c:c9:b3:dc:d7:f1:cd:a8:cd:e8:87:24:d1:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 28 08:45:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66e85a537fdbb2b2d1c8ebfe189226fec72354e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:eb:7d:f1:e6:0a:dc:2f:3b:03:28:2c:f7:6f:
fa:71:f6:6b:91:d5:50:f8:c1:24:19:14:71:4b:f6:
1c:8c:c7:f0:66:26:63:c6:50:10:ed:22:28:75:0b:
91:07:16:c8:6d:33:32:d6:ce:8d:cd:36:ca:dd:2d:
95:3f:d6:13:be:6a:e5:59:0f:5a:d7:5e:28:a8:84:
3d:db:97:a2:35:a5:2a:34:4c:cb:78:4a:92:98:17:
7d:41:bf:20:88:76:91:11:96:c1:98:25:a8:a8:1f:
38:48:e2:99:b8:2a:74:da:d6:c7:60:dc:a2:89:62:
85:79:10:61:44:54:79:df:e5:91:88:2e:0a:ba:fa:
0d:66:44:77:7a:3b:88:ff:e4:94:fe:7e:24:7d:05:
88:48:e8:dc:58:08:6b:85:ff:a9:d9:2f:49:38:1e:
14:f7:a9:07:ea:f4:ab:50:1f:b1:a4:d4:b0:5a:8d:
1a:eb:1b:23:63:bb:97:80:d0:cf:39:1c:76:43:b2:
0c:97:dd:7b:42:0a:2f:27:28:2e:fa:19:ad:69:2c:
63:b9:62:a0:95:81:10:d6:6b:26:24:8e:ba:b2:c6:
8f:ee:16:f3:0a:69:89:28:6f:96:92:3e:fc:65:ca:
c7:61:8d:1d:8e:64:2e:2d:cb:1c:bc:19:70:78:9c:
62:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E8:5A:53:7F:DB:B2:B2:D1:C8:EB:FE:18:92:26:FE:C7:23:54:E5
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZuhaU3_bsrLRyOv-GJIm_scjVOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.116.0/24
Signature Algorithm: sha256WithRSAEncryption
83:10:35:52:31:7e:86:3a:53:0a:e3:14:dc:3a:af:e3:5d:f6:
5d:2a:f5:0e:39:47:42:93:e5:12:f7:0c:68:69:0b:51:5f:a6:
0c:f7:f6:6b:1b:8f:25:59:5d:23:1c:34:73:ce:87:9f:7d:53:
ca:a7:38:f8:9c:3e:2e:c6:54:de:68:ea:6a:d8:29:28:f8:f7:
bb:38:11:15:19:86:c9:e8:71:40:b6:9f:c3:e0:4e:99:90:d6:
a6:64:6d:5f:fa:21:61:74:dd:a5:b2:43:73:fe:3e:08:de:8b:
7f:94:31:af:fd:dc:e1:24:c1:09:18:0a:96:e8:a3:ef:a9:d6:
45:a8:f2:f3:33:54:f4:d1:83:1c:9f:58:e9:9f:e4:14:e0:20:
40:7a:ea:73:d4:99:f5:03:60:9b:69:2e:6e:2a:ac:8c:f3:54:
4a:56:eb:c3:46:21:d5:4a:7d:91:15:de:00:bc:34:c4:90:e9:
0d:c1:11:21:34:d8:e2:6d:8d:dd:e7:be:ba:82:00:83:70:64:
1b:7d:8a:4d:49:53:6d:bf:fc:63:c9:54:08:9a:b2:5d:0e:ae:
ee:b5:6a:e7:d6:ac:97:54:ae:93:5e:7e:11:75:37:77:46:0a:
b5:56:f9:b4:92:7c:7b:f9:36:ba:b1:88:ba:99:c9:84:79:5b:
c5:02:54:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 00:50:40 2025 by rpki-client