Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/SzzlHogGw5EWuez7OZv1qG7OcKg.roa
File: SzzlHogGw5EWuez7OZv1qG7OcKg.roa (raw, json)
Hash identifier: H29VJ6cf+NYN1aHzV70qmMe4haFT+yUYtpiwpA4ElP4=
Subject key identifier: 4B:3C:E5:1E:88:06:C3:91:16:B9:EC:FB:39:9B:F5:A8:6E:CE:70:A8
Certificate issuer: /CN=ceb86983547113359bade1f3f38104091e3a6439
Certificate serial: 0199709D3397DA0BF0FF39C369DB5589457F
Authority key identifier: CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/SzzlHogGw5EWuez7OZv1qG7OcKg.roa
Signing time: Mon 22 Sep 2025 08:49:34 +0000
ROA not before: Mon 22 Sep 2025 08:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30722
IP address blocks: 193.207.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:70:9d:33:97:da:0b:f0:ff:39:c3:69:db:55:89:45:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ceb86983547113359bade1f3f38104091e3a6439
Validity
Not Before: Sep 22 08:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b3ce51e8806c39116b9ecfb399bf5a86ece70a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2b:bd:17:24:86:01:fd:42:6e:22:8f:35:c0:
93:80:e5:b6:e9:5c:9f:37:1b:13:cc:fa:70:de:b1:
af:3b:77:c0:9a:32:ab:d2:93:7b:53:e2:e5:e0:03:
50:d2:94:1a:da:65:16:05:8c:a8:83:e5:77:fa:1d:
02:a6:32:cc:ec:3f:ee:42:39:8a:5f:25:53:8a:37:
8c:d0:75:b5:c7:bc:62:aa:c0:89:62:ad:d1:60:19:
f3:5e:37:ee:70:6c:bf:be:e0:35:59:1c:07:21:38:
93:9f:e6:d4:b9:09:b7:ee:4e:6b:0f:f7:11:80:e4:
8a:76:96:b9:22:6d:bd:e4:53:fc:2e:ce:16:ea:20:
f9:19:01:b2:49:1a:fa:3f:cb:d8:45:b2:e6:47:04:
bf:9b:47:6d:32:c9:3c:d3:fc:83:45:a6:07:6b:38:
1d:75:e7:19:d1:af:d2:31:71:e1:76:32:eb:31:e8:
9e:48:9d:85:f8:59:81:1c:d3:65:08:c5:6a:7d:e8:
dd:ab:4c:08:36:95:c0:10:80:16:d4:2d:b4:f9:99:
88:99:e3:b3:0b:c5:73:f2:cf:12:16:da:3e:8f:ad:
46:bb:c0:1e:5b:d3:73:92:60:1c:89:a7:15:61:31:
36:47:d6:9d:a2:e6:61:07:f3:2c:4c:81:ad:a3:b8:
eb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3C:E5:1E:88:06:C3:91:16:B9:EC:FB:39:9B:F5:A8:6E:CE:70:A8
X509v3 Authority Key Identifier:
keyid:CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/SzzlHogGw5EWuez7OZv1qG7OcKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.207.27.0/24
Signature Algorithm: sha256WithRSAEncryption
82:15:f8:bb:04:ae:c7:33:8a:68:6a:ae:61:a8:66:b3:a0:59:
c5:2e:f6:5f:bb:12:17:64:4e:63:02:cd:aa:c5:12:7d:a6:05:
ca:d0:28:b7:f1:5f:56:22:32:f2:26:18:c9:ec:79:45:53:02:
93:6c:43:29:a9:7d:ef:49:99:88:49:84:ef:b6:65:50:13:48:
5f:b1:6e:5e:a7:0f:39:1e:32:27:e0:29:c9:24:f1:3a:2f:13:
19:fa:75:ac:74:b2:9c:6d:3e:bc:8a:95:de:0f:27:ea:29:66:
0e:7c:3d:e9:1d:56:6c:79:d3:f8:c5:8c:1f:96:93:8e:72:f4:
79:f2:87:ec:cd:ad:0e:b7:ef:d0:1f:82:4e:5c:b5:cb:1b:32:
0a:48:2a:7d:8f:7c:57:44:fe:98:9b:b0:16:02:f0:f9:10:25:
e7:f5:60:85:27:c7:dc:5e:db:09:dd:b7:c6:b9:fb:39:69:15:
2e:68:da:9d:6a:f0:7e:a8:42:4f:87:91:ee:b1:53:69:db:e0:
ff:42:7d:7d:d9:15:e5:01:f2:ba:81:43:c3:79:19:f6:c8:a1:
66:83:ae:68:30:c9:a5:a5:0b:e4:fb:8a:eb:4e:e1:7e:c8:a8:
c2:0d:b1:a9:02:e3:8d:bc:6a:2e:12:14:d5:ed:ae:a1:00:ed:
bd:4a:69:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:58:13 2025 by rpki-client