Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/I-ZRabDkxnomVm9OpqrSmL7wegM.roa
File: I-ZRabDkxnomVm9OpqrSmL7wegM.roa (raw, json)
Hash identifier: ahQV4yiQozNhzmoCjav4vhE90dmYTbq1NoD7TQiCni8=
Subject key identifier: 23:E6:51:69:B0:E4:C6:7A:26:56:6F:4E:A6:AA:D2:98:BE:F0:7A:03
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 0198B047AE2B21E390FEC8CF7A2F7D05D76C
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/I-ZRabDkxnomVm9OpqrSmL7wegM.roa
Signing time: Sat 16 Aug 2025 00:29:04 +0000
ROA not before: Sat 16 Aug 2025 00:29:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 399989
IP address blocks: 109.111.32.0/22 maxlen: 22
109.111.44.0/22 maxlen: 22
109.111.48.0/22 maxlen: 22
109.111.56.0/22 maxlen: 22
109.111.60.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:b0:47:ae:2b:21:e3:90:fe:c8:cf:7a:2f:7d:05:d7:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Aug 16 00:29:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=23e65169b0e4c67a26566f4ea6aad298bef07a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:be:1d:80:9f:e4:36:25:3d:26:f8:dc:c6:d4:
4d:8f:dd:16:f1:d4:17:d4:b8:75:8c:b9:0a:52:6e:
f4:c8:52:7e:f5:f1:33:f3:ea:c8:52:91:de:f1:2f:
65:97:ed:ec:80:21:18:f0:19:f3:26:2d:72:88:30:
96:ba:ca:78:6d:fc:fa:b1:f6:a2:2c:d6:a7:fd:35:
78:a3:dc:15:74:74:3e:08:5e:af:d4:76:d9:22:7e:
ab:49:59:dc:18:41:bc:f2:44:53:1e:0d:a4:5a:e8:
a2:8f:d1:db:a8:ac:35:f3:b9:f4:a4:81:46:cf:9f:
31:aa:52:86:d6:58:7b:d1:13:80:5f:15:c4:80:4d:
b0:c3:53:47:2a:f3:ce:b4:dd:8d:e5:b1:a9:8a:62:
97:fd:eb:00:35:05:ef:02:00:b6:e8:a2:77:01:be:
92:92:36:21:da:a0:93:18:7f:fc:69:5e:d7:e1:7c:
55:46:1e:03:19:41:1b:25:06:2a:58:13:bd:c7:b6:
0a:c0:13:ee:a0:7a:9b:0e:bc:61:c0:99:58:29:4b:
90:19:e1:f8:c9:53:09:f0:96:57:a8:cf:cb:09:1d:
8f:bd:71:5b:25:b0:c2:ad:e1:33:18:9d:d6:e4:b6:
f9:4c:6c:2d:cd:30:37:71:fe:cb:6d:b2:c1:9b:4e:
b7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E6:51:69:B0:E4:C6:7A:26:56:6F:4E:A6:AA:D2:98:BE:F0:7A:03
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/I-ZRabDkxnomVm9OpqrSmL7wegM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.32.0/22
109.111.44.0-109.111.51.255
109.111.56.0/21
Signature Algorithm: sha256WithRSAEncryption
a0:9e:12:c6:a4:6f:03:69:38:c6:84:dd:02:97:7f:d6:9e:61:
eb:6d:f4:86:6c:d9:24:be:8b:8b:c9:c6:6f:0e:b8:21:24:69:
ab:bc:1e:64:b5:6d:4d:cf:19:95:95:49:b3:65:af:21:d2:c3:
c5:4b:ec:c2:1e:98:2f:3b:a6:75:bb:95:e3:c7:63:97:b4:4f:
bf:b5:bf:37:03:43:6d:c6:1a:cb:ef:35:ae:7b:fb:ed:59:a1:
52:dd:11:52:0e:87:4b:89:64:56:b8:b1:47:a6:6d:37:a3:e1:
78:95:68:c8:21:58:73:3a:f0:80:43:26:67:18:67:a0:cd:60:
c6:41:2a:5a:e4:9e:78:a0:c1:46:9b:66:26:1a:74:25:aa:3e:
89:bf:32:4b:9c:0a:87:b5:bc:8d:75:e5:98:67:56:35:27:c9:
d4:da:f1:7f:e5:43:21:8b:43:2b:6c:c1:f4:c4:03:9d:57:9f:
05:17:04:8c:d9:0d:e6:c9:6c:ec:e0:52:7a:73:b0:27:1e:52:
c4:60:a6:14:7d:cb:c9:6f:9d:ab:2d:c2:db:38:55:0a:13:f8:
65:84:e6:4d:01:66:85:43:0a:ac:42:e1:5c:88:53:99:fc:8b:
c5:03:90:e3:de:61:26:cc:31:4b:48:91:7a:98:8e:b8:0b:70:
2d:37:11:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:22:55 2025 by rpki-client