Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/PZIj01LldFateFu3od4_Vnbh84Q.roa
File: PZIj01LldFateFu3od4_Vnbh84Q.roa (raw, json)
Hash identifier: ecoXbiPRWhHOY6nEuRa20dSVzR4wCTgLp8nw9UHReAg=
Subject key identifier: 3D:92:23:D3:52:E5:74:56:AD:78:5B:B7:A1:DE:3F:56:76:E1:F3:84
Certificate issuer: /CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9
Certificate serial: 019A164D1A5F308B59F07EC04513BE582B2C
Authority key identifier: AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/PZIj01LldFateFu3od4_Vnbh84Q.roa
Signing time: Fri 24 Oct 2025 12:59:03 +0000
ROA not before: Fri 24 Oct 2025 12:59:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216135
IP address blocks: 185.174.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 21:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:16:4d:1a:5f:30:8b:59:f0:7e:c0:45:13:be:58:2b:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9
Validity
Not Before: Oct 24 12:59:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d9223d352e57456ad785bb7a1de3f5676e1f384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2f:99:16:fd:f1:4b:82:30:47:5d:8a:e6:d3:
c4:51:c7:c1:1c:3f:08:e8:d1:b8:d2:67:4e:05:93:
b8:f4:97:0e:1a:38:5c:5c:a7:eb:0b:89:63:33:4a:
d1:91:05:24:f5:e6:c2:c0:cc:d9:b3:51:58:c8:2b:
4d:ac:c5:be:3b:85:86:b0:47:07:82:28:6e:74:36:
5c:9a:7c:10:10:96:aa:94:08:43:f5:ce:4e:05:b8:
fc:a8:e9:71:27:2f:c5:d9:75:2c:03:b9:68:78:d3:
be:27:71:a9:ea:7b:99:1c:2d:16:8e:ed:08:95:8e:
29:81:a6:14:0c:6f:4e:93:66:4b:a9:0a:78:ff:e2:
16:43:39:7a:66:d3:fb:37:10:a2:8d:6b:b6:f4:93:
98:6d:65:a1:8e:f5:57:4b:92:34:d0:a5:30:b9:9d:
a3:d6:51:ab:fb:22:5b:2a:c7:68:89:e0:f3:0c:7c:
4f:aa:be:0b:de:41:06:9b:39:03:21:f0:8a:dd:44:
79:46:71:f9:05:51:71:c8:61:7f:23:41:11:6b:d5:
96:da:f5:00:9a:c0:3a:71:2d:b9:92:6b:a2:63:a9:
ac:c2:c8:35:79:ba:9d:30:2f:1d:d4:c6:75:90:6c:
34:ee:2e:56:06:8c:11:8b:4f:f4:d3:33:dc:28:fc:
94:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:92:23:D3:52:E5:74:56:AD:78:5B:B7:A1:DE:3F:56:76:E1:F3:84
X509v3 Authority Key Identifier:
keyid:AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/PZIj01LldFateFu3od4_Vnbh84Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.174.212.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:79:85:5a:ce:2d:d0:42:e2:92:69:14:24:d1:c5:59:97:2d:
8c:11:7e:c1:58:a5:07:c6:8c:25:93:52:4b:da:9c:23:8e:ec:
7a:94:f9:f1:d7:4e:0f:66:a1:be:e7:95:cf:c2:52:ed:d2:49:
9d:7d:e0:9b:4b:a0:96:b8:b1:5b:f4:b2:34:d8:94:3d:b5:2b:
4d:65:75:5a:c9:a3:79:74:0a:7e:8d:2d:3c:05:f3:dc:ef:bb:
7e:1c:ef:15:35:68:b9:ec:10:fb:ab:ae:81:dc:7c:5f:85:db:
ff:90:82:4d:ab:29:7a:fd:16:18:26:93:43:9b:9a:f4:37:02:
62:2a:13:3c:bc:29:93:c5:bc:5d:b8:ff:98:1d:e4:91:c9:5d:
ee:14:a1:23:45:f0:c6:a0:f9:c5:dd:f0:1e:79:90:52:df:9c:
d1:67:27:d5:ee:df:e9:0a:f8:96:f5:ff:ba:69:8d:a1:3f:5b:
54:97:2b:55:f9:9d:4a:4f:ef:dc:28:a4:8c:84:84:39:34:9b:
a0:ad:77:31:3e:12:bd:36:38:db:81:4a:6b:41:5d:26:a2:77:
eb:f8:18:48:82:d8:76:75:b7:5b:04:23:01:8b:3e:ba:00:3d:
19:3d:bc:bf:98:5e:58:06:7c:f4:3a:ea:df:1d:36:2b:97:68:
64:72:7d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 06:18:23 2025 by rpki-client