Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/74cXj7lP_FQ57KeYqN8W9vMA6WQ.roa
File: 74cXj7lP_FQ57KeYqN8W9vMA6WQ.roa (raw, json)
Hash identifier: pDQOcgNah/jCnsBGAc6iogJ+wu4Uu+Dh8zXH7N+2KMU=
Subject key identifier: EF:87:17:8F:B9:4F:FC:54:39:EC:A7:98:A8:DF:16:F6:F3:00:E9:64
Certificate issuer: /CN=66e92c341e769443fde1d27566044b4b65159060
Certificate serial: 019A06FA11DC17F9F9ACAD98D41E741F10BD
Authority key identifier: 66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/74cXj7lP_FQ57KeYqN8W9vMA6WQ.roa
Signing time: Tue 21 Oct 2025 13:34:03 +0000
ROA not before: Tue 21 Oct 2025 13:34:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204675
IP address blocks: 193.22.1.0/24 maxlen: 24
193.22.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:06:fa:11:dc:17:f9:f9:ac:ad:98:d4:1e:74:1f:10:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66e92c341e769443fde1d27566044b4b65159060
Validity
Not Before: Oct 21 13:34:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef87178fb94ffc5439eca798a8df16f6f300e964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:99:34:bc:de:a7:fd:11:09:af:86:77:c2:68:
9c:39:a4:81:fc:c9:1b:21:df:e8:a9:e3:0e:5f:64:
f5:22:7d:22:5c:58:75:57:cb:04:ec:0d:e1:66:7e:
d9:4d:38:5f:21:22:66:8e:ea:ee:f2:73:fc:f8:68:
d6:ad:f2:c7:29:4f:dd:d3:9e:63:e0:18:85:89:79:
78:0c:8a:97:dc:f4:43:18:96:59:15:05:22:5d:1b:
7a:0b:ad:f8:0d:21:dc:4a:f8:f0:88:fd:d4:59:87:
cc:3e:0f:9e:59:3a:ae:63:3f:ec:24:d0:ba:be:df:
cc:2b:fc:d0:14:bc:17:5e:99:07:22:58:f7:e0:73:
ce:63:2e:43:6d:49:0d:fd:18:51:ed:c2:fd:91:6f:
11:5a:04:71:3e:1b:25:f4:c3:c6:2f:73:81:49:22:
ac:fa:60:0f:1c:de:bb:fd:84:d3:bc:e2:8b:64:1e:
6d:93:eb:e3:d8:5f:7d:26:c1:7b:43:63:2f:bb:a7:
df:c5:9a:bf:4c:fb:99:26:b2:1b:11:6e:c9:e1:dc:
fa:e2:f4:28:f4:ea:47:09:96:48:7d:a2:61:f0:8e:
19:71:a0:ba:6d:5b:00:bc:31:a9:5e:03:63:a5:55:
88:23:11:b6:37:e0:99:55:e8:69:48:85:25:90:be:
67:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:87:17:8F:B9:4F:FC:54:39:EC:A7:98:A8:DF:16:F6:F3:00:E9:64
X509v3 Authority Key Identifier:
keyid:66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/74cXj7lP_FQ57KeYqN8W9vMA6WQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.1.0/24
193.22.106.0/24
Signature Algorithm: sha256WithRSAEncryption
89:ec:7b:07:8b:e7:14:cc:9a:e7:c4:9f:07:1b:7d:05:79:df:
ea:1b:7f:6c:4c:f8:f8:8b:3c:f7:06:f8:ea:8a:e3:26:f7:21:
5b:bb:52:60:c2:50:c4:88:7a:a7:01:b7:78:f9:37:42:45:d5:
be:58:1d:4b:15:69:38:26:2e:a4:d8:b1:50:26:56:de:a6:96:
7f:e1:21:7b:4b:e7:4c:90:1e:e2:57:49:75:32:25:66:6e:bb:
ba:29:2f:2d:9c:69:da:90:43:95:30:0e:33:d1:23:e0:31:17:
f5:c0:15:16:8a:fe:9d:ad:cd:0e:e7:75:cc:30:a1:ac:a6:1c:
02:63:0a:04:16:7f:bd:04:a8:03:b8:2d:68:da:ff:23:db:35:
03:f2:c4:68:4f:8a:45:66:42:80:10:75:89:63:18:7d:d4:8a:
0c:96:89:d6:b1:ec:17:ef:35:a3:7b:e3:9f:3c:53:45:fe:e8:
54:3c:26:c2:20:30:6a:6a:46:19:50:9d:59:53:d5:2b:5a:24:
6d:34:89:04:51:a1:77:d1:13:4d:e0:c3:0a:46:07:d8:95:0b:
8f:c0:f0:85:cf:6a:4d:5a:fb:fc:bf:77:39:54:fe:44:20:32:
c1:ff:02:f7:97:b7:14:f9:7b:ba:3a:54:3a:6a:48:6e:8c:35:
21:46:30:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:10:16 2025 by rpki-client