Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/znQ8DXX-YB1T12tLbZzdQvqf6Xw.roa
File: znQ8DXX-YB1T12tLbZzdQvqf6Xw.roa (raw, json)
Hash identifier: Fj7qYKOe87d1vdGj42TXK+N6F3CwstdEs/doNr+JhTw=
Subject key identifier: CE:74:3C:0D:75:FE:60:1D:53:D7:6B:4B:6D:9C:DD:42:FA:9F:E9:7C
Certificate issuer: /CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Certificate serial: 01991EB68C4CC7C02399A752511DA9085C55
Authority key identifier: 32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/znQ8DXX-YB1T12tLbZzdQvqf6Xw.roa
Signing time: Sat 06 Sep 2025 11:08:23 +0000
ROA not before: Sat 06 Sep 2025 11:08:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59741
IP address blocks: 45.141.53.0/24 maxlen: 24
185.73.240.0/24 maxlen: 24
185.73.241.0/24 maxlen: 24
2a05:4740::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1e:b6:8c:4c:c7:c0:23:99:a7:52:51:1d:a9:08:5c:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Validity
Not Before: Sep 6 11:08:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce743c0d75fe601d53d76b4b6d9cdd42fa9fe97c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:57:5a:6a:77:9f:7f:e8:af:ea:17:5d:50:92:
c7:3e:ae:17:56:0d:3a:05:70:d4:2e:a0:7d:cb:3f:
64:a3:51:7b:06:41:f1:83:ba:a7:09:f7:6d:36:59:
2d:80:6d:d9:3d:44:81:71:07:b8:2b:a2:cc:20:f7:
ad:08:9f:99:3d:d6:26:17:c8:e0:31:38:0d:b5:eb:
eb:79:6b:c3:93:01:b3:2a:88:c0:12:07:82:87:5c:
30:c0:1a:7e:77:f3:62:23:c1:97:0a:01:e9:73:af:
e8:79:4f:9f:6b:a0:3e:53:ff:86:5a:9b:d1:2e:b3:
a5:e4:4b:24:78:59:2c:75:02:46:8b:7a:cf:b6:af:
5b:b2:02:c3:45:97:69:c2:65:c9:74:9f:d3:3d:db:
13:f2:7a:d5:d2:07:6b:65:14:3b:f1:9b:6f:6a:f7:
25:d3:69:22:49:10:00:b3:46:09:aa:c5:17:b4:3d:
4d:3f:50:df:68:41:3b:b1:ca:be:75:84:cc:46:db:
31:13:4b:a3:de:89:18:e7:c7:36:77:a0:b2:94:dd:
ee:aa:ae:8a:1a:b2:47:db:82:de:0f:15:c8:e1:31:
4d:cd:db:b5:36:1a:42:2e:37:02:7d:9b:15:6c:ed:
1b:66:54:6d:8f:bd:1b:fa:de:f3:25:d4:ae:d7:79:
85:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:74:3C:0D:75:FE:60:1D:53:D7:6B:4B:6D:9C:DD:42:FA:9F:E9:7C
X509v3 Authority Key Identifier:
keyid:32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/znQ8DXX-YB1T12tLbZzdQvqf6Xw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.53.0/24
185.73.240.0/23
IPv6:
2a05:4740::/32
Signature Algorithm: sha256WithRSAEncryption
a4:03:27:09:01:95:54:bf:1c:25:ed:b3:0b:11:67:fd:24:1a:
48:f3:f7:18:2d:f3:46:3e:df:e1:cd:92:f5:9f:57:9b:ee:75:
26:ce:56:b0:55:4c:75:7f:67:c1:d1:b0:ae:87:7d:17:d2:91:
a8:38:00:44:b8:ac:b2:3b:a1:01:b8:06:19:b4:92:a3:da:35:
ec:b1:17:ce:63:a4:c2:cf:3d:c7:ba:c1:4d:d6:42:61:b7:1c:
16:94:01:34:dd:43:dc:3c:fe:f4:f7:04:57:aa:61:3e:21:b3:
09:50:40:29:4c:30:c6:b5:03:2c:de:94:72:ad:18:84:5a:74:
5d:72:11:ed:50:b6:4e:1f:2f:5d:60:68:f3:cf:19:3f:c2:51:
e9:e9:fc:e4:27:83:38:7d:71:99:f3:16:7e:c6:cd:58:65:ad:
ea:54:31:db:f0:19:72:6c:0e:4e:bb:08:e3:69:e2:3e:02:3c:
4f:7b:b2:40:25:dc:49:a5:b2:13:d3:e7:39:c7:66:69:dd:a4:
f9:29:ce:5f:c2:70:b1:5e:b2:c4:1d:23:92:44:34:1b:3f:47:
0c:61:1c:a6:04:25:42:f0:f0:32:7a:4a:6a:86:b2:a3:5d:2f:
8c:98:15:f0:58:0c:2c:35:37:32:40:f6:7a:07:d7:bb:51:1d:
98:5f:b6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 06:27:09 2025 by rpki-client