Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ZZnxKlzD2lDXvbFpWTsr6faArPs.roa
File: ZZnxKlzD2lDXvbFpWTsr6faArPs.roa (raw, json)
Hash identifier: lu6gNNrSGYVI5X5hj3QpoysAlPcpQ/PszGUK+Q7O5to=
Subject key identifier: 65:99:F1:2A:5C:C3:DA:50:D7:BD:B1:69:59:3B:2B:E9:F6:80:AC:FB
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0199CEE2900BA08C4D5BE4F735ACB25BFEB5
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ZZnxKlzD2lDXvbFpWTsr6faArPs.roa
Signing time: Fri 10 Oct 2025 16:09:38 +0000
ROA not before: Fri 10 Oct 2025 16:09:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40676
IP address blocks: 163.5.82.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ce:e2:90:0b:a0:8c:4d:5b:e4:f7:35:ac:b2:5b:fe:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 10 16:09:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6599f12a5cc3da50d7bdb169593b2be9f680acfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:29:52:04:ac:78:2f:8e:17:a0:a2:38:b8:70:
b3:c4:8e:4a:12:34:13:37:89:5a:1c:e2:6c:19:51:
9f:41:d8:8d:8b:db:a2:f6:15:93:db:f1:82:57:17:
9d:b5:b7:fb:f3:a1:4f:26:b9:d1:a3:39:41:64:b4:
58:24:42:13:41:48:af:19:34:3a:d1:ad:6d:26:ce:
57:54:2a:60:ea:93:c6:8a:50:17:97:74:d8:18:01:
2d:73:14:2d:30:b1:07:78:c6:83:c2:c4:72:f1:07:
63:0b:0b:f5:4c:37:ef:c8:25:d2:ba:e4:1a:27:25:
b4:e8:8d:43:0b:9b:f4:94:89:2a:b2:8e:22:ee:3c:
1c:4b:3c:1e:5e:31:7c:96:c6:67:2b:97:7a:da:2a:
a5:2d:a5:3f:9c:8f:33:2e:70:1c:9f:99:c0:aa:3f:
2e:95:48:fa:59:b9:73:9d:e4:41:c4:0c:24:c1:e0:
c0:a0:9a:b8:b2:c9:b7:8e:5e:ac:1e:49:4b:fd:21:
7e:d1:65:93:9a:0a:db:0d:59:ad:db:71:aa:60:e3:
7d:bd:17:ca:47:0a:d0:5e:09:96:62:21:3e:44:3d:
ca:6f:b5:bf:55:4a:ed:5b:ba:ef:7a:88:ca:dc:63:
06:0f:8e:f2:20:62:e9:3c:f5:1b:70:1e:3b:4b:d3:
0c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:99:F1:2A:5C:C3:DA:50:D7:BD:B1:69:59:3B:2B:E9:F6:80:AC:FB
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ZZnxKlzD2lDXvbFpWTsr6faArPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.82.0/24
163.5.99.0/24
163.5.202.0/24
Signature Algorithm: sha256WithRSAEncryption
94:9d:1d:fa:3e:36:ee:7b:74:62:c7:ee:fe:d7:9f:e4:c1:22:
d4:3d:18:3b:3c:a1:e7:d5:e5:85:c7:c0:10:b1:da:42:a7:0a:
8f:1f:ff:80:85:9e:4b:bf:e6:07:97:56:99:2b:ed:4a:89:c1:
5c:06:41:71:3e:8c:95:5c:b9:5b:d4:84:66:b9:ef:06:f0:1a:
bc:3f:ab:97:91:86:a5:0b:11:53:84:07:89:45:62:85:ec:1a:
07:c8:d0:8b:d9:e5:61:14:c8:17:87:2f:8f:de:e8:9c:71:b1:
e2:c9:3a:a1:1f:60:32:f5:cf:34:c0:4f:51:66:19:ba:43:e2:
ee:c8:c3:42:53:0c:58:b0:f4:f3:c8:b4:66:1a:a8:67:9e:71:
cb:83:5d:75:11:6d:38:b4:59:2e:2f:07:70:99:cc:e9:87:b6:
4e:f0:95:da:9c:0e:4a:a4:69:1c:35:a8:a8:a4:a5:d5:a1:23:
e5:10:72:8a:ce:67:dd:3e:04:8a:bb:7f:1c:bc:ca:4b:bb:9d:
30:c4:32:d6:02:01:fd:b5:40:ab:cc:3f:25:65:11:9d:74:ff:
5f:d0:30:36:60:51:ae:f8:41:97:4a:85:10:4a:fb:a6:05:6c:
13:67:4e:24:a0:66:6d:14:e2:fa:ec:99:a6:71:38:df:07:2e:
7b:fe:4b:b7
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZnO4pALoIxNW+T3NayyW/61MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjUxMDEwMTYwOTM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTk5ZjEyYTVjYzNkYTUwZDdiZGIxNjk1OTNiMmJlOWY2ODBhY2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSlSBKx4L44XoKI4uHCzxI5KEjQT
N4laHOJsGVGfQdiNi9ui9hWT2/GCVxedtbf786FPJrnRozlBZLRYJEITQUivGTQ6
0a1tJs5XVCpg6pPGilAXl3TYGAEtcxQtMLEHeMaDwsRy8QdjCwv1TDfvyCXSuuQa
JyW06I1DC5v0lIkqso4i7jwcSzweXjF8lsZnK5d62iqlLaU/nI8zLnAcn5nAqj8u
lUj6WblzneRBxAwkweDAoJq4ssm3jl6sHklL/SF+0WWTmgrbDVmt23GqYON9vRfK
RwrQXgmWYiE+RD3Kb7W/VUrtW7rveojK3GMGD47yIGLpPPUbcB47S9MMTQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFGWZ8Spcw9pQ172xaVk7K+n2gKz7MB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvWlpueEtsekQybERYdmJGcFdUc3I2ZmFBclBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAowVSAwQA
owVjAwQAowXKMA0GCSqGSIb3DQEBCwUAA4IBAQCUnR36Pjbue3Rix+7+15/kwSLU
PRg7PKHn1eWFx8AQsdpCpwqPH/+AhZ5Lv+YHl1aZK+1KicFcBkFxPoyVXLlb1IRm
ue8G8Bq8P6uXkYalCxFThAeJRWKF7BoHyNCL2eVhFMgXhy+P3uiccbHiyTqhH2Ay
9c80wE9RZhm6Q+LuyMNCUwxYsPTzyLRmGqhnnnHLg111EW04tFkuLwdwmczph7ZO
8JXanA5KpGkcNaiopKXVoSPlEHKKzmfdPgSKu38cvMpLu50wxDLWAgH9tUCrzD8l
ZRGddP9f0DA2YFGu+EGXSoUQSvumBWwTZ04koGZtFOL67JmmcTjfBy57/ku3
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:52:36 2025 by rpki-client