Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/ZNkmVbcCMauin30jnaewmP8lzAc.roa
File: ZNkmVbcCMauin30jnaewmP8lzAc.roa (raw, json)
Hash identifier: KlqJDlJEZ/r+PBsj3DMDWDWRgiABTwv2GooBIaL2tQI=
Subject key identifier: 64:D9:26:55:B7:02:31:AB:A2:9F:7D:23:9D:A7:B0:98:FF:25:CC:07
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01973C756CB596A9D70EBA0140D5D496F1AE
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/ZNkmVbcCMauin30jnaewmP8lzAc.roa
Signing time: Wed 04 Jun 2025 19:40:17 +0000
ROA not before: Wed 04 Jun 2025 19:40:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204044
IP address blocks: 89.106.28.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3c:75:6c:b5:96:a9:d7:0e:ba:01:40:d5:d4:96:f1:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jun 4 19:40:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64d92655b70231aba29f7d239da7b098ff25cc07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f8:3e:54:48:54:de:d3:1c:cb:5c:41:c1:03:
a0:81:c6:f1:00:8c:9e:0a:51:65:d9:70:68:06:ec:
5c:44:40:8a:4d:e9:5d:62:6c:5a:31:c4:3a:67:e2:
f5:32:99:cb:c3:0b:81:3f:44:4b:01:68:24:ee:f9:
a3:6a:d4:7a:6b:14:52:f3:2d:02:44:0a:b7:33:a4:
04:e7:96:94:55:fa:d3:9e:d1:69:64:89:9e:4e:4f:
fc:f5:84:ad:65:5b:cb:aa:d4:e2:a4:c7:29:3d:5d:
e2:32:6d:7c:45:6c:1a:95:2d:fa:3b:4c:80:bd:5b:
a7:2e:0c:de:fe:46:af:94:d1:20:ba:40:1d:63:4e:
d1:88:d6:77:4b:bc:a5:cf:83:ca:a3:59:7a:46:85:
73:76:a0:ba:25:ff:a2:79:91:9f:29:91:ff:b4:da:
96:e0:5f:41:0d:7f:6f:6d:53:5a:03:d1:fb:b2:c1:
4c:67:15:4c:f5:55:80:58:03:cc:0b:37:f5:1f:97:
58:10:f2:32:18:08:b0:52:af:1d:29:30:c9:62:b5:
cb:b0:60:4f:b6:a8:10:95:0d:b3:af:ab:ee:b2:6c:
2c:c5:bd:73:50:2f:46:14:0e:9a:cc:b5:a2:70:7d:
a2:e4:9c:75:ea:80:82:e5:c7:6c:12:4d:4b:67:10:
10:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D9:26:55:B7:02:31:AB:A2:9F:7D:23:9D:A7:B0:98:FF:25:CC:07
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/ZNkmVbcCMauin30jnaewmP8lzAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.28.0/22
Signature Algorithm: sha256WithRSAEncryption
24:32:7d:8a:fc:7f:ca:6f:29:e0:ae:d0:20:2c:0b:18:64:89:
48:71:8a:68:fd:4d:b8:66:e9:d5:e2:37:a3:9d:86:1f:2c:fe:
b6:25:8b:95:67:2f:b2:eb:67:73:b1:c6:e3:c3:53:d8:54:da:
2f:70:5f:b4:43:47:3c:b9:3a:d5:75:7f:c4:d9:7a:a0:6a:8c:
5a:53:a3:9b:1c:89:6a:0c:43:fa:ef:83:27:dc:f5:0c:41:80:
a1:76:ce:32:ff:ff:a9:65:d0:9a:3f:e8:a2:47:e0:51:91:dd:
11:7a:25:68:88:5a:60:12:e5:a6:34:23:f9:83:35:74:a6:f4:
45:f0:36:00:8a:04:05:2b:90:fe:0b:6e:d1:68:b8:a4:45:0d:
91:9c:05:74:55:b7:73:0b:d1:c9:da:b7:2e:bb:2c:e8:b2:0d:
47:a8:8c:cc:66:cd:f4:a4:5d:cd:f2:46:3c:3d:c1:bd:e7:33:
3c:69:ba:a0:df:93:af:39:9e:a3:76:94:9d:97:c2:21:e3:c6:
7e:ca:d5:4e:d6:19:40:06:97:08:14:0e:18:db:48:86:f8:5d:
96:a5:2b:d5:dc:ca:7d:aa:b6:3f:d4:e8:e9:58:7e:34:e4:f4:
6d:86:9a:1d:3d:83:00:de:6d:e3:ba:04:c7:f4:ab:04:97:3b:
f2:e6:9e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:46:54 2025 by rpki-client