
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/zUVPzFFhR9J5knJHAZ9lhdp0_ok.roa
File: zUVPzFFhR9J5knJHAZ9lhdp0_ok.roa (raw, json)
Hash identifier: /TspGM70/yRXNVHKhWj5smL/PZUzQoqRLk1Lpb2lDmU=
Subject key identifier: CD:45:4F:CC:51:61:47:D2:79:92:72:47:01:9F:65:85:DA:74:FE:89
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 0199C3C0864D119EF557C2639428B425A8AC
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/zUVPzFFhR9J5knJHAZ9lhdp0_ok.roa
Signing time: Wed 08 Oct 2025 12:16:38 +0000
ROA not before: Wed 08 Oct 2025 12:16:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51722
IP address blocks: 194.62.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c3:c0:86:4d:11:9e:f5:57:c2:63:94:28:b4:25:a8:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Oct 8 12:16:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd454fcc516147d279927247019f6585da74fe89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:78:90:b1:67:6c:b8:7b:9d:b7:98:9d:fc:aa:
59:14:c3:32:d4:d3:2e:1f:f3:3a:26:9f:04:da:8a:
ea:ea:4e:ee:fd:4b:fe:90:3f:42:42:9e:1a:46:d6:
34:72:5c:01:3d:b2:cc:34:c0:1f:f8:68:95:70:04:
a9:ea:bb:02:eb:eb:85:26:00:b5:3c:12:e4:1b:02:
86:05:c6:c8:58:dd:14:f1:09:2c:d7:20:18:4b:d3:
8f:b1:b7:18:49:58:bc:11:80:85:07:0c:2d:7f:d9:
ba:da:51:c4:d1:4b:e2:b4:ff:73:bb:5c:62:cd:a1:
4f:cc:9c:a0:40:ff:38:45:85:4c:61:35:e9:f9:57:
71:74:c2:90:1c:86:70:20:1b:90:1e:e8:ee:9a:6a:
f0:35:1b:fe:b6:c9:4c:6b:ac:f1:ce:c1:cf:03:a4:
d8:86:ba:01:21:ac:7b:24:e0:c0:ac:45:e0:02:3a:
ef:30:e5:ed:0e:6f:b9:d4:84:9f:40:d7:73:a5:b5:
67:ec:49:9e:7f:db:a0:67:6f:c6:67:a9:09:4c:57:
6f:97:6b:96:b2:28:fe:54:79:2c:7b:b9:11:bb:2d:
2e:ab:ff:86:88:75:07:31:8b:b8:da:aa:57:50:7e:
8c:21:c4:fd:cd:9f:92:fc:d0:87:5b:51:ea:dd:5c:
df:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:45:4F:CC:51:61:47:D2:79:92:72:47:01:9F:65:85:DA:74:FE:89
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/zUVPzFFhR9J5knJHAZ9lhdp0_ok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.54.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:19:90:db:ec:7d:01:23:65:f1:8c:c6:3b:0b:75:ab:fc:15:
87:78:36:b1:f2:14:f3:82:d2:71:1a:99:59:f8:b4:1b:75:7e:
0c:74:59:8d:6e:d9:7c:d9:75:c5:68:82:91:86:62:e0:0d:db:
f5:7d:ed:27:1b:cf:0f:04:f1:ed:03:63:08:10:5c:76:31:1a:
07:96:56:c9:5a:99:3e:49:bb:9e:80:a0:69:a5:a4:ce:d0:c8:
cd:9c:58:c4:09:f6:0d:41:73:f5:f9:54:8a:d3:26:cb:a1:5f:
18:75:92:f0:83:d2:bc:5a:9a:66:17:7d:38:00:7b:28:33:5e:
7e:72:0c:98:0d:23:f3:11:fb:a3:11:56:41:2a:cc:50:e8:2f:
91:98:d1:97:ec:76:bb:22:28:62:06:a8:c3:2b:47:90:d9:ea:
4c:10:c9:6c:c5:54:60:62:d7:2b:5d:60:1d:89:f4:6e:f8:77:
53:38:f8:d6:60:37:75:2d:b4:75:83:17:3e:cd:a6:9c:cb:41:
04:bb:7a:57:6a:eb:91:37:76:22:2e:d2:bc:17:10:f3:a5:c7:
4c:ac:5d:3a:32:6d:78:a7:0e:db:30:bf:93:3c:8f:c5:df:2d:
40:3b:d7:04:09:7b:06:ef:ce:f3:49:78:05:f2:15:b8:71:37:
ba:a5:f2:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 09:35:11 2025 by rpki-client