Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/ZDGQAv9QxZxlIAXGTSfjJC7zfq4.roa
File: ZDGQAv9QxZxlIAXGTSfjJC7zfq4.roa (raw, json)
Hash identifier: TUyDO366CQ4555rPQj40EOj67l7lgmGcdeXigo9fn2w=
Subject key identifier: 64:31:90:02:FF:50:C5:9C:65:20:05:C6:4D:27:E3:24:2E:F3:7E:AE
Certificate issuer: /CN=a2b12e8df3abd5559f9cf9680af65dd16589de86
Certificate serial: 0198D5E35D0E0EC727BEB56020D9C42C6D7F
Authority key identifier: A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/ZDGQAv9QxZxlIAXGTSfjJC7zfq4.roa
Signing time: Sat 23 Aug 2025 07:45:04 +0000
ROA not before: Sat 23 Aug 2025 07:45:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197537
IP address blocks: 46.236.240.0/24 maxlen: 24
82.139.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.mft
rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:e3:5d:0e:0e:c7:27:be:b5:60:20:d9:c4:2c:6d:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b12e8df3abd5559f9cf9680af65dd16589de86
Validity
Not Before: Aug 23 07:45:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64319002ff50c59c652005c64d27e3242ef37eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:56:db:30:d6:ff:1c:b5:b1:bf:93:0a:2a:b9:
11:d3:bb:3c:3e:90:36:eb:b6:45:b0:7e:b3:cc:b5:
f8:ab:12:ed:6e:4e:fd:1d:9d:03:51:68:2c:7b:fb:
72:70:3b:46:46:3c:b3:78:25:ac:2f:32:3d:7d:c6:
ef:f5:ea:a5:37:13:59:52:50:6a:d6:91:99:ff:57:
e3:58:32:46:65:56:2f:2c:22:21:1b:5b:ba:ac:32:
34:a8:4f:90:99:91:d5:13:9c:ad:f3:75:4f:07:7e:
e8:2c:01:93:3b:06:58:44:e6:be:b7:16:9c:10:77:
81:c3:d2:75:5e:8e:ae:bf:a4:4b:dc:0d:79:6e:34:
fd:2c:76:19:c6:5e:49:60:20:f8:e4:88:0a:51:e6:
25:f1:bd:bd:7d:70:88:e7:fe:59:f9:be:cf:e1:b9:
27:2a:58:b0:0d:55:9d:a4:9d:6a:f1:1b:a8:ad:1c:
b8:b9:47:56:03:64:19:46:0d:7a:11:7c:62:07:0a:
34:f7:a3:ea:8e:97:4f:d8:19:6b:99:45:16:a7:01:
b6:f8:65:41:da:be:e6:86:bb:50:89:65:39:e9:f2:
ba:c4:3a:cf:6b:5a:14:d8:0a:8b:9a:8f:85:49:30:
f1:9b:4f:56:03:a9:b5:f6:c1:90:77:d3:7b:58:9e:
db:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:31:90:02:FF:50:C5:9C:65:20:05:C6:4D:27:E3:24:2E:F3:7E:AE
X509v3 Authority Key Identifier:
keyid:A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/ZDGQAv9QxZxlIAXGTSfjJC7zfq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.240.0/24
82.139.226.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:38:20:98:c7:bc:e8:35:35:88:68:b8:fe:2f:6f:f6:18:7c:
fe:de:74:f6:c6:82:4e:20:c1:a0:9a:40:78:24:13:3f:97:ed:
24:d9:bb:08:f3:4f:5a:37:58:bb:fe:b0:1d:94:3c:fb:a9:38:
76:f9:4b:a7:2c:48:7a:73:ff:5a:c0:bb:ae:49:e0:a4:9b:cb:
8f:cf:e1:40:ba:30:93:49:73:3d:e8:b6:38:66:fa:98:49:c3:
e7:b6:fb:1c:02:91:aa:91:0a:03:f9:8e:d0:01:6c:9f:e7:5c:
7c:df:47:a6:35:0b:9a:94:4b:97:92:23:df:63:0f:52:f6:93:
0c:72:f3:bc:1a:ab:04:eb:33:3e:ce:5e:93:13:ec:20:33:4b:
f2:f3:a6:c5:51:04:86:f7:ad:0f:fa:3c:8d:68:f3:9b:a9:3e:
cf:ee:2b:15:72:f6:9b:73:11:27:c8:aa:fd:19:5f:8c:18:a5:
93:ce:7b:41:1e:c8:df:bf:64:eb:a2:4f:35:71:93:42:29:98:
2c:b8:3b:8b:96:4c:71:64:2f:0c:80:6e:d4:04:51:77:c2:46:
52:c7:6c:c6:7c:9f:b3:fc:7f:fa:87:81:67:52:18:fa:26:57:
95:69:a5:43:4d:e2:b8:26:be:e7:67:09:3e:e2:3e:26:ce:b2:
9d:06:cb:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:14:35 2025 by rpki-client