Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/Z_12fyPWjJvCb6FBNMUkeSsk2Qk.roa
File: Z_12fyPWjJvCb6FBNMUkeSsk2Qk.roa (raw, json)
Hash identifier: a0cw7dhkqyFjfij3KupwibkS70jrF4XOR8zbXlfILTw=
Subject key identifier: 67:FD:76:7F:23:D6:8C:9B:C2:6F:A1:41:34:C5:24:79:2B:24:D9:09
Certificate issuer: /CN=fdaf41d04bc687d0ff98ad7d407684751c46ca3e
Certificate serial: 0198CD47B05E80431D1B7B776E055371AB8E
Authority key identifier: FD:AF:41:D0:4B:C6:87:D0:FF:98:AD:7D:40:76:84:75:1C:46:CA:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_a9B0EvGh9D_mK19QHaEdRxGyj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/Z_12fyPWjJvCb6FBNMUkeSsk2Qk.roa
Signing time: Thu 21 Aug 2025 15:38:04 +0000
ROA not before: Thu 21 Aug 2025 15:38:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208909
IP address blocks: 185.190.178.0/24 maxlen: 24
185.190.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_a9B0EvGh9D_mK19QHaEdRxGyj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 21:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cd:47:b0:5e:80:43:1d:1b:7b:77:6e:05:53:71:ab:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdaf41d04bc687d0ff98ad7d407684751c46ca3e
Validity
Not Before: Aug 21 15:38:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67fd767f23d68c9bc26fa14134c524792b24d909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3a:cc:0b:c2:73:b8:e1:c2:a2:55:9e:fe:82:
b3:ad:b7:ac:fe:1d:18:95:32:2c:2f:1e:27:28:f9:
9e:18:8e:58:2b:7a:4c:df:ec:31:b7:3c:a0:a1:2b:
44:2f:05:36:04:00:c6:ab:3c:28:a4:cc:62:ba:0a:
45:9b:bf:b0:64:70:3e:3a:b1:b4:30:60:92:18:5e:
59:9d:4e:bb:f1:e1:cf:ab:e8:4b:65:b7:3b:52:db:
e0:59:f9:4b:62:af:f8:d0:25:9c:52:50:95:05:f2:
cd:58:92:71:d6:75:7d:e8:1c:29:de:73:58:83:9b:
0a:91:a8:f8:ef:a2:4a:52:78:42:73:ce:cb:c8:06:
22:43:fd:41:51:f6:7b:56:52:e2:ce:26:4c:8b:4e:
91:68:9e:e9:b3:37:f1:9b:1a:af:4d:b0:e0:29:8c:
15:ad:34:d0:3e:4c:80:6c:da:f5:26:7e:46:a4:39:
c8:45:d1:8c:1c:1d:ef:b6:e5:c3:43:72:c2:8b:51:
c0:06:b8:ca:ad:52:4c:ac:8c:a1:30:19:48:18:df:
70:ed:bc:8a:d8:ec:6f:f0:cb:17:d4:88:7f:87:28:
a5:82:1d:62:05:36:8c:05:5b:98:b3:11:7c:e1:7b:
49:21:c9:a4:c8:1e:8a:a9:01:77:eb:2f:96:0d:62:
7a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:FD:76:7F:23:D6:8C:9B:C2:6F:A1:41:34:C5:24:79:2B:24:D9:09
X509v3 Authority Key Identifier:
keyid:FD:AF:41:D0:4B:C6:87:D0:FF:98:AD:7D:40:76:84:75:1C:46:CA:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_a9B0EvGh9D_mK19QHaEdRxGyj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/Z_12fyPWjJvCb6FBNMUkeSsk2Qk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.178.0/23
Signature Algorithm: sha256WithRSAEncryption
91:bc:0d:30:8f:33:55:e0:85:9c:41:4e:8c:6d:52:db:6d:06:
42:ad:b0:58:56:f8:05:e6:94:33:30:25:ff:68:72:63:b5:d0:
6c:a8:e7:89:b3:3f:ed:38:67:3f:cc:25:8e:ae:87:05:c7:fb:
54:cf:e2:91:de:5e:25:4f:30:a8:f9:d3:b5:f2:e8:e5:83:49:
ae:d2:fe:d7:09:6a:f4:75:a1:4e:90:60:17:85:bc:88:d5:5b:
7d:3b:e7:d2:4a:96:9b:2a:f1:b0:ad:7b:d4:6c:85:56:fc:5f:
b1:4b:17:e4:43:9d:46:9f:99:06:59:dc:47:00:ff:77:11:2c:
b7:03:c2:31:21:8d:47:c8:d4:cc:0b:bc:68:65:4e:c2:59:87:
cb:84:54:49:6e:5f:c1:b7:93:c7:a2:f7:c3:7b:c1:86:bd:1c:
c1:a6:30:28:1e:74:00:41:7f:fb:93:0c:e2:0c:e6:17:cc:d7:
bd:12:91:b7:e4:4c:0f:4a:1b:b1:cf:36:d2:d6:68:3f:09:59:
d5:09:d5:5e:19:57:f3:43:a5:58:44:f3:36:16:47:e1:06:b2:
f5:7d:48:f8:e4:ed:ba:b6:30:be:34:3d:67:41:7e:67:32:48:
39:67:0a:13:97:db:ad:d4:f0:b5:cb:a4:3d:e0:9d:bd:7b:b2:
b1:f7:9c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:59:29 2025 by rpki-client