Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/zEa2dnUGnYvh0EPESqkpwMgCh4c.roa
File: zEa2dnUGnYvh0EPESqkpwMgCh4c.roa (raw, json)
Hash identifier: WiceWAQsjC0ge+PDdbm8fdHkk1bbMCXxbb5e8qEyYHc=
Subject key identifier: CC:46:B6:76:75:06:9D:8B:E1:D0:43:C4:4A:A9:29:C0:C8:02:87:87
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01994D495642AABB28651E71ADDFC2E3C987
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/zEa2dnUGnYvh0EPESqkpwMgCh4c.roa
Signing time: Mon 15 Sep 2025 12:11:15 +0000
ROA not before: Mon 15 Sep 2025 12:11:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137517
IP address blocks: 212.69.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 18:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4d:49:56:42:aa:bb:28:65:1e:71:ad:df:c2:e3:c9:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Sep 15 12:11:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc46b67675069d8be1d043c44aa929c0c8028787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b0:6f:52:7c:3a:bd:b8:48:f0:5d:b6:42:8a:
7f:51:bb:b8:97:f9:28:9b:e1:ef:6f:01:89:db:c9:
48:ea:d9:a7:30:1e:fa:e4:94:88:d1:ee:2d:d2:8c:
83:36:5a:d4:2d:c0:7d:30:57:5c:1b:4c:3b:05:52:
29:5d:9a:25:20:a3:6f:3f:c0:65:92:2b:9a:09:c9:
01:e0:5b:5c:64:b8:67:58:07:96:4a:6b:c3:30:a8:
54:fb:db:03:89:fb:20:c6:e6:6a:ad:ad:15:1a:48:
7d:c7:68:8d:84:3a:be:b2:ec:45:f7:e4:44:d3:2e:
44:f7:dd:e8:b8:c8:cb:50:e3:e5:08:09:5e:6a:0e:
4e:a3:13:d9:af:43:15:a0:37:c2:2b:8d:29:a1:27:
e9:85:c1:ae:9f:cb:47:23:3e:00:b0:9c:7f:39:eb:
a6:0a:81:07:aa:fc:16:ff:57:89:0b:ca:6a:2a:ef:
eb:59:ba:49:72:e6:62:71:0e:d4:08:b0:61:5c:0d:
6d:53:c3:b3:f8:8d:e6:c0:80:3c:31:19:34:f7:c7:
ec:54:53:cb:a2:45:0e:0d:6d:35:59:1e:67:5d:e8:
23:94:af:f4:46:15:4b:9a:7f:2a:66:d6:4c:29:94:
cb:45:53:d9:a3:0e:85:a3:d7:8a:99:34:64:70:af:
ae:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:46:B6:76:75:06:9D:8B:E1:D0:43:C4:4A:A9:29:C0:C8:02:87:87
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/zEa2dnUGnYvh0EPESqkpwMgCh4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.69.5.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:75:db:ea:bc:02:0f:72:37:c9:be:13:4a:46:bf:88:43:c7:
dc:e1:03:51:5b:24:15:f6:e7:77:c0:c3:6d:46:e0:61:bb:82:
96:eb:8c:d1:d6:01:5b:07:19:69:49:89:30:34:db:7f:77:20:
18:d6:04:a0:d6:58:f2:02:37:7a:dc:ae:a6:d1:39:95:27:0e:
c4:cf:24:06:50:dc:87:f3:e0:42:95:78:fa:c1:6f:8f:e5:e5:
3c:ed:a3:5a:ce:61:da:73:f2:32:89:26:39:a6:f4:13:fe:f0:
7c:02:8d:0a:66:eb:51:78:13:80:83:78:d0:58:b6:45:38:3c:
71:a6:1f:6a:70:c6:a9:40:20:47:f3:66:10:92:a2:cf:23:be:
60:a2:66:d6:93:82:3e:3d:c7:92:71:de:d1:08:77:66:60:b9:
b0:9f:14:50:29:83:f6:d5:59:19:98:92:12:e2:57:0a:dd:2d:
30:bc:31:c2:66:b3:6e:27:32:be:66:2c:56:9d:d4:e4:72:05:
f9:0b:47:20:82:84:21:a7:b5:21:dc:59:a4:3f:86:55:03:5a:
f3:99:b8:14:18:83:d6:2a:3a:f1:c7:2b:b5:01:11:0e:df:82:
4d:92:03:0b:c8:63:e1:34:b2:0b:fb:94:2e:2b:3d:06:e3:f9:
90:51:72:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:42:56 2025 by rpki-client