Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ZKYcoInsqMnbgHy6gjxQlATxJRo.roa
File: ZKYcoInsqMnbgHy6gjxQlATxJRo.roa (raw, json)
Hash identifier: uzM2/EnwoHW7FB/WUnIi2ISAwzOtcV/Whnr7SKdzlk4=
Subject key identifier: 64:A6:1C:A0:89:EC:A8:C9:DB:80:7C:BA:82:3C:50:94:04:F1:25:1A
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0199F0789877C064CC7F31DE04E4DC889627
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ZKYcoInsqMnbgHy6gjxQlATxJRo.roa
Signing time: Fri 17 Oct 2025 04:40:59 +0000
ROA not before: Fri 17 Oct 2025 04:40:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214205
IP address blocks: 89.144.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f0:78:98:77:c0:64:cc:7f:31:de:04:e4:dc:88:96:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 17 04:40:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64a61ca089eca8c9db807cba823c509404f1251a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:84:8d:1d:77:0b:03:90:a6:75:be:64:28:eb:
d6:a5:4d:c1:4a:81:54:47:a0:7f:6f:95:e7:fc:db:
ea:af:bb:b4:2f:95:39:22:bd:73:02:ab:bd:0a:bb:
9e:0a:84:87:a9:3e:4c:40:af:8f:df:0c:f9:18:83:
b6:d6:78:54:c6:2b:64:df:71:40:1a:57:8c:45:3d:
a5:6b:9f:e4:40:ec:d6:14:b5:89:3e:ca:bd:dd:c1:
47:e7:de:74:5c:3c:0b:8c:b6:7c:11:e6:46:68:b8:
19:1f:34:77:ff:fb:f3:be:fd:bf:88:b4:88:71:a2:
5f:0c:c4:a7:08:2f:39:26:7f:0e:e3:39:6a:0c:05:
38:51:75:f2:24:3d:db:ba:5c:30:6f:9f:29:44:a6:
13:7c:d2:fa:80:cf:f7:db:1f:b1:e2:4b:60:55:fe:
c7:4d:5a:84:02:13:7b:a8:f8:4b:5f:fa:7a:d6:bf:
65:bb:47:ed:8f:44:cd:dd:a4:6f:b9:3e:cb:72:d7:
c2:8f:5b:f9:d9:f9:58:d0:6f:33:44:d5:35:e0:b2:
5f:5c:6b:ba:1a:eb:ea:06:fe:9c:9d:62:6c:41:83:
d1:f7:e0:bd:74:85:fb:7b:b9:34:42:54:7f:82:62:
bd:6e:df:e4:e0:1b:02:1b:16:47:aa:d2:ac:01:a9:
c4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A6:1C:A0:89:EC:A8:C9:DB:80:7C:BA:82:3C:50:94:04:F1:25:1A
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ZKYcoInsqMnbgHy6gjxQlATxJRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.144.35.0/24
Signature Algorithm: sha256WithRSAEncryption
79:af:3e:cd:b7:69:59:37:e5:3c:09:f9:9c:60:10:98:2e:11:
0e:c1:f8:02:0b:e1:0d:ec:92:c5:1c:87:73:55:a2:4c:42:4b:
60:73:10:48:fb:45:b4:17:74:b7:6b:48:ef:06:ab:45:63:89:
89:42:66:d3:f9:9e:52:86:4a:6e:4b:07:9b:fa:e4:6e:11:fe:
e5:5a:d0:46:20:7f:27:67:5f:9f:e5:9c:7a:82:b2:61:84:bd:
30:85:4f:7f:fe:69:d9:d8:be:db:26:2d:2c:b6:df:60:4c:67:
a6:6b:0f:f3:32:33:81:c7:28:49:0b:4f:e4:03:ad:d0:36:6d:
a4:08:fb:cc:05:c6:4c:c1:75:da:08:3b:29:e6:a8:e9:e1:83:
82:b4:c2:6d:05:7b:91:aa:b7:db:3d:bf:89:76:29:f6:3d:0d:
32:c2:ba:f9:dd:4a:e1:6b:53:11:c9:1b:7e:d4:3d:7a:2d:28:
1a:2a:1f:05:6f:fe:5b:a8:dc:91:41:58:17:9c:07:50:39:1c:
80:0f:16:52:19:d9:9e:d7:0c:11:b0:94:b9:5b:80:1e:96:bf:
37:83:b5:da:27:d6:94:36:b0:f1:80:32:50:ce:e6:4e:16:43:
06:4d:ff:74:08:8f:32:4f:c6:03:d7:bc:95:60:23:d2:ba:cb:
d9:59:ac:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:14:04 2025 by rpki-client