
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/zowYpDvX28H799XOtT_VcDDQ5qw.roa
File: zowYpDvX28H799XOtT_VcDDQ5qw.roa (raw, json)
Hash identifier: OCaDapxirUyOCbcAZjHU0KKvPPI3Jq1Fl4Zm8vwBoJU=
Subject key identifier: CE:8C:18:A4:3B:D7:DB:C1:FB:F7:D5:CE:B5:3F:D5:70:30:D0:E6:AC
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 0199DEC1ABDED74A0E6882054787B4A451F3
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/zowYpDvX28H799XOtT_VcDDQ5qw.roa
Signing time: Mon 13 Oct 2025 18:07:38 +0000
ROA not before: Mon 13 Oct 2025 18:07:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6079
IP address blocks: 2a06:b3c0::/29 maxlen: 29
2a11:1140::/29 maxlen: 29
2a11:9600::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 09:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:de:c1:ab:de:d7:4a:0e:68:82:05:47:87:b4:a4:51:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Oct 13 18:07:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce8c18a43bd7dbc1fbf7d5ceb53fd57030d0e6ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9c:c7:e0:9b:3b:b4:45:d8:5b:42:96:7e:19:
77:25:e8:ab:2d:3c:46:76:63:b2:ef:8c:38:3d:99:
c3:e2:8a:9d:a8:be:f5:ff:ad:90:32:cf:80:22:22:
1e:83:a4:dd:1a:d9:1a:0d:31:67:63:0d:73:24:11:
a0:ca:33:a9:c9:af:2b:33:13:97:39:06:d3:3e:90:
c2:0e:e3:22:4c:b1:43:04:2f:39:f1:81:c0:ec:ef:
33:79:36:b3:96:1b:95:e6:48:98:7a:38:d3:fe:1c:
d0:52:d0:51:24:56:6b:2e:15:f2:7b:02:c6:d8:20:
81:6a:8f:6c:1e:6a:b2:d7:de:3b:84:25:bb:06:51:
24:99:9e:78:c7:d7:ae:ef:6f:e9:01:06:44:e0:1c:
fd:e2:12:81:8a:8e:bb:5e:e7:81:d8:30:f2:3e:13:
76:e7:0e:bb:ee:5e:0e:cb:73:ce:a5:14:e7:44:6e:
d2:53:e4:3e:62:f2:32:61:8e:4d:99:5d:7c:ad:f1:
b4:7a:8a:bf:a3:81:ef:1e:f3:cc:8b:d4:f5:6d:19:
dc:ee:15:59:1d:ea:39:8b:a7:b7:8b:80:58:1a:1d:
82:d5:0c:29:05:5a:5a:4f:f1:6a:9b:22:9d:62:86:
56:a2:ef:68:57:0e:7e:e9:5a:26:b3:4d:64:6e:d7:
5f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8C:18:A4:3B:D7:DB:C1:FB:F7:D5:CE:B5:3F:D5:70:30:D0:E6:AC
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/zowYpDvX28H799XOtT_VcDDQ5qw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:b3c0::/29
2a11:1140::/29
2a11:9600::/29
Signature Algorithm: sha256WithRSAEncryption
74:c4:2e:54:4f:47:fa:f4:73:b7:0f:c2:39:f1:94:f4:1e:9c:
7a:34:6b:fd:a8:ac:5a:5a:c0:69:a6:72:cc:2c:38:5a:bd:df:
6a:f0:3c:34:92:48:b2:db:a5:39:a1:60:c7:ea:cc:86:80:db:
41:95:a0:92:3f:f5:3e:53:8c:77:c8:cd:9a:78:06:53:d3:f1:
6a:b9:93:17:1e:97:cd:53:0c:ee:7b:ce:7a:aa:87:7a:f1:52:
82:3a:49:0f:e6:95:b7:3d:04:67:90:42:fc:4f:5f:11:2d:e5:
46:2a:78:e2:bc:bb:30:ba:6c:1a:9c:58:f6:17:c0:31:fe:a9:
b5:8b:94:e0:58:de:fc:9b:a7:1b:dc:1a:a8:f0:c3:79:ad:fe:
8a:dc:75:39:e8:39:11:c0:13:13:6b:e8:f5:c1:48:e5:11:52:
ad:97:cb:d5:dc:cc:b7:ed:e7:c0:74:d2:a8:0e:c3:79:c9:9e:
ca:9f:bf:4d:8f:bb:a0:28:9e:eb:d8:14:3e:22:d8:b0:22:72:
51:dc:81:6e:73:87:08:1d:72:de:1d:2e:41:e6:02:d1:1c:58:
c0:10:5f:ce:1a:68:e0:9c:e5:fe:cb:30:ee:b3:ad:d9:c2:d7:
b1:19:ad:76:c9:fa:21:b6:9d:cf:e1:9c:4c:df:49:6f:24:1f:
50:30:94:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:44:45 2025 by rpki-client