Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Z6ubH84vQbgEnifkNYkjjYx5LIg.roa
File: Z6ubH84vQbgEnifkNYkjjYx5LIg.roa (raw, json)
Hash identifier: A5Iyh12sixazcVNr3007j9RNY5bFIJZSLARvNvwI0hI=
Subject key identifier: 67:AB:9B:1F:CE:2F:41:B8:04:9E:27:E4:35:89:23:8D:8C:79:2C:88
Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Certificate serial: 0197A66759EDCDEF45FF48752E4B1200819E
Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Z6ubH84vQbgEnifkNYkjjYx5LIg.roa
Signing time: Wed 25 Jun 2025 09:24:40 +0000
ROA not before: Wed 25 Jun 2025 09:24:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.126.156.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a6:67:59:ed:cd:ef:45:ff:48:75:2e:4b:12:00:81:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Validity
Not Before: Jun 25 09:24:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67ab9b1fce2f41b8049e27e43589238d8c792c88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e7:55:62:c6:07:63:60:60:94:e6:5b:22:80:
84:76:c7:f9:b6:92:e9:e7:76:1b:2a:19:7b:3d:33:
5c:13:b7:7b:ca:ff:11:cd:5b:7d:ae:1f:e0:1a:0d:
85:e8:2d:e2:81:bf:e3:11:72:9c:0a:9c:03:9f:19:
ea:05:26:9e:23:8d:a3:cd:c8:6d:2b:88:ad:44:4f:
53:3b:25:9d:40:b6:82:a5:e0:d4:35:8b:ac:0c:86:
a0:e4:dc:2c:aa:43:00:ee:dd:34:a5:cf:15:c8:34:
1b:f0:3a:85:85:30:41:10:2c:56:a3:a3:98:67:5e:
d7:e4:fd:58:2c:7e:01:f8:18:71:99:fc:2b:03:81:
2e:02:6c:a0:6b:38:40:35:5b:82:57:22:a9:6b:06:
dd:6e:2f:a8:20:bc:9b:4e:3c:b7:c4:9e:da:0d:be:
16:23:d5:2e:ac:56:ac:3e:90:5a:2b:04:64:4e:4d:
99:6b:5d:1a:86:b7:da:e3:58:42:04:e7:a5:d3:1b:
11:42:56:3f:14:3e:40:a0:e4:9b:ee:72:9b:f6:06:
a5:d3:37:ee:8b:3a:08:a1:1f:02:df:4d:20:15:bb:
56:03:1a:35:16:86:54:54:47:0b:75:d6:fb:0a:91:
f0:64:34:32:3b:82:56:1a:0f:63:e5:93:6b:55:ae:
9c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:AB:9B:1F:CE:2F:41:B8:04:9E:27:E4:35:89:23:8D:8C:79:2C:88
X509v3 Authority Key Identifier:
keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Z6ubH84vQbgEnifkNYkjjYx5LIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.156.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:60:f8:fe:67:f8:6f:80:59:6d:f2:ec:f5:16:f1:3d:04:13:
9b:72:41:11:41:48:25:b0:98:36:41:f4:71:d7:bf:59:5b:e8:
97:ab:bd:68:93:89:33:7b:87:4c:82:74:76:9b:ce:a5:db:1d:
c6:72:fc:38:0d:a4:01:2e:0b:df:c1:c5:35:ea:43:62:ef:c5:
d9:bc:f8:6e:3b:b1:c2:5e:0b:2a:da:ff:a3:de:e7:90:75:93:
68:39:05:48:7f:a5:80:07:51:2b:9e:44:12:95:91:a9:ab:33:
f1:bd:93:81:0a:8b:43:10:27:8f:7b:0e:06:27:52:63:1d:d7:
33:ae:02:0e:7c:a3:4f:ca:89:78:62:75:75:99:f0:d8:18:e0:
0c:fe:3d:b5:51:2c:c8:44:11:54:2d:8e:a8:4a:a8:02:a6:3f:
be:13:13:4e:d9:6e:89:02:cb:56:b9:28:50:66:59:4a:3e:5f:
6e:c5:a7:88:6c:16:a3:b4:64:32:40:79:ee:03:d1:b8:f4:f6:
84:9b:1d:dc:34:9d:0b:df:64:41:8b:6a:cf:18:a6:e5:cf:5c:
78:c2:d1:ea:e9:27:e6:34:f9:d4:b1:a5:58:fa:2a:7e:b0:4a:
aa:08:ab:91:9b:e8:48:e5:46:70:ef:9c:cd:3c:ca:1a:77:55:
93:94:44:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:35:53 2025 by rpki-client