Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/z7I1AdqPw_-7mPjdl0dnnYnsik0.roa
File: z7I1AdqPw_-7mPjdl0dnnYnsik0.roa (raw, json)
Hash identifier: BjCGcHqUo7qGCSBQIO0CmUGm0RQ1LmZx/49S9yuc9ds=
Subject key identifier: CF:B2:35:01:DA:8F:C3:FF:BB:98:F8:DD:97:47:67:9D:89:EC:8A:4D
Certificate issuer: /CN=78dc3c6ab4afba864ba0d4fdb09e6f0eb06f43fa
Certificate serial: 01990B9594588E6AE3D4D2A605D36187AD7D
Authority key identifier: 78:DC:3C:6A:B4:AF:BA:86:4B:A0:D4:FD:B0:9E:6F:0E:B0:6F:43:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/z7I1AdqPw_-7mPjdl0dnnYnsik0.roa
Signing time: Tue 02 Sep 2025 17:59:36 +0000
ROA not before: Tue 02 Sep 2025 17:59:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5505
IP address blocks: 185.210.226.0/24 maxlen: 24
185.210.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0b:95:94:58:8e:6a:e3:d4:d2:a6:05:d3:61:87:ad:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78dc3c6ab4afba864ba0d4fdb09e6f0eb06f43fa
Validity
Not Before: Sep 2 17:59:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cfb23501da8fc3ffbb98f8dd9747679d89ec8a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:62:51:da:80:82:bf:9f:e2:ea:ac:b6:fd:9d:
56:d6:ba:92:7a:fb:01:6e:77:79:08:9d:e7:2d:2e:
f7:3a:07:49:65:e6:12:76:fb:1e:d3:ac:38:4b:81:
a2:f7:d3:9c:75:f7:b9:fe:f6:8e:42:81:10:f4:d3:
3c:ee:fe:9a:27:e1:c8:72:87:18:60:01:d3:8a:e2:
9d:09:31:23:18:6a:54:b0:84:f2:c9:ab:a5:90:85:
83:c4:b3:7f:a6:e0:ae:4b:4b:11:a2:d6:e4:4b:39:
73:6a:03:23:26:e8:32:a2:ef:e1:41:cc:97:de:0b:
4d:80:9b:52:7a:8b:f8:6d:c5:8a:92:cc:de:ec:a7:
50:24:4d:7a:71:64:ec:d7:de:fa:1d:e6:53:20:b3:
d4:e0:1a:13:3f:23:ca:51:dc:04:15:3c:b6:d3:15:
98:18:ff:a8:e8:d0:68:e0:8f:b0:ec:ea:50:45:02:
8a:a7:37:4c:bb:07:4c:e4:5e:2a:05:f9:dd:c9:d9:
1c:4b:96:ef:59:5d:f2:84:ad:54:9a:74:be:fe:0a:
b3:b5:fa:f1:80:96:2b:24:58:b6:66:90:f9:c4:c2:
0a:76:48:4d:5e:f5:d9:3a:ff:9e:39:fc:28:9f:4d:
e9:cb:1e:90:ae:19:fd:5e:20:17:f3:28:2d:3f:24:
6c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B2:35:01:DA:8F:C3:FF:BB:98:F8:DD:97:47:67:9D:89:EC:8A:4D
X509v3 Authority Key Identifier:
keyid:78:DC:3C:6A:B4:AF:BA:86:4B:A0:D4:FD:B0:9E:6F:0E:B0:6F:43:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/z7I1AdqPw_-7mPjdl0dnnYnsik0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.226.0/23
Signature Algorithm: sha256WithRSAEncryption
da:a7:d1:d4:33:f2:d5:66:97:02:06:f8:00:c3:5c:ad:c3:0b:
f3:30:29:db:ba:65:8f:b4:87:33:07:d6:04:4a:c0:41:ee:c8:
8b:b0:c3:b4:ba:57:7a:80:3c:8c:fc:e4:30:7c:a9:6f:cd:38:
9f:7f:0f:f6:c3:67:44:f2:19:2a:bf:8c:0d:39:08:55:c7:2e:
b8:24:1f:6d:15:76:9c:fc:8a:3f:c9:8c:d8:9b:c5:0a:d9:07:
99:e6:4a:28:d5:a7:c2:d3:3c:75:3f:c1:00:6b:71:87:61:d6:
8f:64:cd:3f:9c:ff:e8:bb:4d:3a:e4:c3:ae:9d:b1:48:b2:a9:
83:4d:62:2a:7a:59:e1:b9:ca:da:e1:ca:e3:3d:d1:91:68:ea:
dc:f4:14:99:35:68:6a:1d:70:6b:e6:08:49:69:2e:f3:84:d4:
4f:7f:e6:13:4c:4f:45:7b:58:c0:01:d7:5d:96:2b:66:25:a2:
31:52:4c:16:69:38:eb:be:bb:01:08:95:07:95:a3:33:25:aa:
16:9f:ed:c1:d6:39:9c:86:9b:2f:d8:1b:3a:14:fe:bd:d0:cd:
c5:ed:36:81:38:0e:cb:96:6c:b4:aa:21:2b:c3:03:ff:13:0e:
70:40:b5:cb:38:ce:43:e9:ad:56:4e:a7:70:82:8a:07:9d:3b:
4b:93:fa:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:14:38 2025 by rpki-client