Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ZtGXKSOj4pOPOAiC-nB_Yi5zPX0.roa
File: ZtGXKSOj4pOPOAiC-nB_Yi5zPX0.roa (raw, json)
Hash identifier: i3jMlg2cZwhJAlIJvFE3F9FkPTNzEOWGwkbj1aAgqmk=
Subject key identifier: 66:D1:97:29:23:A3:E2:93:8F:38:08:82:FA:70:7F:62:2E:73:3D:7D
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01988103B3BEA29DB686DF53ADE4F725E653
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ZtGXKSOj4pOPOAiC-nB_Yi5zPX0.roa
Signing time: Wed 06 Aug 2025 20:12:40 +0000
ROA not before: Wed 06 Aug 2025 20:12:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206030
IP address blocks: 45.144.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:03:b3:be:a2:9d:b6:86:df:53:ad:e4:f7:25:e6:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Aug 6 20:12:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66d1972923a3e2938f380882fa707f622e733d7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:72:8b:a1:35:27:bf:8e:6a:bf:e2:54:63:4f:
6e:df:82:b2:9a:80:a1:68:59:2f:fd:5c:31:ff:33:
65:e2:b5:1b:c1:59:13:5a:6f:28:c1:af:1d:8b:ff:
a4:0f:51:1d:01:df:4f:81:a7:0b:15:7a:f0:cf:9b:
c9:92:82:53:a3:53:92:cb:be:6f:4b:55:58:17:9e:
c2:76:c3:00:9b:db:13:8d:c6:07:6b:a2:af:ab:25:
b0:a7:18:f7:dd:df:c0:07:52:43:b5:f3:0c:b6:56:
2d:c4:cd:5a:16:ae:d6:ce:82:00:15:5d:d1:ae:cd:
ef:2e:89:66:0d:1d:6a:54:5b:26:aa:e0:0f:74:aa:
03:23:c3:92:22:d2:10:6d:2d:77:97:45:c8:b6:f1:
bd:1c:b8:4a:45:15:7e:b3:1f:50:eb:5b:a6:f5:2f:
f0:7c:70:02:79:40:bf:e7:98:d5:c5:c2:21:9a:4f:
bb:f7:5e:d8:65:05:43:d7:15:54:93:3c:a5:87:46:
46:cd:12:91:ed:90:18:5f:56:1a:95:8b:8a:17:b0:
ae:16:de:f9:a7:37:6b:5b:83:14:ab:8e:b3:3e:18:
9e:1e:78:8f:40:57:59:6d:3f:30:21:bf:8a:54:88:
c5:f9:93:e5:21:c2:d0:78:0b:67:ea:15:d7:df:95:
27:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D1:97:29:23:A3:E2:93:8F:38:08:82:FA:70:7F:62:2E:73:3D:7D
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ZtGXKSOj4pOPOAiC-nB_Yi5zPX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.213.0/24
Signature Algorithm: sha256WithRSAEncryption
09:92:ca:e2:55:cf:2f:98:19:a5:00:5f:a1:ba:fa:ce:4e:df:
3f:ab:97:50:89:b9:30:79:88:0d:d8:73:d4:bc:ea:46:a7:34:
bb:01:af:bd:4a:ba:cf:63:ba:28:45:7f:7e:a7:49:9a:59:95:
cd:4b:a4:9a:1b:14:cb:2b:17:5a:26:93:cd:82:e4:8f:0b:61:
25:e7:10:37:bf:bb:6f:a3:51:6f:d2:e8:80:95:3d:d8:c6:06:
6b:01:2a:d7:61:e2:db:59:07:84:aa:a9:2e:93:80:9f:8e:2e:
be:e8:bc:5f:1d:6f:f4:5d:37:bd:0d:0d:b4:88:db:ff:1c:8a:
0a:ea:09:50:77:5e:8e:79:af:35:bc:61:cb:8a:1b:a4:bb:d5:
45:20:7c:28:d9:d0:c5:4d:b5:64:6d:60:8a:56:ab:8a:7b:19:
91:ec:20:4e:0d:47:33:c1:f5:57:66:ad:dc:18:36:99:a1:54:
69:fd:8f:bf:ff:db:ae:05:48:25:7a:7d:99:3f:d1:21:ec:05:
d9:bf:45:55:dd:a0:0b:75:65:e7:df:1d:bb:f2:19:9d:47:f4:
21:61:d7:44:f0:37:39:d0:1c:2b:8b:91:ce:6a:c0:db:23:cd:
56:b8:99:7e:48:6c:34:d9:e9:97:51:f2:e8:7b:a4:89:72:58:
fb:c1:11:bf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZiBA7O+op22ht9TreT3JeZTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjUwODA2MjAxMjQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NmQxOTcyOTIzYTNlMjkzOGYzODA4ODJmYTcwN2Y2MjJlNzMzZDdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXKLoTUnv45qv+JUY09u34KymoCh
aFkv/Vwx/zNl4rUbwVkTWm8owa8di/+kD1EdAd9PgacLFXrwz5vJkoJTo1OSy75v
S1VYF57CdsMAm9sTjcYHa6KvqyWwpxj33d/AB1JDtfMMtlYtxM1aFq7WzoIAFV3R
rs3vLolmDR1qVFsmquAPdKoDI8OSItIQbS13l0XItvG9HLhKRRV+sx9Q61um9S/w
fHACeUC/55jVxcIhmk+7917YZQVD1xVUkzylh0ZGzRKR7ZAYX1YalYuKF7CuFt75
pzdrW4MUq46zPhieHniPQFdZbT8wIb+KVIjF+ZPlIcLQeAtn6hXX35UnWwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGbRlykjo+KTjzgIgvpwf2Iucz19MB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvWnRHWEtTT2o0cE9QT0FpQy1uQl9ZaTV6UFgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZDVMA0G
CSqGSIb3DQEBCwUAA4IBAQAJksriVc8vmBmlAF+huvrOTt8/q5dQibkweYgN2HPU
vOpGpzS7Aa+9SrrPY7ooRX9+p0maWZXNS6SaGxTLKxdaJpPNguSPC2El5xA3v7tv
o1Fv0uiAlT3YxgZrASrXYeLbWQeEqqkuk4Cfji6+6LxfHW/0XTe9DQ20iNv/HIoK
6glQd16Oea81vGHLihuku9VFIHwo2dDFTbVkbWCKVquKexmR7CBODUczwfVXZq3c
GDaZoVRp/Y+//9uuBUglen2ZP9Eh7AXZv0VV3aALdWXn3x278hmdR/QhYddE8Dc5
0Bwri5HOasDbI81WuJl+SGw02emXUfLoe6SJclj7wRG/
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:24:09 2025 by rpki-client