Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/zsvTv_yJ6DDijjS7Y6hurAmAevQ.roa
File: zsvTv_yJ6DDijjS7Y6hurAmAevQ.roa (raw, json)
Hash identifier: AsqSdYZd+DfNNHXDkyRup0GGQWwQCn3jTEXQSwW0taA=
Subject key identifier: CE:CB:D3:BF:FC:89:E8:30:E2:8E:34:BB:63:A8:6E:AC:09:80:7A:F4
Certificate issuer: /CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Certificate serial: 0197781F2B297B9495C5ACCB67A7603F6E90
Authority key identifier: 5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/zsvTv_yJ6DDijjS7Y6hurAmAevQ.roa
Signing time: Mon 16 Jun 2025 09:43:17 +0000
ROA not before: Mon 16 Jun 2025 09:43:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401776
IP address blocks: 45.15.106.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 03:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:1f:2b:29:7b:94:95:c5:ac:cb:67:a7:60:3f:6e:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Validity
Not Before: Jun 16 09:43:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cecbd3bffc89e830e28e34bb63a86eac09807af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:93:eb:d6:0b:67:74:0c:69:e3:af:c2:e3:27:
92:87:cc:38:96:6c:32:ca:6e:b9:3a:27:dc:84:65:
d1:ca:cd:81:c9:f7:6c:7d:b1:a2:0f:81:64:e9:16:
48:41:fa:e7:3a:d1:3d:19:84:ca:e7:74:4e:7c:95:
22:b4:a8:9d:6a:0c:e1:fc:6c:fc:6f:19:67:f4:e8:
3e:3d:61:17:af:51:24:50:ec:9e:28:3d:cb:96:31:
92:ab:34:7d:79:4d:60:5b:ae:83:f1:60:1e:09:d5:
9c:e1:5b:6f:7b:6a:4f:93:60:54:98:08:4a:99:ad:
1c:e1:81:94:61:b5:cf:54:fa:bf:a2:f2:88:ef:4b:
28:04:9f:e5:cc:b4:cf:48:7d:7d:66:ef:0b:92:92:
80:83:a1:fe:ae:ac:9d:0a:e3:59:85:91:bd:f8:73:
69:73:cb:ed:c1:ea:7c:1c:37:d8:6e:fa:8b:82:ba:
8b:e7:e5:a7:d2:3b:ca:3e:ad:d7:be:06:53:90:86:
07:fa:d1:98:0d:f3:cf:10:a9:26:4b:df:eb:3b:34:
55:24:ab:c1:8d:54:fc:02:ff:61:6c:83:e5:a3:ca:
48:7e:81:3e:78:49:d1:0d:09:5f:76:36:64:8b:9f:
54:ab:c4:0d:df:1b:50:71:1c:e2:a3:05:2d:75:d7:
03:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:CB:D3:BF:FC:89:E8:30:E2:8E:34:BB:63:A8:6E:AC:09:80:7A:F4
X509v3 Authority Key Identifier:
keyid:5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/zsvTv_yJ6DDijjS7Y6hurAmAevQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.106.0/23
Signature Algorithm: sha256WithRSAEncryption
88:d7:f3:41:6f:7b:42:a6:fe:f2:dd:85:01:32:d3:9c:ca:33:
3d:1d:e5:54:68:7c:96:d2:86:c0:6b:9b:0e:c5:a5:4a:6a:99:
40:12:42:ea:98:f4:f9:61:99:f3:7a:f3:41:cd:56:77:db:e0:
d0:7d:48:22:e6:a8:36:b7:1c:0b:61:7c:38:17:68:53:9a:5b:
d8:6d:41:aa:34:74:6f:d0:ec:a2:e9:42:54:17:90:26:07:02:
e5:05:08:20:18:66:a0:ae:8f:df:7b:bd:a8:d9:2b:14:94:07:
0d:65:a0:98:93:aa:c5:30:8b:7c:e4:ad:7c:a7:f0:e3:84:70:
75:a6:b0:48:3c:d0:a4:47:30:ed:64:5a:c1:56:b6:89:48:b5:
a8:c4:d4:bb:cb:57:86:ea:4e:6a:d5:78:c0:ce:1f:e9:83:8f:
68:32:49:81:b0:8c:19:11:7f:ed:4f:8b:96:e9:e5:1f:4a:2c:
c4:a2:93:67:d8:3f:ff:73:76:16:41:11:01:39:56:0b:25:fa:
cf:ab:f6:df:40:db:57:f1:a9:23:cf:2b:06:f0:73:14:d2:55:
b9:11:f1:e4:ba:0c:0a:bd:45:9f:b6:e6:77:27:77:cf:9d:91:
7f:de:c5:49:ba:60:b7:a0:d0:94:46:6c:17:42:b6:12:21:60:
9c:6b:ff:c4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZd4Hyspe5SVxazLZ6dgP26QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlOGQwN2I0NWY3ZDgzMTI0YzlmOGMwZmFjMDNiZWMwMjQ2
OGIzN2UwHhcNMjUwNjE2MDk0MzE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZWNiZDNiZmZjODllODMwZTI4ZTM0YmI2M2E4NmVhYzA5ODA3YWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pPr1gtndAxp46/C4yeSh8w4lmwy
ym65OifchGXRys2ByfdsfbGiD4Fk6RZIQfrnOtE9GYTK53ROfJUitKidagzh/Gz8
bxln9Og+PWEXr1EkUOyeKD3LljGSqzR9eU1gW66D8WAeCdWc4Vtve2pPk2BUmAhK
ma0c4YGUYbXPVPq/ovKI70soBJ/lzLTPSH19Zu8LkpKAg6H+rqydCuNZhZG9+HNp
c8vtwep8HDfYbvqLgrqL5+Wn0jvKPq3XvgZTkIYH+tGYDfPPEKkmS9/rOzRVJKvB
jVT8Av9hbIPlo8pIfoE+eEnRDQlfdjZki59Uq8QN3xtQcRziowUtddcDSwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM7L07/8iegw4o40u2OobqwJgHr0MB8GA1UdIwQY
MBaAFF6NB7RffYMSTJ+MD6wDvsAkaLN+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG8wSHRGOTlneEpNbjR3UHJBTy13Q1JvczM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9hMTY4ZTktZDA3MC00NGUwLTk0YTQt
NmM4ZmQ4NGJiNWY1LzEvenN2VHZfeUo2RERpampTN1k2aHVyQW1BZXZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9hMTY4ZTktZDA3MC00NGUwLTk0YTQtNmM4ZmQ4NGJiNWY1
LzEvWG8wSHRGOTlneEpNbjR3UHJBTy13Q1JvczM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLQ9qMA0G
CSqGSIb3DQEBCwUAA4IBAQCI1/NBb3tCpv7y3YUBMtOcyjM9HeVUaHyW0obAa5sO
xaVKaplAEkLqmPT5YZnzevNBzVZ32+DQfUgi5qg2txwLYXw4F2hTmlvYbUGqNHRv
0Oyi6UJUF5AmBwLlBQggGGagro/fe72o2SsUlAcNZaCYk6rFMIt85K18p/DjhHB1
prBIPNCkRzDtZFrBVraJSLWoxNS7y1eG6k5q1XjAzh/pg49oMkmBsIwZEX/tT4uW
6eUfSizEopNn2D//c3YWQREBOVYLJfrPq/bfQNtX8akjzysG8HMU0lW5EfHkugwK
vUWftuZ3J3fPnZF/3sVJumC3oNCURmwXQrYSIWCca//E
-----END CERTIFICATE-----
Generated at Sun Jun 29 09:35:35 2025 by rpki-client