Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/ZiD-MY3nOuLXzR9RDg6huulrUtA.roa
File: ZiD-MY3nOuLXzR9RDg6huulrUtA.roa (raw, json)
Hash identifier: psjzBFQxt80JPQCyicrTYbpG7+HkCyyCB+fL0q+8TEU=
Subject key identifier: 66:20:FE:31:8D:E7:3A:E2:D7:CD:1F:51:0E:0E:A1:BA:E9:6B:52:D0
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 01981919022E0695F44ED9A58627C0FA7F4B
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/ZiD-MY3nOuLXzR9RDg6huulrUtA.roa
Signing time: Thu 17 Jul 2025 15:55:25 +0000
ROA not before: Thu 17 Jul 2025 15:55:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 95.164.160.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 14:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:19:19:02:2e:06:95:f4:4e:d9:a5:86:27:c0:fa:7f:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: Jul 17 15:55:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6620fe318de73ae2d7cd1f510e0ea1bae96b52d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ea:f9:5e:38:80:ba:92:65:31:75:b2:51:e2:
9e:24:d3:64:d8:55:47:cc:40:a2:ff:07:90:79:65:
b7:3e:b4:3d:2c:c3:eb:5a:81:e9:c7:6c:c2:50:91:
44:31:6a:98:c0:c9:22:f7:29:1f:f2:b0:e9:4b:73:
aa:41:94:0e:10:96:91:83:0b:f6:8a:cc:d0:82:19:
c7:a1:d0:3a:7f:7a:9d:b1:05:4c:2c:87:1e:2f:7d:
59:63:b4:99:15:53:e3:f4:1e:a5:04:a4:66:14:ce:
e9:87:ad:2d:69:19:11:54:57:e1:4a:98:a7:8e:f1:
86:f7:0a:3a:21:be:b6:2c:c6:ec:8d:1c:d6:54:a6:
d4:5f:3e:7c:91:ce:30:57:9e:39:4f:25:41:a2:9c:
06:0e:29:21:b3:57:ba:da:ce:aa:d3:38:fa:45:c5:
01:4e:93:6b:53:30:a4:67:ac:03:f3:cf:af:15:f7:
d8:24:32:12:59:dd:b4:3f:0d:d8:4c:ed:f6:f3:d0:
b3:ce:9d:4f:ca:ee:e0:84:47:c7:89:2b:5d:14:21:
50:df:42:77:2a:3b:0c:5a:d3:1e:ed:64:2b:d3:6e:
7e:01:9b:0f:f4:f1:48:80:6f:fa:60:d6:16:73:9d:
6b:4c:cc:65:d7:82:eb:c4:f2:84:02:5f:b6:ee:6b:
32:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:20:FE:31:8D:E7:3A:E2:D7:CD:1F:51:0E:0E:A1:BA:E9:6B:52:D0
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/ZiD-MY3nOuLXzR9RDg6huulrUtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.160.0/22
Signature Algorithm: sha256WithRSAEncryption
09:53:80:09:65:07:4f:b2:27:32:1b:91:4b:f6:1f:b4:f6:74:
3f:f8:46:1b:11:b3:b4:25:f1:b3:67:49:f2:2d:82:1e:98:5c:
04:07:3a:b0:87:ee:61:23:c0:63:7c:45:ee:4a:a4:04:38:31:
79:40:0d:73:3d:06:4b:81:52:85:9c:e9:23:9f:3e:c1:80:7a:
b6:41:fd:9a:11:5d:e9:94:36:dd:55:e0:f6:6d:1b:ca:a4:f4:
67:f9:58:4c:4f:88:63:4a:c2:a2:04:45:0a:68:6c:0c:3e:a9:
91:1e:e0:a2:eb:e2:5c:00:da:df:05:92:ce:73:44:0f:ea:98:
c4:09:98:cd:f5:86:1b:68:1b:0c:c2:ca:de:7b:3a:6c:7a:4a:
62:5f:dd:e9:8b:1b:89:97:f5:e3:06:7f:40:54:cc:c8:3c:03:
c8:1a:59:fb:6b:68:53:89:a7:fc:6c:63:aa:90:7e:e9:26:27:
9b:86:91:a7:c0:37:3a:43:78:8b:e9:53:aa:94:84:bd:99:f8:
7a:9c:bb:b5:cb:c2:98:2f:6e:38:dc:56:9e:73:7e:1e:47:ae:
5f:95:6d:b5:80:a2:37:22:e2:03:d2:d9:3f:2b:5e:25:89:b6:
28:05:c9:54:04:79:af:7b:48:fd:d5:c8:46:9e:94:38:b9:66:
a1:43:bd:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 21:00:38 2025 by rpki-client