Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/ZxskbRgCMa6Yc-LklxQC1BBLGOk.roa
File: ZxskbRgCMa6Yc-LklxQC1BBLGOk.roa (raw, json)
Hash identifier: CTUmOgotKmf+GqF4YkFaNe8ee4nBAUGdVxI+TEhO/Sw=
Subject key identifier: 67:1B:24:6D:18:02:31:AE:98:73:E2:E4:97:14:02:D4:10:4B:18:E9
Certificate issuer: /CN=582e2170a7bcbec310154f2bce99833fec2801fb
Certificate serial: 01995839037F5191C72935E7F9854ABBAE41
Authority key identifier: 58:2E:21:70:A7:BC:BE:C3:10:15:4F:2B:CE:99:83:3F:EC:28:01:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WC4hcKe8vsMQFU8rzpmDP-woAfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/ZxskbRgCMa6Yc-LklxQC1BBLGOk.roa
Signing time: Wed 17 Sep 2025 15:09:15 +0000
ROA not before: Wed 17 Sep 2025 15:09:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200184
IP address blocks: 67.63.56.0/24 maxlen: 24
67.63.57.0/24 maxlen: 24
67.63.58.0/24 maxlen: 24
67.63.61.0/24 maxlen: 24
67.63.62.0/24 maxlen: 24
67.63.63.0/24 maxlen: 24
80.75.216.0/24 maxlen: 24
2a13:f800::/29 maxlen: 64
2a13:f800:1001::/48 maxlen: 48
2a13:f800:3101::/48 maxlen: 48
2a13:f800:3102::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/WC4hcKe8vsMQFU8rzpmDP-woAfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 21:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:58:39:03:7f:51:91:c7:29:35:e7:f9:85:4a:bb:ae:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=582e2170a7bcbec310154f2bce99833fec2801fb
Validity
Not Before: Sep 17 15:09:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=671b246d180231ae9873e2e4971402d4104b18e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2d:1f:c5:6a:30:91:30:11:c3:d5:fb:bd:0b:
c5:70:f1:59:de:21:b8:62:6b:4a:68:2d:db:29:c1:
61:b9:3b:7c:83:ae:2d:93:7a:97:af:7a:0a:d2:4d:
5d:28:20:f5:69:93:5b:87:96:71:d3:88:9f:64:13:
37:08:56:4d:b8:38:23:4f:bc:f3:4e:99:c9:85:1a:
17:b0:54:09:0c:f6:74:aa:00:44:ec:89:b3:72:af:
c5:9e:ed:71:b3:6d:90:ab:71:6b:74:68:e2:c4:44:
9c:56:61:fc:a8:d8:70:f1:6f:12:55:6f:11:3f:ea:
95:53:63:5c:8c:d6:47:7a:16:27:ae:f3:0d:08:76:
f6:4c:97:ff:07:cf:d8:0e:d6:6c:0b:e8:16:ec:1f:
7c:80:d1:57:72:7e:f3:a3:27:96:1b:8c:01:75:c0:
02:7c:de:44:29:91:f1:9e:3c:09:bb:fa:c7:a3:83:
aa:d7:df:26:a8:18:6e:71:76:95:57:60:86:5f:ac:
6a:5b:21:1c:ce:a5:bb:3c:97:58:09:ef:80:43:be:
b3:66:e6:42:a3:33:f9:3a:39:f3:40:a3:ac:83:ef:
36:78:22:c8:6c:01:cd:a6:fb:97:62:10:1d:f4:72:
77:f0:a9:df:98:dd:cd:25:48:f7:12:b1:00:c0:76:
02:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:1B:24:6D:18:02:31:AE:98:73:E2:E4:97:14:02:D4:10:4B:18:E9
X509v3 Authority Key Identifier:
keyid:58:2E:21:70:A7:BC:BE:C3:10:15:4F:2B:CE:99:83:3F:EC:28:01:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WC4hcKe8vsMQFU8rzpmDP-woAfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/ZxskbRgCMa6Yc-LklxQC1BBLGOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
67.63.56.0-67.63.58.255
67.63.61.0-67.63.63.255
80.75.216.0/24
IPv6:
2a13:f800::/29
Signature Algorithm: sha256WithRSAEncryption
91:b8:03:ca:b4:57:3e:c2:f2:d1:ab:fa:fb:60:cd:c2:90:10:
cd:f8:b2:a5:3e:7f:ac:77:47:7e:5c:69:a3:69:ce:d1:93:04:
72:49:87:5f:ae:16:e3:2d:ed:9d:b9:e1:7e:89:24:85:3e:f8:
15:54:53:e8:e3:64:22:bb:4a:8d:80:64:59:48:e2:ed:2f:26:
b7:78:f2:db:db:d7:db:0c:96:27:b2:bd:b1:6d:dc:56:f9:53:
99:7b:6c:63:00:43:48:2c:ff:49:56:d5:07:88:5a:bd:89:41:
50:a5:32:76:d2:61:53:f9:c0:ad:38:09:b7:a6:5b:05:3a:d9:
02:7e:89:db:9b:6f:f4:0d:b3:bc:bd:df:d9:29:a8:6c:f6:23:
33:1d:16:34:46:81:5b:7a:a0:5e:d6:3a:35:4a:a2:76:99:bf:
3c:0e:53:cd:4b:0e:7f:14:86:99:46:94:d2:0f:e4:fc:c7:ee:
b4:53:a1:e7:dd:95:fa:40:3a:d0:f5:2e:3b:ae:8c:13:8b:f5:
d3:b2:03:f3:e6:c1:c8:a1:3c:f4:95:3f:78:79:5b:34:cf:b6:
99:77:b4:5b:28:aa:73:8c:a4:0d:ef:61:c5:3d:4b:76:8d:38:
b9:8b:58:e2:53:1c:ba:1d:88:30:97:18:53:c7:59:77:41:fb:
7a:97:de:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 02:29:44 2025 by rpki-client