Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/ZyYK-k77F1xgjjVfUFKWc3u5FMg.roa
File: ZyYK-k77F1xgjjVfUFKWc3u5FMg.roa (raw, json)
Hash identifier: A8osarOaXuQWeZx8KQYjMoJwdcPiXJPczE87ARsfRqI=
Subject key identifier: 67:26:0A:FA:4E:FB:17:5C:60:8E:35:5F:50:52:96:73:7B:B9:14:C8
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 01992913B87D3957A0FA73E96EF9D589AE4A
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/ZyYK-k77F1xgjjVfUFKWc3u5FMg.roa
Signing time: Mon 08 Sep 2025 11:26:22 +0000
ROA not before: Mon 08 Sep 2025 11:26:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42423
IP address blocks: 193.168.184.0/23 maxlen: 24
194.1.167.0/24 maxlen: 24
2a09:1400::/30 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:29:13:b8:7d:39:57:a0:fa:73:e9:6e:f9:d5:89:ae:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Sep 8 11:26:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67260afa4efb175c608e355f505296737bb914c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:60:1f:46:77:2b:df:b0:ca:d9:c3:51:2a:6f:
f0:e1:1b:f6:7e:fb:67:c2:d7:84:9d:0c:7b:05:78:
4c:be:4f:01:7f:91:9e:03:57:0b:8b:1b:65:b8:e9:
f6:0e:1a:94:96:8c:56:d7:b3:ec:21:2f:ac:b2:4f:
35:0c:8c:e6:70:55:17:47:1f:3d:14:5e:f6:f5:3f:
2a:01:ba:fa:93:83:f0:e1:c4:f8:90:a8:62:05:47:
85:ce:03:bf:c7:96:ee:38:2d:17:63:b4:80:09:aa:
c8:c9:05:0d:c6:81:82:ba:a3:b4:20:e8:6a:03:a7:
40:b6:6b:7b:6b:45:d9:72:8c:97:95:0f:ec:02:58:
3b:e7:af:9e:56:b0:f9:1c:ce:1a:58:b7:ad:59:5c:
46:5a:6d:0a:a9:00:7a:d9:8a:37:67:45:e4:1b:e8:
88:ae:b7:70:69:24:de:ff:03:be:60:ec:81:f5:6c:
bb:77:4a:f8:9c:47:02:d9:9b:b5:dd:9b:00:33:6a:
bb:95:34:63:3f:66:80:19:91:ec:92:fc:8e:c2:0d:
2f:e6:11:89:f3:aa:16:1c:07:32:40:b9:47:d3:ac:
2c:03:67:b9:5a:68:6e:98:ef:f2:87:a3:b3:24:a3:
e2:5b:15:5f:bf:19:90:06:04:86:18:28:1c:47:c5:
82:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:26:0A:FA:4E:FB:17:5C:60:8E:35:5F:50:52:96:73:7B:B9:14:C8
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/ZyYK-k77F1xgjjVfUFKWc3u5FMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.168.184.0/23
194.1.167.0/24
IPv6:
2a09:1400::/30
Signature Algorithm: sha256WithRSAEncryption
84:8d:35:98:46:00:06:6f:9b:c1:2a:60:2d:0d:4c:8b:f2:98:
3d:1d:30:0b:07:48:d4:c6:b5:97:98:f4:11:19:22:87:d4:a6:
29:f0:25:ac:0c:f6:d5:ca:ec:7c:cb:8f:b4:51:46:46:c0:f4:
46:2c:59:fe:04:78:9d:e0:e8:29:1d:91:5f:4b:e1:28:7e:20:
3f:6d:de:2a:e5:96:36:08:99:6b:21:c3:24:85:20:12:ef:bb:
df:07:06:02:1a:c2:8f:75:ea:62:c5:5f:bc:66:3a:2a:cd:2a:
10:ae:0c:50:56:5f:b1:bc:0b:fe:f0:24:39:67:9b:ca:1d:58:
1a:83:c1:55:07:64:3f:99:79:9c:78:10:c0:a4:47:df:dc:3c:
5f:c9:73:aa:27:ed:b1:94:62:df:0e:89:9c:1b:c1:ea:f1:ac:
5b:f6:01:17:f1:a9:27:4f:f7:96:67:8e:e5:74:9e:b0:42:bd:
fa:31:d7:91:c6:ad:68:d6:c9:94:40:84:c6:32:5e:67:cf:a0:
8a:4a:cb:2b:0e:3d:f4:53:86:ff:e9:31:63:96:8e:61:b9:69:
3f:e3:6f:5f:9c:65:27:85:34:78:11:e3:30:89:1c:65:6a:38:
a4:ba:b1:f6:c6:c5:78:a3:07:89:2e:b3:22:d8:58:e3:81:25:
00:c4:00:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 17:50:40 2025 by rpki-client