Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/ZYDhKr44GWTgEYGd8eG37WPsh2Q.roa
File: ZYDhKr44GWTgEYGd8eG37WPsh2Q.roa (raw, json)
Hash identifier: uwfjzikgAFKzWJv9BNoB9JKx/LJZPhS6gL+6tEOAI2U=
Subject key identifier: 65:80:E1:2A:BE:38:19:64:E0:11:81:9D:F1:E1:B7:ED:63:EC:87:64
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 0199D16ABFFBA1C7728118152D345AC804FF
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/ZYDhKr44GWTgEYGd8eG37WPsh2Q.roa
Signing time: Sat 11 Oct 2025 03:57:38 +0000
ROA not before: Sat 11 Oct 2025 03:57:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214196
IP address blocks: 94.74.164.0/24 maxlen: 24
176.46.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 18:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:d1:6a:bf:fb:a1:c7:72:81:18:15:2d:34:5a:c8:04:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Oct 11 03:57:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6580e12abe381964e011819df1e1b7ed63ec8764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:75:3d:bc:13:a3:16:ef:cf:6c:dd:ae:09:a3:
1f:5b:da:36:7d:7c:6f:72:81:e3:2b:6e:37:ba:16:
fb:79:93:a9:13:92:91:17:98:82:b1:4d:b9:de:88:
97:d3:41:64:82:80:09:36:50:a2:ee:d9:cb:98:36:
02:ba:bd:ed:57:cc:64:53:15:5d:5d:d1:a1:a7:f4:
ea:9f:93:a9:43:4a:0a:6e:da:7e:bd:4c:3f:1c:1b:
66:ad:6e:73:e4:0b:ab:5a:07:b6:20:3b:ac:7c:1b:
44:67:88:40:41:ab:88:a3:69:5d:04:e2:05:4d:b7:
16:c2:03:fb:60:24:42:86:0c:ab:14:f6:35:7e:98:
16:4f:29:e8:d8:fc:9c:d4:93:c1:36:25:21:98:08:
99:47:b7:51:0f:bf:8e:ce:2a:fd:3c:9e:64:15:4d:
11:d6:14:0a:fb:98:2b:6b:dc:62:11:2b:d3:62:02:
d4:2c:56:f3:ef:be:dc:91:7d:f0:f3:57:fb:14:1d:
53:57:23:14:f6:ba:52:d1:df:08:c1:8d:64:bd:c1:
d1:ef:c4:72:1d:10:f0:17:0d:48:96:3d:6f:e8:a8:
45:f0:04:7a:aa:c9:55:25:1e:08:18:a7:25:dd:8b:
f3:86:3d:2d:c7:b1:79:c4:cd:11:98:4e:17:e0:19:
88:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:80:E1:2A:BE:38:19:64:E0:11:81:9D:F1:E1:B7:ED:63:EC:87:64
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/ZYDhKr44GWTgEYGd8eG37WPsh2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.74.164.0/24
176.46.141.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:3c:3d:b8:9d:d6:bf:a3:87:d7:94:27:a9:a4:1d:33:fa:c3:
c8:18:f7:71:55:63:17:d3:5e:98:3c:3d:a3:1f:59:dd:1c:78:
f8:99:e6:e1:bb:46:c3:f1:1c:1e:d9:ee:9e:b7:65:48:e1:90:
9f:9d:d1:3b:2b:26:ab:b3:47:6c:f3:93:b5:1d:90:83:79:14:
8b:d3:2e:fa:d4:95:e3:41:10:0a:40:1b:ba:71:d4:f4:2f:b3:
67:5a:e0:55:27:ad:90:f3:14:6e:2e:12:32:0b:4c:99:c5:cd:
18:30:72:c4:62:2e:ec:13:3b:a6:b2:8c:f3:82:fb:50:f7:44:
1c:07:e1:7d:1a:34:0b:1e:5a:70:90:9c:2c:8c:63:7b:c9:10:
80:75:4d:50:d4:9d:47:00:68:03:ac:b6:5c:d0:47:a5:57:4a:
5a:7a:1b:4b:65:1a:d2:57:3d:3e:67:8f:54:9d:30:14:6f:82:
64:c4:9a:44:2e:67:53:59:3f:31:a8:d1:d0:8a:3d:7f:f4:1a:
ee:d3:cb:ea:c4:4a:fa:50:ad:a4:56:ed:c0:88:40:e3:6d:73:
c5:3b:ba:0a:71:3e:ab:c3:d7:7a:5a:6b:f3:85:02:70:76:6e:
fd:f6:14:b7:bd:51:7c:84:68:98:9c:e5:87:b6:33:35:b8:0e:
52:a4:e7:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:48:08 2025 by rpki-client