Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zywCbOkd0Mz3BiHJ86PRO_13htE.roa
File: zywCbOkd0Mz3BiHJ86PRO_13htE.roa (raw, json)
Hash identifier: KP4HT8OI4eSu60DPESUeH+CQQ1z0TWBN7qHeVG+jcSU=
Subject key identifier: CF:2C:02:6C:E9:1D:D0:CC:F7:06:21:C9:F3:A3:D1:3B:FD:77:86:D1
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0199C3D5963249519202E8C40EE421E03D8D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zywCbOkd0Mz3BiHJ86PRO_13htE.roa
Signing time: Wed 08 Oct 2025 12:39:38 +0000
ROA not before: Wed 08 Oct 2025 12:39:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215691
IP address blocks: 79.110.63.0/24 maxlen: 24
193.8.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c3:d5:96:32:49:51:92:02:e8:c4:0e:e4:21:e0:3d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 8 12:39:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf2c026ce91dd0ccf70621c9f3a3d13bfd7786d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:46:c0:17:46:12:d6:e8:f5:64:94:89:12:41:
c3:f0:ef:b6:e8:c1:28:85:b3:8b:41:c9:38:cf:0b:
b5:6a:d4:90:16:06:53:73:ac:19:2c:e4:21:d3:99:
ac:1b:87:8e:92:99:e2:8c:68:9d:f2:86:37:05:1c:
d9:ea:fa:09:4a:1c:09:bc:86:18:25:72:9e:5e:ec:
e5:cf:ee:39:4a:db:18:9f:21:1d:d6:25:2a:c4:52:
6c:77:16:0b:6c:a0:5d:c2:2a:a4:14:49:ee:4b:99:
42:16:cc:05:0c:66:69:64:4f:28:c3:a3:9c:37:49:
2c:81:fb:e6:2d:88:c8:c6:5a:c7:9d:eb:8d:82:79:
1b:4e:f1:ba:0b:bc:f8:57:fe:2f:47:4f:f2:39:b5:
aa:7a:56:1d:51:95:ae:ba:b9:61:13:b8:c1:ca:1c:
74:87:f0:15:68:2e:39:75:4f:94:f6:1a:60:b9:45:
ed:31:5c:b6:92:4a:fc:34:be:cd:1b:03:c4:9b:12:
40:61:51:dd:ee:10:2e:a3:e2:b6:69:2c:6b:53:41:
03:7c:08:d2:3f:4b:41:08:6d:34:bf:4a:bb:8a:15:
1c:5c:32:47:9f:d2:b0:f3:5a:e8:a6:e3:49:60:1c:
f7:f3:dd:24:c2:86:94:92:05:d9:66:27:a3:a4:3e:
2c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:2C:02:6C:E9:1D:D0:CC:F7:06:21:C9:F3:A3:D1:3B:FD:77:86:D1
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zywCbOkd0Mz3BiHJ86PRO_13htE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.63.0/24
193.8.185.0/24
Signature Algorithm: sha256WithRSAEncryption
69:b6:89:b0:6d:c8:79:9a:60:66:ff:3c:3d:8c:05:58:e6:ca:
c2:ad:35:3e:43:4d:e3:1c:de:c1:7c:33:0b:38:14:11:0f:e6:
5e:1e:a4:c9:b5:2c:22:74:fc:1a:7d:aa:d7:34:c5:c8:c0:f2:
51:05:d7:c2:e2:b0:d7:79:26:78:34:4f:63:cc:45:99:1d:91:
98:56:96:b2:45:b7:0a:1c:84:4e:f8:f6:b5:76:cb:5b:d2:cd:
6c:78:24:2a:65:32:bc:75:3d:d1:e5:9e:60:df:b5:8b:1a:d5:
b5:7c:0a:a4:6e:26:f7:41:57:7f:f3:47:d5:95:87:66:95:9b:
05:cd:2c:c8:f9:f8:0d:09:63:e4:b5:fe:72:12:b8:65:0e:9a:
b8:01:57:eb:f4:8d:10:0b:bb:38:73:07:88:c9:1c:3b:42:ee:
e9:a5:59:26:dd:9c:31:26:8c:d7:9a:32:6f:f2:f1:4b:73:a3:
61:81:31:4c:e4:82:1a:f0:5c:e6:e6:4b:0f:3c:9a:8a:0b:64:
9e:0f:72:a2:d9:62:56:71:fd:3a:0d:75:ef:59:48:dd:65:7f:
48:68:f5:f5:71:66:08:cf:d9:c5:8a:a4:f5:39:cc:1c:a7:6e:
cc:3e:6f:39:1a:47:4d:f0:d4:51:15:66:39:0b:33:45:de:5f:
2d:e0:2d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:00 2025 by rpki-client