Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/x-ZoxCE3dUHDoEInx3KHfEs04No.roa
File: x-ZoxCE3dUHDoEInx3KHfEs04No.roa (raw, json)
Hash identifier: PP3ssbmv8MfAGIHN4N1jOdg4vgiSdSRg+O85vMICYao=
Subject key identifier: C7:E6:68:C4:21:37:75:41:C3:A0:42:27:C7:72:87:7C:4B:34:E0:DA
Certificate issuer: /CN=e22d83b78308d09e65d2150eac1623dee96d4c4b
Certificate serial: 019915DF5D50BB00C528A6652CA51EDD680D
Authority key identifier: E2:2D:83:B7:83:08:D0:9E:65:D2:15:0E:AC:16:23:DE:E9:6D:4C:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4i2Dt4MI0J5l0hUOrBYj3ultTEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/x-ZoxCE3dUHDoEInx3KHfEs04No.roa
Signing time: Thu 04 Sep 2025 17:56:23 +0000
ROA not before: Thu 04 Sep 2025 17:56:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60952
IP address blocks: 167.94.246.0/24 maxlen: 24
194.110.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/4i2Dt4MI0J5l0hUOrBYj3ultTEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/4i2Dt4MI0J5l0hUOrBYj3ultTEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/4i2Dt4MI0J5l0hUOrBYj3ultTEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 22:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:15:df:5d:50:bb:00:c5:28:a6:65:2c:a5:1e:dd:68:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e22d83b78308d09e65d2150eac1623dee96d4c4b
Validity
Not Before: Sep 4 17:56:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c7e668c421377541c3a04227c772877c4b34e0da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3e:47:96:b6:64:cf:c5:a8:8c:68:f9:03:cf:
85:5b:7a:ef:27:6f:3f:7e:76:02:93:f8:ae:de:52:
cf:de:dd:da:9c:dd:f0:05:76:de:68:07:63:fb:ab:
49:7d:2e:75:ce:f3:4c:53:32:e4:16:7b:fb:cf:a4:
45:f8:21:81:4b:c4:ac:00:e2:db:3f:8c:0e:d0:a2:
8c:f7:a7:8c:a0:3d:20:77:2f:f5:8b:39:b5:70:34:
77:53:40:ab:e8:f8:b4:50:90:58:fe:c3:84:8e:15:
7b:fc:c5:d5:ed:fe:ca:6f:31:93:9a:51:47:ab:8a:
46:1c:4a:6c:08:bb:7a:e4:95:48:dd:24:74:82:86:
0e:35:d0:d5:5e:59:1a:c8:73:05:25:c0:37:34:b3:
72:7d:70:76:68:38:70:b8:46:3c:86:08:e9:9e:6c:
e3:bd:30:43:d7:14:ce:52:ff:81:10:70:06:b3:39:
96:30:8b:c3:fc:ae:d7:a1:b6:ea:d2:f7:fe:34:7c:
29:90:e1:07:30:33:10:a4:28:2a:a1:1b:ea:21:eb:
f1:0e:09:ef:5c:b6:0d:cf:0a:d2:2e:07:ad:97:d8:
28:d5:32:52:e2:e9:0e:72:57:de:a5:72:d4:d5:c1:
52:b1:f7:a5:8a:d6:6e:fa:4f:e6:cc:d1:a1:56:48:
2d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E6:68:C4:21:37:75:41:C3:A0:42:27:C7:72:87:7C:4B:34:E0:DA
X509v3 Authority Key Identifier:
keyid:E2:2D:83:B7:83:08:D0:9E:65:D2:15:0E:AC:16:23:DE:E9:6D:4C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4i2Dt4MI0J5l0hUOrBYj3ultTEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/x-ZoxCE3dUHDoEInx3KHfEs04No.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/4i2Dt4MI0J5l0hUOrBYj3ultTEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.94.246.0/24
194.110.0.0/24
Signature Algorithm: sha256WithRSAEncryption
20:69:43:96:d0:22:b2:6e:e6:46:04:f4:16:13:c4:17:83:72:
b3:e5:c0:78:e2:e8:70:05:dd:20:0b:b2:e0:89:36:62:0c:78:
a5:30:a1:aa:95:3b:dc:b8:60:1f:71:97:ef:40:1d:ee:cd:ea:
64:4d:e9:3c:c4:5c:2b:17:cb:c2:49:2c:e4:e8:3c:5f:ae:36:
0b:86:26:27:7b:9b:71:e0:66:b3:6c:48:80:26:d6:93:21:93:
eb:de:28:7c:23:88:72:bb:3c:98:cc:7a:5c:1b:07:8e:18:9b:
67:9f:83:66:30:42:75:ef:96:e3:1c:eb:79:c2:f7:0f:7c:8d:
ec:7d:89:7c:f5:5d:01:ac:f1:2e:4f:f8:27:80:c7:b7:4b:06:
74:8f:1f:32:aa:c4:7c:f6:dc:ca:df:19:d4:e2:e3:08:6e:1e:
5d:7a:9f:07:d1:fe:59:bf:cd:29:54:92:fc:47:0e:de:a5:22:
10:ac:dc:7b:64:06:88:62:a8:61:56:51:3d:c4:73:7a:0b:91:
2f:4e:f2:a3:87:d5:53:5c:a7:59:2b:a9:6f:5d:da:7d:3d:af:
b5:a1:73:6a:9b:aa:ea:ce:70:ae:b3:f8:56:82:85:93:83:23:
72:74:ec:0c:86:eb:11:48:d7:c6:7a:8f:6e:6d:f1:b8:5b:91:
7f:6f:11:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 05:39:12 2025 by rpki-client