Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/ZvIBvN3gO9RJM7uC8BrV6jzhAmk.roa
File: ZvIBvN3gO9RJM7uC8BrV6jzhAmk.roa (raw, json)
Hash identifier: dioBOx3h8ph3ofANtrh34SCoANsWuT4s9fkC5DmIrUo=
Subject key identifier: 66:F2:01:BC:DD:E0:3B:D4:49:33:BB:82:F0:1A:D5:EA:3C:E1:02:69
Certificate issuer: /CN=61f4d9c5fa0ae364b4d81edbc4d18200f00fbc7f
Certificate serial: 0198F5F7373D9E46AAC86C0A6C38140A4634
Authority key identifier: 61:F4:D9:C5:FA:0A:E3:64:B4:D8:1E:DB:C4:D1:82:00:F0:0F:BC:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YfTZxfoK42S02B7bxNGCAPAPvH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/ZvIBvN3gO9RJM7uC8BrV6jzhAmk.roa
Signing time: Fri 29 Aug 2025 13:14:36 +0000
ROA not before: Fri 29 Aug 2025 13:14:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24961
IP address blocks: 2001:678:10e8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YfTZxfoK42S02B7bxNGCAPAPvH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 01:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f5:f7:37:3d:9e:46:aa:c8:6c:0a:6c:38:14:0a:46:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61f4d9c5fa0ae364b4d81edbc4d18200f00fbc7f
Validity
Not Before: Aug 29 13:14:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66f201bcdde03bd44933bb82f01ad5ea3ce10269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:79:90:e4:88:6a:f7:9d:3b:e3:46:2b:b2:0c:
5d:13:25:53:33:5f:81:22:eb:2a:bd:7f:8e:fb:74:
8b:57:cb:df:56:36:3b:b3:b9:a6:c5:6a:e9:93:02:
99:2d:be:f6:65:72:9b:32:90:15:85:c3:4c:54:7d:
b9:5c:92:e9:00:59:0c:13:7a:98:c0:56:09:1b:9a:
1f:f6:16:a6:a3:5a:a4:25:e6:e8:77:93:c4:7a:4d:
ac:8c:22:e8:f1:63:c5:a9:0b:cb:3d:e8:e5:62:a8:
f5:a8:b1:fa:b8:f0:e2:65:e6:75:08:da:fe:5e:1c:
c1:15:fb:47:d4:db:3c:2b:7d:43:ea:4b:b0:38:20:
26:60:89:71:79:55:a0:f3:69:8f:01:f9:ef:5f:92:
5e:1d:dd:90:9e:d9:1f:5f:28:f1:4b:8c:f4:4d:d2:
d5:91:34:69:9f:6b:a4:b4:fb:64:cf:05:0e:18:9f:
22:f3:81:86:ec:98:d8:dd:fe:7b:f1:59:5c:d9:83:
66:79:1a:b5:3c:8d:f7:4a:fc:18:7f:5d:42:f8:a7:
01:8d:c9:12:e5:34:71:d4:9f:40:38:ef:67:cd:90:
3c:16:f1:a6:0a:6f:d4:c9:c8:e7:32:d3:e0:56:9d:
19:03:95:92:f2:24:be:88:e4:72:df:7b:ab:e0:97:
e0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F2:01:BC:DD:E0:3B:D4:49:33:BB:82:F0:1A:D5:EA:3C:E1:02:69
X509v3 Authority Key Identifier:
keyid:61:F4:D9:C5:FA:0A:E3:64:B4:D8:1E:DB:C4:D1:82:00:F0:0F:BC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YfTZxfoK42S02B7bxNGCAPAPvH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/ZvIBvN3gO9RJM7uC8BrV6jzhAmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:10e8::/48
