Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ZCUynuRxMxkBwV_PzXouokLUMdU.roa
File: ZCUynuRxMxkBwV_PzXouokLUMdU.roa (raw, json)
Hash identifier: cJ4G2kHX/LMQa1E/iSgEtjJH+oyKmdJXSYtrETkPfuY=
Subject key identifier: 64:25:32:9E:E4:71:33:19:01:C1:5F:CF:CD:7A:2E:A2:42:D4:31:D5
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01987AD92BB81698D62549B3D5E9CDE8D198
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ZCUynuRxMxkBwV_PzXouokLUMdU.roa
Signing time: Tue 05 Aug 2025 15:28:29 +0000
ROA not before: Tue 05 Aug 2025 15:28:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214159
IP address blocks: 84.32.99.0/24 maxlen: 24
84.32.208.0/24 maxlen: 24
88.216.214.0/24 maxlen: 24
88.216.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:d9:2b:b8:16:98:d6:25:49:b3:d5:e9:cd:e8:d1:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Aug 5 15:28:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6425329ee471331901c15fcfcd7a2ea242d431d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a6:5c:6f:05:71:19:cc:2e:86:5c:2f:f9:e0:
15:4f:79:43:3e:ed:c3:92:3a:9b:d0:f9:84:e6:d5:
3f:bd:14:70:b2:52:65:12:8f:9c:b5:3f:52:68:f1:
c4:83:98:7b:e3:e5:89:d5:da:2a:e1:cb:70:11:e2:
7e:c8:ff:2a:48:28:61:49:23:7a:23:6b:65:ee:3f:
ec:47:ba:46:86:11:5a:be:7c:79:6e:18:c3:0c:1b:
3c:e2:be:7e:48:c2:0a:17:68:7b:83:21:6e:05:8c:
07:fd:cf:4c:4a:19:d1:1b:b5:f5:fa:b2:3a:e0:2a:
ae:74:aa:83:75:1d:38:f2:2c:8d:64:b1:4e:60:02:
96:85:c3:3b:52:d7:d7:85:a4:67:1e:91:d7:7a:bc:
9b:e3:57:7b:8f:f0:03:bf:a1:77:bd:0a:e6:af:ef:
0f:cf:f9:c5:21:77:4d:9d:2a:a9:01:e0:50:c2:88:
df:4d:e6:8b:da:94:c7:f0:94:61:74:a4:28:31:65:
58:08:bd:aa:3a:9b:bf:81:22:3a:32:c8:c7:28:81:
e4:47:a8:aa:ce:9b:0d:e5:46:ed:8e:c1:80:02:0e:
7e:3b:c1:9f:9b:4d:43:c8:ef:97:43:02:c5:22:82:
d7:5b:88:b5:51:21:cc:2a:18:a6:77:1a:8f:a9:7c:
e8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:25:32:9E:E4:71:33:19:01:C1:5F:CF:CD:7A:2E:A2:42:D4:31:D5
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ZCUynuRxMxkBwV_PzXouokLUMdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.99.0/24
84.32.208.0/24
88.216.214.0/24
88.216.223.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:97:10:4f:55:f9:f9:46:32:74:6c:c8:3c:5e:b5:28:69:ce:
8f:d8:f8:ae:f4:2f:e4:af:30:84:80:84:2e:92:d0:c1:0b:69:
be:1a:8e:b5:1b:41:ec:c6:85:97:3a:e9:fc:34:48:a9:82:8a:
fc:91:1e:d9:60:e4:a2:c4:72:ce:31:27:41:7e:ff:4f:da:59:
90:f3:d6:77:67:56:c2:41:67:f3:da:99:ab:4b:e4:67:e3:58:
b4:0d:fc:9e:4c:34:a5:ba:f7:76:f7:cc:75:d6:73:8d:1c:57:
6e:a2:f9:02:45:c7:2b:cd:be:99:c5:d7:e4:52:ca:15:60:b3:
01:12:ac:a2:b2:f1:6e:05:9b:bb:0b:09:d7:28:79:33:75:88:
cb:24:93:67:94:63:56:28:a4:48:d9:61:08:61:8a:5f:11:aa:
31:73:49:10:f1:4c:aa:09:c2:dd:0d:40:fd:7a:fa:7f:fa:40:
a0:a2:62:00:d4:f1:8a:58:9e:33:39:f0:77:84:0d:ee:a4:5e:
93:49:e8:01:b1:c0:b4:ae:30:6e:ce:5b:41:59:7a:8c:ba:1d:
b8:23:70:a5:1f:b6:31:d3:be:ec:52:2c:3d:05:ea:a4:a3:98:
54:29:e9:ea:35:88:81:4a:72:23:7b:e8:45:4f:86:c7:90:f9:
fb:6d:99:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:13:33 2025 by rpki-client