Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/zU1QL9oy395BMpoBXCQqGb7OlHI.roa
File: zU1QL9oy395BMpoBXCQqGb7OlHI.roa (raw, json)
Hash identifier: 0y/PuHzLRqyjsx08CFJtTaBktvwjX6i+x/JKGRPNwrE=
Subject key identifier: CD:4D:50:2F:DA:32:DF:DE:41:32:9A:01:5C:24:2A:19:BE:CE:94:72
Certificate issuer: /CN=8de42c560fc228b5bb4f4cf00ede2dfe26c6630b
Certificate serial: 0199EB50669D7EBED492E13E7EDCD0E53F64
Authority key identifier: 8D:E4:2C:56:0F:C2:28:B5:BB:4F:4C:F0:0E:DE:2D:FE:26:C6:63:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jeQsVg_CKLW7T0zwDt4t_ibGYws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/zU1QL9oy395BMpoBXCQqGb7OlHI.roa
Signing time: Thu 16 Oct 2025 04:38:58 +0000
ROA not before: Thu 16 Oct 2025 04:38:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9198
IP address blocks: 178.90.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.mft
rsync://rpki.ripe.net/repository/DEFAULT/jeQsVg_CKLW7T0zwDt4t_ibGYws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:eb:50:66:9d:7e:be:d4:92:e1:3e:7e:dc:d0:e5:3f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8de42c560fc228b5bb4f4cf00ede2dfe26c6630b
Validity
Not Before: Oct 16 04:38:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd4d502fda32dfde41329a015c242a19bece9472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a7:d8:40:6b:e2:cc:49:8c:29:f5:f1:ca:54:
d5:97:81:4e:0c:3e:f6:53:06:bc:01:26:d9:0b:ca:
5d:be:ba:08:b6:1d:98:6d:13:22:28:71:85:3a:7b:
23:85:2d:5a:ed:04:ca:ec:8b:1e:45:fd:b3:3d:69:
17:0d:a6:d8:2e:5a:55:5f:5b:2d:ca:81:bb:9a:d6:
e5:3e:5d:94:96:87:da:07:be:c8:48:5d:bc:43:a1:
74:c9:b1:5f:ef:fd:21:14:d5:f4:1d:5c:61:e4:66:
2a:c1:f1:31:7e:8f:97:e2:a3:cc:ab:58:27:a0:3b:
ef:93:42:70:86:93:f8:c1:58:7a:08:16:9a:9b:d8:
20:95:a5:52:a9:5e:fe:a8:18:fd:67:a3:14:e1:81:
3e:06:28:6d:bc:3b:47:53:7c:8a:ef:44:2b:2e:95:
e7:2e:a0:df:53:27:14:e9:62:80:f6:ce:b5:5f:b1:
c8:65:70:1a:8d:36:0d:1c:49:3c:2d:22:90:8c:83:
c1:c8:39:1a:5b:11:5b:59:dc:63:f5:25:24:b1:38:
60:39:45:ac:4b:f9:7a:c9:9b:49:47:83:ee:46:b2:
c8:af:09:6a:98:f4:40:b7:3c:e3:2b:25:74:22:b3:
a0:2e:b8:1d:10:19:e2:e7:93:fd:54:96:a5:d7:ea:
24:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:4D:50:2F:DA:32:DF:DE:41:32:9A:01:5C:24:2A:19:BE:CE:94:72
X509v3 Authority Key Identifier:
keyid:8D:E4:2C:56:0F:C2:28:B5:BB:4F:4C:F0:0E:DE:2D:FE:26:C6:63:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jeQsVg_CKLW7T0zwDt4t_ibGYws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/zU1QL9oy395BMpoBXCQqGb7OlHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.90.128.0/18
Signature Algorithm: sha256WithRSAEncryption
62:6a:d2:b5:07:6a:8b:45:5c:91:7e:a7:40:7e:81:38:46:7a:
49:a6:84:f4:d5:22:0b:7e:9a:e6:ac:72:04:4b:6c:63:c9:47:
97:db:80:73:60:b5:8e:c4:de:f0:71:0e:d9:a5:b2:13:36:df:
6f:d6:50:6f:d6:ed:b1:54:af:d0:40:79:ca:f7:ee:c3:7d:fb:
19:8d:b4:c1:46:38:1c:23:d5:3d:af:e4:64:43:d5:54:96:77:
9b:d6:17:52:8f:96:e9:c4:85:af:f5:a5:86:e5:db:3f:9f:f6:
e0:52:1a:22:61:24:bc:f3:34:79:9a:40:35:d6:77:75:a5:a2:
39:1f:f6:ab:39:29:07:22:08:44:db:86:33:2a:a9:07:81:67:
e5:fe:2c:52:cc:8d:06:c2:05:a5:89:18:c8:e8:57:88:72:45:
5c:30:8a:c4:7f:da:2a:60:fd:b9:95:81:96:a4:7e:9d:3f:a6:
f8:bf:4e:50:10:06:9b:eb:d7:00:be:e1:b7:b7:1f:97:59:21:
92:ac:bb:2d:ac:b1:cf:3f:cd:c0:c7:af:fa:7a:3b:4b:9e:a2:
1f:c6:28:9b:5f:4f:21:10:45:55:f5:a7:4a:4f:93:f7:1c:b1:
b2:e1:46:69:14:92:57:cc:4d:00:4e:d9:20:90:77:ef:36:27:
8c:93:61:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:49:35 2025 by rpki-client