Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/ZKs_PtzOl6JXrfZ_pu8ccHotJPY.roa
File: ZKs_PtzOl6JXrfZ_pu8ccHotJPY.roa (raw, json)
Hash identifier: 2dIpFoPyA8jItE82jeKy7Ii+7GgLwrgqHDUnlv82DBU=
Subject key identifier: 64:AB:3F:3E:DC:CE:97:A2:57:AD:F6:7F:A6:EF:1C:70:7A:2D:24:F6
Certificate issuer: /CN=90fd8aae1b6e159a2fa8f03d7a3188a1e18072a0
Certificate serial: 0198F0E8A965F2C3B9C6291FC34361B59BD3
Authority key identifier: 90:FD:8A:AE:1B:6E:15:9A:2F:A8:F0:3D:7A:31:88:A1:E1:80:72:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/ZKs_PtzOl6JXrfZ_pu8ccHotJPY.roa
Signing time: Thu 28 Aug 2025 13:40:36 +0000
ROA not before: Thu 28 Aug 2025 13:40:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214913
IP address blocks: 2a0f:c442:8000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f0:e8:a9:65:f2:c3:b9:c6:29:1f:c3:43:61:b5:9b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90fd8aae1b6e159a2fa8f03d7a3188a1e18072a0
Validity
Not Before: Aug 28 13:40:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64ab3f3edcce97a257adf67fa6ef1c707a2d24f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:46:66:cf:43:1a:6f:1d:5f:04:15:f3:64:a9:
19:bc:f4:9b:0e:f0:55:79:71:cb:17:70:18:61:1a:
4d:e5:16:e4:4d:37:9e:fa:0b:e1:72:08:ef:5b:13:
05:ed:b4:04:19:47:5e:37:b3:7c:ca:ab:65:53:d4:
8e:5b:06:95:0f:41:54:07:cc:d1:2b:5b:55:30:23:
9b:51:2d:8b:69:af:eb:f2:25:2a:2f:67:f1:6e:58:
c5:f7:51:64:31:a2:ee:b6:ff:b7:b9:64:c7:3c:4b:
9d:15:1d:cf:4b:2e:92:99:7d:fa:e9:e8:37:29:64:
29:98:28:d5:f2:f7:2e:19:21:57:eb:7a:e2:30:88:
0a:e5:80:27:dc:e4:a8:ff:eb:d7:e4:7b:9b:80:9a:
a9:bc:93:0e:16:52:8d:d6:24:b7:16:08:b2:65:fc:
db:50:fc:04:f5:77:6a:65:ab:a5:1a:08:b0:4a:46:
17:3b:33:bf:5d:cf:76:05:37:57:c3:a1:64:77:3e:
d5:16:e1:30:4d:34:9f:37:1f:79:4b:25:92:05:b1:
11:02:c0:4d:28:7f:a4:8c:b5:4a:60:a8:9e:b7:cd:
22:f1:89:8a:a5:c5:13:e1:71:47:a3:83:b5:dc:4f:
d6:d8:b9:e3:89:ae:a9:29:02:27:1d:ca:dc:3f:5f:
1f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:AB:3F:3E:DC:CE:97:A2:57:AD:F6:7F:A6:EF:1C:70:7A:2D:24:F6
X509v3 Authority Key Identifier:
keyid:90:FD:8A:AE:1B:6E:15:9A:2F:A8:F0:3D:7A:31:88:A1:E1:80:72:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/ZKs_PtzOl6JXrfZ_pu8ccHotJPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:c442:8000::/48
Signature Algorithm: sha256WithRSAEncryption
6a:8e:98:01:3f:ff:d5:ed:53:09:30:09:4a:e8:ae:e2:be:d7:
c7:26:19:e6:77:65:29:c1:07:cf:5f:a7:55:d0:94:08:4c:91:
0f:ef:05:e0:90:94:99:0c:6a:48:7d:43:b3:a3:38:9b:c2:1b:
38:d5:ad:bf:75:3d:4c:95:aa:fd:29:f1:3c:fa:68:eb:f3:de:
c9:3e:72:3a:29:fd:8c:96:2c:c3:b8:f6:a2:50:b6:34:c4:9b:
f1:78:d6:85:25:ad:88:f6:a5:a0:d4:f6:92:f6:77:69:52:0c:
e7:e1:a0:7b:d7:67:69:7b:87:14:cf:3a:dc:7c:d7:23:b7:ac:
94:88:06:5a:c1:ef:b5:6a:21:14:6a:3c:40:f0:78:0e:a4:f7:
0c:b1:d0:02:be:53:5b:53:74:80:6a:1c:b7:0d:62:b4:de:3c:
04:59:e3:56:f2:94:0e:84:41:e6:19:3e:6c:e7:01:76:af:6a:
1d:19:b6:cb:eb:06:55:02:9c:8d:06:f4:dc:11:41:b8:05:5b:
36:a9:06:ce:d7:a5:f9:af:4f:2d:d6:e3:42:fe:e9:18:98:5f:
cb:70:f9:81:d2:97:ff:0e:0e:44:02:c1:9d:b5:d1:30:31:bd:
45:ab:8f:dd:7e:4e:64:e6:6d:77:64:a0:cc:88:bd:80:ae:e0:
5f:58:8b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:32:33 2025 by rpki-client