Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Zj7G4eqMQ--NMz9Iaem4ej8INXk.roa
File: Zj7G4eqMQ--NMz9Iaem4ej8INXk.roa (raw, json)
Hash identifier: nn6Yr5BKZHLdyBPl2qx/+69m6iOonMzzHWeb6X89uC8=
Subject key identifier: 66:3E:C6:E1:EA:8C:43:EF:8D:33:3F:48:69:E9:B8:7A:3F:08:35:79
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0199F20503F79750C81E26C2E91A4989C059
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Zj7G4eqMQ--NMz9Iaem4ej8INXk.roa
Signing time: Fri 17 Oct 2025 11:53:58 +0000
ROA not before: Fri 17 Oct 2025 11:53:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 109.121.37.0/24 maxlen: 24
109.121.42.0/24 maxlen: 24
109.121.45.0/24 maxlen: 24
109.121.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f2:05:03:f7:97:50:c8:1e:26:c2:e9:1a:49:89:c0:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Oct 17 11:53:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=663ec6e1ea8c43ef8d333f4869e9b87a3f083579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:20:55:99:cc:18:f9:3b:49:89:f1:8a:26:85:
2e:03:f6:55:33:2c:2e:e5:0a:8b:e0:50:7e:18:5a:
33:d6:28:63:c4:fd:1e:af:ec:cf:79:22:02:47:2c:
7d:19:3e:02:f6:22:05:5c:c8:92:bf:a4:10:c1:a1:
e2:84:cc:74:4e:a4:0b:d0:f3:88:c6:d3:23:66:51:
90:e9:70:4e:c7:32:b5:05:64:9e:ce:73:e3:0e:e5:
8c:ef:9e:a3:e2:cb:ab:18:59:77:9b:94:fe:aa:0c:
fe:31:ba:c9:02:f8:aa:ff:ce:70:1a:b0:a1:e4:ca:
76:5d:f5:2f:a7:ed:25:64:e0:bd:d6:0e:37:44:6f:
b4:1f:7c:7f:f8:0b:d3:ab:d2:4a:9c:1f:7a:52:9b:
2d:60:51:d5:e2:53:68:c1:96:4e:6a:3f:1d:99:92:
90:c7:34:83:32:53:bf:3f:e5:5c:af:27:8f:37:e9:
fc:d8:ac:d1:d8:e7:e7:cb:1d:31:40:29:68:27:f4:
5d:8f:05:33:aa:c2:92:24:6a:66:ad:46:62:b4:7d:
94:b7:4e:4f:4e:99:9e:37:83:2e:14:30:de:86:cc:
79:7c:f8:5a:cd:5e:0b:4b:5d:9b:c6:1b:93:b7:8b:
58:85:73:49:9d:ff:d0:fb:e6:04:2e:b3:1d:01:49:
7d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:3E:C6:E1:EA:8C:43:EF:8D:33:3F:48:69:E9:B8:7A:3F:08:35:79
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Zj7G4eqMQ--NMz9Iaem4ej8INXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.37.0/24
109.121.42.0/24
109.121.45.0/24
109.121.47.0/24
Signature Algorithm: sha256WithRSAEncryption
66:3b:bd:a2:77:51:54:ea:83:b9:8f:eb:bb:2b:80:11:52:37:
23:c8:5c:20:2c:9f:cf:2b:de:5e:62:5e:8b:78:85:ef:3e:22:
a8:f1:30:fb:6c:43:a2:e1:30:b7:22:87:7d:5d:d8:79:43:69:
70:88:6a:0e:f9:06:cb:02:b4:d3:82:70:4a:28:82:e8:d4:9d:
09:43:6d:9d:c6:4e:c1:16:b6:84:8c:c3:0f:98:04:2b:3a:42:
76:9d:81:95:af:16:1d:5a:01:64:f9:9f:44:a2:7b:1d:03:ac:
c8:67:f8:d6:12:2b:63:ed:d0:ab:44:5c:3f:52:46:97:cb:3a:
62:c5:53:2f:9e:68:47:9d:b2:ff:97:6c:ee:42:ef:37:96:3e:
94:a7:a9:b9:77:a2:3f:cb:e2:c9:28:a0:3d:1f:39:ab:db:57:
26:87:b3:9c:3b:24:cb:f2:97:d1:64:8e:df:8b:45:78:a1:43:
9d:a9:43:02:d8:4d:59:6b:f5:3d:c1:4e:22:8f:4d:0d:0d:14:
a2:24:7e:e9:68:2d:b6:82:40:9c:ff:08:43:9a:ea:55:9d:07:
08:48:70:63:46:44:f2:4a:2f:81:c5:04:ee:35:d5:46:9c:0a:
47:6b:11:ed:70:0e:92:18:58:10:00:2a:11:98:43:23:43:3b:
1a:96:e0:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:55:55 2025 by rpki-client