Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/Zct0n7Yk_2LU2RLAQilDYIOHMRM.roa
File: Zct0n7Yk_2LU2RLAQilDYIOHMRM.roa (raw, json)
Hash identifier: gyYgBg2Qr/m7CgWMO/XE/Br2xoBLTuHC5C4cWzN0D4E=
Subject key identifier: 65:CB:74:9F:B6:24:FF:62:D4:D9:12:C0:42:29:43:60:83:87:31:13
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 019919C8E54A4E614A53DAD450FA26EB0A24
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/Zct0n7Yk_2LU2RLAQilDYIOHMRM.roa
Signing time: Fri 05 Sep 2025 12:10:20 +0000
ROA not before: Fri 05 Sep 2025 12:10:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36530
IP address blocks: 2a0f:7802:e000::/40 maxlen: 48
2a0f:7802:e100::/40 maxlen: 48
2a0f:7802:e200::/40 maxlen: 48
2a0f:7803:f4f0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:19:c8:e5:4a:4e:61:4a:53:da:d4:50:fa:26:eb:0a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Sep 5 12:10:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65cb749fb624ff62d4d912c04229436083873113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:de:fb:cb:33:a7:c6:c1:ab:21:86:9d:2b:3c:
7c:ae:bb:d0:8a:32:f9:a2:1c:d7:13:40:d2:92:de:
ba:9c:94:58:d5:03:f2:b0:d6:39:30:aa:38:44:b4:
5a:f5:7a:95:89:f3:6e:2d:ba:bd:ba:a5:49:a5:94:
85:1a:8d:a2:50:a2:da:d5:0f:7a:ab:02:3d:87:48:
00:01:2b:37:90:f4:db:43:63:39:2a:c0:84:d8:e0:
bb:25:37:86:99:32:e2:d0:b5:89:97:f7:ca:32:17:
d1:e8:1d:58:3a:49:14:86:3f:b7:09:8f:a5:0f:19:
22:a8:6c:eb:54:3b:19:18:a8:bf:36:4f:17:f9:53:
7e:7e:89:2b:1d:4d:09:33:bd:b4:40:85:c5:27:ca:
7e:72:87:2b:2c:ef:6d:80:57:0e:7e:10:11:4b:74:
f3:34:1d:6f:d8:e8:b4:73:40:53:a9:04:22:1a:1c:
de:20:24:44:49:5b:7c:01:e4:ef:c2:a1:d7:4b:92:
1e:d1:29:0e:bf:b0:fc:3a:e6:be:b0:3d:e0:32:5d:
ee:11:64:d0:21:ad:4b:01:31:7e:84:ef:b9:d6:e5:
c7:a3:53:45:64:4c:36:f2:92:6f:3a:c6:27:2f:13:
f6:5e:4c:87:b9:b8:c9:9a:78:97:f0:fb:af:a9:66:
4a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:CB:74:9F:B6:24:FF:62:D4:D9:12:C0:42:29:43:60:83:87:31:13
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/Zct0n7Yk_2LU2RLAQilDYIOHMRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7802:e000::-2a0f:7802:e2ff:ffff:ffff:ffff:ffff:ffff
2a0f:7803:f4f0::/44
Signature Algorithm: sha256WithRSAEncryption
76:26:2b:fe:ac:c5:73:41:2d:b4:6d:25:57:26:af:c0:3f:bc:
46:b3:e0:f3:8d:04:55:05:0f:7c:47:8f:df:5f:46:fb:2c:2a:
e6:91:bb:97:96:b3:19:66:ab:58:aa:fa:bf:0a:53:ed:df:0b:
a2:6d:e4:ae:0d:e0:f9:6f:a0:ce:7c:94:b4:e7:7c:1a:26:1d:
03:1c:e6:3b:d8:ca:f5:08:04:54:ff:12:23:85:4a:fa:db:83:
62:ca:13:62:bd:b3:ac:77:94:7e:58:76:20:aa:c2:34:db:0f:
c1:59:81:dc:63:13:f8:1c:11:0f:9d:e3:46:b0:9c:47:9c:83:
57:06:65:af:f6:ef:6c:65:1f:e1:67:06:f1:d9:54:86:a8:05:
5c:4b:5c:0a:97:2a:62:e9:0a:2f:bd:b5:a9:bb:42:7d:23:7d:
fb:9d:cd:0c:f1:01:d0:3e:d2:23:f8:11:11:a4:26:a2:d1:c3:
ef:ae:56:ed:37:6e:aa:51:cf:36:5b:34:5c:bc:ff:d9:b4:ce:
a5:2e:73:a9:38:b4:90:f7:0f:39:6a:0c:f4:56:0c:6a:b7:58:
c5:6a:f0:40:6e:a6:2b:e9:4f:86:07:4c:eb:d5:fb:91:6c:7e:
41:96:c6:5b:68:99:5c:7c:7d:14:2f:12:72:e2:90:50:cf:56:
9e:4b:b4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 09:52:51 2025 by rpki-client