Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/ZpNFWJfwg3HN9Ooqu-iB6x-dI0I.roa
File: ZpNFWJfwg3HN9Ooqu-iB6x-dI0I.roa (raw, json)
Hash identifier: KaneZWMrNQx4wvOdnB/G8QEKVpguH7fthQZlf/d4HpM=
Subject key identifier: 66:93:45:58:97:F0:83:71:CD:F4:EA:2A:BB:E8:81:EB:1F:9D:23:42
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01995BBCE129BF19F10C5F5DF83808F34593
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/ZpNFWJfwg3HN9Ooqu-iB6x-dI0I.roa
Signing time: Thu 18 Sep 2025 07:32:08 +0000
ROA not before: Thu 18 Sep 2025 07:32:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215166
IP address blocks: 194.153.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5b:bc:e1:29:bf:19:f1:0c:5f:5d:f8:38:08:f3:45:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Sep 18 07:32:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6693455897f08371cdf4ea2abbe881eb1f9d2342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0f:c5:c9:f4:cc:3b:c3:02:c5:6b:6b:99:20:
a9:e0:e5:96:77:47:51:3f:d9:ef:a3:e1:86:7b:83:
4a:0d:bd:46:d2:c2:52:ec:1a:3a:82:5d:2e:27:a8:
30:55:af:4a:f1:41:d0:58:73:84:9d:b3:8c:39:b8:
ff:0c:bb:ac:02:1a:b9:0e:cc:72:f2:d2:01:f1:7d:
a4:4a:40:2d:6b:b8:1a:99:35:c4:ed:f5:43:6e:0f:
a4:ac:94:60:42:95:14:8e:a7:af:eb:70:40:1a:af:
84:d7:32:18:fb:c2:53:aa:ed:9b:35:18:41:1c:e6:
a1:04:1c:c2:82:53:f1:d0:28:02:c1:59:5a:5d:ba:
04:05:a6:a0:22:e7:c9:0e:04:da:ea:e5:74:3a:5e:
ec:8d:af:39:d7:c1:ff:e1:02:3c:d9:dc:d5:f2:84:
2f:e8:57:a7:46:7b:35:2f:60:c8:80:63:6c:4a:48:
89:f5:30:5b:81:5b:f6:18:da:58:3f:28:ee:58:4a:
8f:3d:1c:7f:84:44:75:55:68:5a:96:7d:94:d1:bc:
e2:0b:3d:0f:21:31:3a:1f:72:21:20:2b:7a:07:e1:
8e:db:94:42:fe:7a:94:cf:f4:bd:71:a2:5b:2b:7d:
9e:e1:d0:e4:3a:a8:f2:7b:34:fb:6a:2a:74:10:d0:
75:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:93:45:58:97:F0:83:71:CD:F4:EA:2A:BB:E8:81:EB:1F:9D:23:42
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/ZpNFWJfwg3HN9Ooqu-iB6x-dI0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.153.247.0/24
Signature Algorithm: sha256WithRSAEncryption
61:e9:73:52:1a:26:67:4e:ce:2c:65:5a:66:83:59:cc:42:a4:
40:b9:55:04:1d:a7:3f:5f:a6:3a:a0:94:03:78:10:1f:db:52:
29:ad:80:80:c7:ab:97:2c:68:05:c2:ec:79:01:87:ad:93:b3:
a0:1c:2c:5f:2e:ad:5f:97:e7:6b:eb:9a:d2:bb:3d:ac:c5:e8:
5d:83:66:ea:ee:ef:2c:d3:07:3a:0d:f0:9c:ac:52:96:e7:09:
ed:14:93:40:92:e3:6d:c0:ac:dd:15:fa:6f:21:54:64:2a:b9:
31:91:49:df:ce:af:46:7c:9f:92:fa:fd:96:1a:2a:b9:ad:1c:
14:be:21:bf:4e:8e:66:b9:e8:9d:cd:47:e3:49:e1:97:e7:4e:
3f:ac:49:6b:d4:e4:f0:d3:c5:b6:8f:3a:c1:e5:c3:d1:5a:b1:
68:d9:5e:b8:a8:ef:69:09:6a:21:8c:49:7e:a5:e3:f8:e5:75:
3c:89:10:e8:5f:0f:90:ea:2c:64:55:ab:50:37:0d:19:08:29:
79:1d:e1:6c:92:73:0d:a5:5f:ff:f3:5b:ae:e2:d4:a6:00:eb:
b1:15:80:52:0b:b9:81:2b:8f:0b:25:8c:3f:97:cb:1f:2e:99:
39:f9:0d:07:b2:09:c4:f9:79:ee:d7:b4:04:b6:b3:19:d8:c3:
a6:be:c4:4e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZlbvOEpvxnxDF9d+DgI80WTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjUwOTE4MDczMjA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjkzNDU1ODk3ZjA4MzcxY2RmNGVhMmFiYmU4ODFlYjFmOWQyMzQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Q/FyfTMO8MCxWtrmSCp4OWWd0dR
P9nvo+GGe4NKDb1G0sJS7Bo6gl0uJ6gwVa9K8UHQWHOEnbOMObj/DLusAhq5Dsxy
8tIB8X2kSkAta7gamTXE7fVDbg+krJRgQpUUjqev63BAGq+E1zIY+8JTqu2bNRhB
HOahBBzCglPx0CgCwVlaXboEBaagIufJDgTa6uV0Ol7sja8518H/4QI82dzV8oQv
6FenRns1L2DIgGNsSkiJ9TBbgVv2GNpYPyjuWEqPPRx/hER1VWhaln2U0bziCz0P
ITE6H3IhICt6B+GO25RC/nqUz/S9caJbK32e4dDkOqjyezT7aip0ENB16QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGaTRViX8INxzfTqKrvogesfnSNCMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvWnBORldKZndnM0hOOU9vcXUtaUI2eC1kSTBJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpn3MA0G
CSqGSIb3DQEBCwUAA4IBAQBh6XNSGiZnTs4sZVpmg1nMQqRAuVUEHac/X6Y6oJQD
eBAf21IprYCAx6uXLGgFwux5AYetk7OgHCxfLq1fl+dr65rSuz2sxehdg2bq7u8s
0wc6DfCcrFKW5wntFJNAkuNtwKzdFfpvIVRkKrkxkUnfzq9GfJ+S+v2WGiq5rRwU
viG/To5mueidzUfjSeGX504/rElr1OTw08W2jzrB5cPRWrFo2V64qO9pCWohjEl+
peP45XU8iRDoXw+Q6ixkVatQNw0ZCCl5HeFsknMNpV//81uu4tSmAOuxFYBSC7mB
K48LJYw/l8sfLpk5+Q0HsgnE+Xnu17QEtrMZ2MOmvsRO
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:31:02 2025 by rpki-client