Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/zVCCoN-U0ius3abDeot_YngoJfc.roa
File: zVCCoN-U0ius3abDeot_YngoJfc.roa (raw, json)
Hash identifier: fP+nwjzWvUa3O/fKfTzCwxd5RWiCPK08gubU5L+iEvQ=
Subject key identifier: CD:50:82:A0:DF:94:D2:2B:AC:DD:A6:C3:7A:8B:7F:62:78:28:25:F7
Certificate issuer: /CN=f24b9f4a7c0cebb1f97fa2403b631ee6d16ec633
Certificate serial: 019994506D69A314FF58FBD6CF0C54032248
Authority key identifier: F2:4B:9F:4A:7C:0C:EB:B1:F9:7F:A2:40:3B:63:1E:E6:D1:6E:C6:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8kufSnwM67H5f6JAO2Me5tFuxjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/zVCCoN-U0ius3abDeot_YngoJfc.roa
Signing time: Mon 29 Sep 2025 07:12:02 +0000
ROA not before: Mon 29 Sep 2025 07:12:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207110
IP address blocks: 2a09:5e80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8kufSnwM67H5f6JAO2Me5tFuxjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:94:50:6d:69:a3:14:ff:58:fb:d6:cf:0c:54:03:22:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f24b9f4a7c0cebb1f97fa2403b631ee6d16ec633
Validity
Not Before: Sep 29 07:12:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd5082a0df94d22bacdda6c37a8b7f62782825f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9b:eb:a8:8f:ee:1c:87:92:a6:ab:31:31:e4:
b3:1d:85:91:23:1a:12:fb:35:9c:16:6a:c8:a3:e3:
49:55:a5:4d:f3:e5:1f:46:a6:26:cf:22:aa:47:d4:
c0:e0:64:8f:a9:36:d6:b3:f1:60:de:b9:e0:23:3e:
ba:28:2f:42:f3:c0:82:e1:bd:54:c9:bc:bb:05:6c:
60:75:6e:fb:bf:e4:06:c7:71:4e:17:e4:47:43:82:
35:c7:59:07:bb:fb:69:eb:6c:ac:7f:05:72:f9:fc:
d5:68:2c:38:2f:f4:aa:46:6e:31:97:90:5a:46:00:
41:03:a0:78:b1:e5:55:6b:9f:0a:24:75:d5:f6:44:
5a:52:c5:d5:df:76:94:79:bf:4a:15:8e:26:d1:32:
c7:91:8e:7a:24:5f:dd:51:dc:18:63:f7:1f:e8:af:
24:22:2f:76:cb:fc:1f:a8:f0:09:31:fa:42:00:5b:
ab:7a:c6:88:41:2d:17:66:3a:fb:85:ec:6b:9c:a8:
3b:79:83:27:ea:f4:db:30:26:e5:82:3f:73:2e:59:
21:b3:70:a5:37:fb:92:69:98:81:5d:cf:47:c0:0a:
59:70:ec:97:b3:f4:e1:3c:b7:80:68:e0:5e:89:78:
c5:e0:f7:db:d4:4c:e4:18:34:7d:48:d2:ae:d4:f5:
ce:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:50:82:A0:DF:94:D2:2B:AC:DD:A6:C3:7A:8B:7F:62:78:28:25:F7
X509v3 Authority Key Identifier:
keyid:F2:4B:9F:4A:7C:0C:EB:B1:F9:7F:A2:40:3B:63:1E:E6:D1:6E:C6:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8kufSnwM67H5f6JAO2Me5tFuxjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/zVCCoN-U0ius3abDeot_YngoJfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:5e80::/29
Signature Algorithm: sha256WithRSAEncryption
74:45:02:c6:01:63:40:a8:1f:cd:f6:ac:5d:e7:28:aa:56:2c:
80:e0:48:20:df:0d:25:5b:fc:c8:66:34:65:f1:ed:6c:6f:ab:
55:15:84:15:39:67:68:93:81:c8:a5:bf:09:84:14:d0:73:65:
2a:36:e6:e1:93:c3:97:f9:85:00:79:91:ff:81:57:6e:dd:c3:
15:ff:54:ba:69:dc:7c:af:fe:18:fe:53:e9:6b:2f:d8:a7:3d:
ea:03:ba:65:6d:04:3a:72:f2:99:b2:3e:af:8d:00:97:08:5d:
0d:4e:fc:e6:6c:ea:6d:70:45:87:6b:d0:db:28:b5:f4:4e:c1:
6e:13:2a:e8:8c:d2:47:f4:a9:34:4d:29:80:7f:bf:8a:fb:58:
37:7f:fa:01:b2:7a:cb:d1:b9:e9:a4:1e:c5:f0:d2:3a:33:24:
21:46:6a:9e:30:dd:a6:d5:ea:c2:3d:4f:7e:56:a0:8b:50:90:
e5:58:59:4f:98:a6:fa:60:71:98:62:86:a2:17:03:d9:c5:25:
8c:ee:dc:a8:a0:fe:25:18:37:63:2c:ef:4e:d5:9f:25:d1:a7:
d9:5a:f4:f7:5b:6a:5b:5d:98:e4:11:54:5e:3d:35:1f:b4:0e:
ac:3c:4d:9c:fc:f9:50:a6:d8:58:85:45:04:6c:a5:4e:6d:37:
fe:df:cc:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:13:13 2025 by rpki-client