Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/ZbERZjYg6cuT4X-RnR4eWqsmK2w.roa
File: ZbERZjYg6cuT4X-RnR4eWqsmK2w.roa (raw, json)
Hash identifier: nziMUISsqPUXbIiPbxCVPBDhbRy0MibwmCl8xQisRW8=
Subject key identifier: 65:B1:11:66:36:20:E9:CB:93:E1:7F:91:9D:1E:1E:5A:AB:26:2B:6C
Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial: 0198FF2735E05F3286E51237A4CBF19E87B0
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/ZbERZjYg6cuT4X-RnR4eWqsmK2w.roa
Signing time: Sun 31 Aug 2025 08:03:36 +0000
ROA not before: Sun 31 Aug 2025 08:03:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49433
IP address blocks: 109.232.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft
rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ff:27:35:e0:5f:32:86:e5:12:37:a4:cb:f1:9e:87:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Validity
Not Before: Aug 31 08:03:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65b111663620e9cb93e17f919d1e1e5aab262b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ba:33:4e:6f:51:6c:0c:05:e6:c7:c1:a5:f8:
51:37:d5:b8:de:8f:69:0e:fd:b7:65:5f:1c:46:e3:
89:56:bb:62:22:a1:5d:01:66:67:67:ac:7e:7c:ae:
36:07:78:65:1c:03:dd:48:ec:f4:ff:13:c8:40:00:
bb:c3:bc:0a:d1:65:d0:ff:08:af:4c:a1:a3:22:cd:
cf:ca:7b:73:60:4e:93:4b:de:92:fe:60:91:36:0d:
0f:8a:93:33:6a:5c:e9:97:7a:c4:a9:1c:09:97:76:
7a:2f:13:d7:c1:3a:42:31:18:ed:9b:c7:43:d8:0c:
f9:3e:43:1f:a0:9b:47:5f:e2:15:7b:1c:d8:68:44:
bf:67:5f:bc:f4:d5:91:c5:44:50:f1:a2:ac:54:df:
e4:e8:50:e4:07:bf:8e:17:5a:8a:9a:9f:de:4d:44:
a7:3b:f4:2f:a4:36:b3:22:8c:b1:10:2e:fe:37:bd:
19:4c:26:8a:19:60:c1:26:62:99:0d:82:9f:6d:86:
a9:b2:21:57:ac:de:e1:2a:4d:ac:24:c4:b1:fa:3e:
de:02:3b:11:e1:1b:20:0a:e8:9c:9a:5c:07:bb:a1:
b8:03:83:59:b7:0d:be:fd:8a:36:b1:90:45:02:d4:
dc:09:72:c9:b6:88:81:7f:68:e4:18:77:33:34:99:
17:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B1:11:66:36:20:E9:CB:93:E1:7F:91:9D:1E:1E:5A:AB:26:2B:6C
X509v3 Authority Key Identifier:
keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/ZbERZjYg6cuT4X-RnR4eWqsmK2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.232.5.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:35:f9:a4:ab:58:0f:25:6c:84:07:6a:4a:59:6a:cc:e4:b3:
ef:3f:db:45:13:53:43:b1:7f:74:74:29:76:a5:1a:70:4e:39:
71:bd:a2:a9:09:bc:e9:bf:b3:b7:89:ac:df:68:7d:1f:70:c0:
8a:3d:dd:f7:a0:a4:98:4c:5a:20:43:9d:a5:85:02:c6:bb:20:
ea:f4:5d:60:ad:2d:7f:4f:e5:9e:0d:8c:25:51:fc:6a:c0:51:
9e:66:ed:79:0b:ea:a4:5f:85:a2:26:b4:1b:a7:81:97:07:5b:
20:86:3e:fa:da:3f:56:8c:bd:d1:73:c4:f0:61:11:ac:e8:7c:
87:32:c7:fe:4d:9f:80:e5:b3:0e:d0:cc:06:8e:46:aa:6c:6b:
47:2a:9f:d5:6d:62:78:0d:a4:9f:6c:00:0a:16:c6:ed:81:26:
75:fe:ea:01:49:a5:e5:71:47:16:cc:85:4e:04:37:79:50:21:
1f:b5:36:32:af:63:13:ef:62:59:5e:18:3b:a9:e7:64:32:20:
e0:a0:86:b6:10:88:85:8e:d1:21:cc:fa:81:c7:49:e9:31:6d:
b5:70:69:84:00:d7:dd:9a:11:8a:27:66:9b:56:c5:bf:dc:99:
97:51:eb:f5:79:87:78:79:aa:46:12:84:c3:40:f4:41:0e:e4:
1a:07:3e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 11:49:54 2025 by rpki-client