Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/zlMSXmo0y_FaliLEHiCch_0TgF8.roa
File: zlMSXmo0y_FaliLEHiCch_0TgF8.roa (raw, json)
Hash identifier: oAzi2I9fhkKHQjwH8CYjwKz7eCJw7zy7tu19PAbatNM=
Subject key identifier: CE:53:12:5E:6A:34:CB:F1:5A:96:22:C4:1E:20:9C:87:FD:13:80:5F
Certificate issuer: /CN=8353accb94e10cf8c2c29679067ee39099f404d3
Certificate serial: 019A1B8FD862E8045E7E3C93215B4E87F255
Authority key identifier: 83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/zlMSXmo0y_FaliLEHiCch_0TgF8.roa
Signing time: Sat 25 Oct 2025 13:30:03 +0000
ROA not before: Sat 25 Oct 2025 13:30:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213759
IP address blocks: 93.126.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 16:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:8f:d8:62:e8:04:5e:7e:3c:93:21:5b:4e:87:f2:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8353accb94e10cf8c2c29679067ee39099f404d3
Validity
Not Before: Oct 25 13:30:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce53125e6a34cbf15a9622c41e209c87fd13805f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:89:34:a9:1a:5f:74:a9:e9:4f:4c:d8:eb:5f:
a4:1d:57:9c:bb:c6:a4:1e:63:6a:19:60:e7:c5:61:
bc:c3:dc:01:ab:6a:12:c6:40:f0:71:55:ca:46:51:
94:c6:1f:2b:6e:96:5e:b3:66:25:b9:50:50:b1:5a:
6b:3f:a5:22:a1:96:3c:6c:cb:b7:ee:ef:c0:84:c2:
81:be:8e:53:60:f1:94:49:48:93:f0:92:34:c0:bc:
40:ca:4b:ff:4f:bd:e5:a2:7b:8d:9d:7a:92:aa:f3:
d8:69:ee:01:2f:bb:52:fb:48:98:c1:9b:3b:26:eb:
21:4f:b5:dc:86:39:61:d5:de:a7:35:d2:c6:85:b5:
05:bb:18:e8:f4:95:03:43:8c:8e:49:76:24:f0:f2:
bf:11:84:c5:10:4b:de:62:42:5c:15:bc:38:21:c2:
2a:48:44:f0:9f:ca:11:f2:67:46:97:65:71:74:7d:
dd:69:29:1c:e6:c7:fa:d9:60:c2:f0:46:d1:e5:8d:
b6:0c:d1:5b:b7:ed:20:4c:5c:f1:76:b5:1f:3f:68:
21:9f:d8:04:f5:a3:c8:9f:7d:20:a3:f2:6e:91:2f:
43:cf:e1:7a:97:29:a9:64:01:c5:fc:b9:57:58:e4:
a0:17:bf:2e:1e:d0:ee:16:d2:12:10:f7:c5:2a:b5:
c4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:53:12:5E:6A:34:CB:F1:5A:96:22:C4:1E:20:9C:87:FD:13:80:5F
X509v3 Authority Key Identifier:
keyid:83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/zlMSXmo0y_FaliLEHiCch_0TgF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.126.13.0/24
Signature Algorithm: sha256WithRSAEncryption
75:7d:d5:48:89:f8:19:1d:3a:bd:58:b0:2b:ce:10:6a:b3:62:
d7:35:2a:fe:f5:f8:28:82:b0:0c:06:82:57:6e:9b:62:64:38:
a6:cc:19:86:17:62:71:d3:01:5c:c6:df:a5:ac:08:88:8f:11:
73:14:40:98:69:52:a2:34:0b:13:ba:9f:33:aa:6f:e0:29:5c:
20:ab:53:14:57:30:c1:b6:f4:18:e9:49:70:1d:c4:ad:a8:06:
34:f3:4b:88:32:ab:3f:ad:71:d5:b4:5e:f5:80:2a:cc:06:07:
ee:ac:51:e6:37:da:94:45:de:d0:3c:22:94:bf:80:0c:61:70:
58:85:3f:c8:eb:85:8c:86:88:ac:46:98:62:b9:2b:10:97:b7:
9f:87:77:cc:93:92:96:e6:b1:8b:a7:97:82:71:6e:f3:f1:ff:
13:f4:5e:ef:b0:fe:48:e7:3b:c6:79:17:45:ac:e0:61:7c:64:
83:2f:5d:33:94:d3:43:59:10:0d:0a:a6:3c:35:df:b1:f8:e2:
71:ed:40:d0:b8:56:91:e5:f5:f9:10:46:95:fc:f9:86:97:4c:
19:5b:5e:73:97:b5:fd:8b:d6:c3:95:37:3f:fc:75:a2:31:96:
b1:a4:22:e5:a2:f0:63:9d:43:64:9e:31:ed:6f:a5:a6:f1:62:
10:53:c0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:27:42 2025 by rpki-client