Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/zCGs8K15mKd2w2N7cH58u-A4s1s.roa
File: zCGs8K15mKd2w2N7cH58u-A4s1s.roa (raw, json)
Hash identifier: jHZICxRfLe36L+iZ9hsK9ImIqCzzHVQt1OQ8xLVBhHw=
Subject key identifier: CC:21:AC:F0:AD:79:98:A7:76:C3:63:7B:70:7E:7C:BB:E0:38:B3:5B
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019954EBFDA065B6BE4AAE874A1C7FDD5919
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/zCGs8K15mKd2w2N7cH58u-A4s1s.roa
Signing time: Tue 16 Sep 2025 23:46:16 +0000
ROA not before: Tue 16 Sep 2025 23:46:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206023
IP address blocks: 5.83.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:54:eb:fd:a0:65:b6:be:4a:ae:87:4a:1c:7f:dd:59:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 16 23:46:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc21acf0ad7998a776c3637b707e7cbbe038b35b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:db:30:d9:ac:40:90:34:64:65:8b:30:11:16:
b5:e3:ed:45:ef:b4:e7:f3:f9:c4:05:1b:45:d9:bc:
97:b6:8c:5f:d2:e4:47:61:b5:55:26:54:47:c6:ef:
a8:aa:31:51:07:f8:c4:60:5e:c1:d5:62:dc:8c:86:
ed:f8:7f:5f:18:0e:37:14:bb:24:6e:36:50:33:6b:
87:c8:a8:49:6b:5e:97:e7:05:b3:93:38:d0:08:b4:
1e:fc:e5:8f:2a:40:01:47:4a:a5:f6:76:1b:e8:c8:
f8:81:08:cc:c2:23:68:9b:57:10:a9:43:c3:34:b1:
10:3d:e4:7a:d8:b5:9e:b6:b2:0b:66:75:e3:4f:10:
f5:73:08:08:a4:87:ea:98:91:4d:d7:18:a7:3e:f2:
f9:78:82:ac:41:ad:b4:1a:30:5a:6f:3c:a0:2e:05:
b5:16:7b:23:37:da:2c:60:b1:85:bb:41:65:40:ff:
e3:c9:50:10:c2:97:6c:ac:e6:76:d6:f8:d5:77:f0:
89:79:66:ef:27:81:75:bc:3d:6f:d1:f2:f7:dc:ab:
ef:c9:ad:8b:41:18:ac:35:fb:48:ee:2c:0a:80:9b:
06:f1:66:34:9b:a3:45:cd:f7:34:13:cc:7f:a5:56:
8c:55:63:75:87:e3:59:39:17:b8:75:74:73:8e:f6:
3a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:21:AC:F0:AD:79:98:A7:76:C3:63:7B:70:7E:7C:BB:E0:38:B3:5B
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/zCGs8K15mKd2w2N7cH58u-A4s1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.133.0/24
Signature Algorithm: sha256WithRSAEncryption
ea:d0:34:ac:0b:62:57:bc:77:e9:41:b6:67:29:7f:19:a2:54:
de:ab:77:0b:4d:eb:e3:8c:54:27:37:aa:1c:78:b6:5e:70:2c:
3c:67:df:7b:cb:97:b1:34:7d:07:e1:17:cb:43:17:23:8e:6e:
48:20:d0:dc:81:be:29:83:7a:9a:1e:07:ee:7c:1b:95:8b:81:
23:6f:ed:ba:91:44:d9:98:d8:c6:e7:39:fa:53:3b:1b:fd:53:
ec:d1:d3:ae:cf:f7:ef:03:37:4f:cf:af:08:d0:d0:33:a3:86:
49:09:20:3a:bc:d5:d2:f6:1c:71:42:d7:a0:88:f3:42:47:7d:
18:ec:e2:25:1b:d3:e4:9c:cc:be:8d:ed:e7:20:29:1e:cc:d6:
b1:8c:76:f4:83:0a:cb:b8:1b:04:41:37:d9:c8:b3:3c:73:b6:
ff:4a:b9:99:6f:b5:73:11:09:85:6d:4e:d7:9c:ee:c5:92:45:
00:4f:f1:7a:2f:2a:b6:3b:17:ea:77:b2:e8:63:b6:99:d6:73:
a3:39:e6:38:c7:78:d8:c1:8d:ef:36:fe:81:ab:50:44:3a:b4:
f6:dc:b1:25:79:d3:d6:d3:28:fa:2e:49:46:b3:d4:c0:a9:0c:
46:94:a1:da:56:4d:54:9d:ef:f5:81:72:e0:d2:1d:0c:3e:e2:
3c:b3:58:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:49:45 2025 by rpki-client