Signature Algorithm: sha256WithRSAEncryption
80:a5:d0:72:cb:2e:be:78:bb:f6:ba:55:b0:6c:3b:1a:72:10:
bc:1e:50:5c:7a:9b:2f:c2:14:37:fb:af:3a:54:a3:c7:a8:a1:
c5:9d:b0:f6:0b:c8:86:e3:84:ca:60:0a:ba:d5:c2:4e:87:3b:
67:50:57:fd:26:a7:00:3b:9a:87:91:a1:88:b1:c3:66:f8:2f:
8d:a5:95:32:1d:60:1d:cf:98:0e:19:ae:91:d4:89:a8:10:b1:
4a:88:7d:cd:88:dc:cd:a2:42:ec:45:74:60:30:45:45:b0:e8:
4a:e8:33:8b:a1:fa:b7:80:62:08:05:35:d8:71:29:77:cd:85:
03:84:8c:a4:dd:00:fb:cf:5d:93:80:54:ae:13:ac:0e:89:ad:
b5:05:65:23:74:85:33:af:46:bd:b2:97:41:98:5a:4e:2f:8e:
67:6e:98:2d:62:9c:16:5f:10:42:bf:98:f9:97:cb:ed:c3:fe:
47:4b:af:fb:4f:3a:76:d2:1c:46:db:04:c8:cc:f6:7e:fc:36:
fb:6a:9f:65:f1:8f:7b:f6:86:bb:e7:aa:22:b2:b8:9a:af:3d:
33:88:1b:8e:96:fd:04:c0:55:89:ba:43:86:ee:20:63:76:24:
b4:64:84:5b:37:4f:0b:ab:5f:27:f9:78:ec:06:92:16:da:65:
50:7b:e1:c8
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZj19zc9nkaqyGwKbDgUCkY0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxZjRkOWM1ZmEwYWUzNjRiNGQ4MWVkYmM0ZDE4MjAwZjAw
ZmJjN2YwHhcNMjUwODI5MTMxNDM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NmYyMDFiY2RkZTAzYmQ0NDkzM2JiODJmMDFhZDVlYTNjZTEwMjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7XmQ5Ihq950740YrsgxdEyVTM1+B
IusqvX+O+3SLV8vfVjY7s7mmxWrpkwKZLb72ZXKbMpAVhcNMVH25XJLpAFkME3qY
wFYJG5of9hamo1qkJebod5PEek2sjCLo8WPFqQvLPejlYqj1qLH6uPDiZeZ1CNr+
XhzBFftH1Ns8K31D6kuwOCAmYIlxeVWg82mPAfnvX5JeHd2QntkfXyjxS4z0TdLV
kTRpn2uktPtkzwUOGJ8i84GG7JjY3f578Vlc2YNmeRq1PI33SvwYf11C+KcBjckS
5TRx1J9AOO9nzZA8FvGmCm/UycjnMtPgVp0ZA5WS8iS+iORy33ur4JfguQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFGbyAbzd4DvUSTO7gvAa1eo84QJpMB8GA1UdIwQY
MBaAFGH02cX6CuNktNge28TRggDwD7x/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWZUWnhmb0s0MlMwMkI3YnhOR0NBUEFQdkg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82NTE4MmEtYTYyZi00MDQyLThhOWIt
N2VlNTMxMWEyYTNjLzEvWnZJQnZOM2dPOVJKTTd1QzhCclY2anpoQW1rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi82NTE4MmEtYTYyZi00MDQyLThhOWItN2VlNTMxMWEyYTNj
LzEvWWZUWnhmb0s0MlMwMkI3YnhOR0NBUEFQdkg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeBDo
MA0GCSqGSIb3DQEBCwUAA4IBAQCApdByyy6+eLv2ulWwbDsachC8HlBcepsvwhQ3
+686VKPHqKHFnbD2C8iG44TKYAq61cJOhztnUFf9JqcAO5qHkaGIscNm+C+NpZUy
HWAdz5gOGa6R1ImoELFKiH3NiNzNokLsRXRgMEVFsOhK6DOLofq3gGIIBTXYcSl3
zYUDhIyk3QD7z12TgFSuE6wOia21BWUjdIUzr0a9spdBmFpOL45nbpgtYpwWXxBC
v5j5l8vtw/5HS6/7Tzp20hxG2wTIzPZ+/Db7ap9l8Y979oa756oisriarz0ziBuO
lv0EwFWJukOG7iBjdiS0ZIRbN08Lq18n+XjsBpIW2mVQe+HI
-----END CERTIFICATE-----
Generated at Sat Sep 6 10:46:17 2025 by rpki-client