Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/cZCe7z1SuEJO9uo7pUfRsMk3zUE.roa
File: cZCe7z1SuEJO9uo7pUfRsMk3zUE.roa (raw, json)
Hash identifier: 4ghpEp3he5IP2eaKj/sfWjxMV98wRylBMDqZHenZGeE=
Subject key identifier: 71:90:9E:EF:3D:52:B8:42:4E:F6:EA:3B:A5:47:D1:B0:C9:37:CD:41
Certificate issuer: /CN=99201f609e7a893da86cf0ebbca4bbf47279d617
Certificate serial: 0199B3A8132A0611AB3473A0A52408C13243
Authority key identifier: 99:20:1F:60:9E:7A:89:3D:A8:6C:F0:EB:BC:A4:BB:F4:72:79:D6:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSAfYJ56iT2obPDrvKS79HJ51hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/cZCe7z1SuEJO9uo7pUfRsMk3zUE.roa
Signing time: Sun 05 Oct 2025 09:16:00 +0000
ROA not before: Sun 05 Oct 2025 09:16:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212077
IP address blocks: 194.246.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/mSAfYJ56iT2obPDrvKS79HJ51hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/mSAfYJ56iT2obPDrvKS79HJ51hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSAfYJ56iT2obPDrvKS79HJ51hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:b3:a8:13:2a:06:11:ab:34:73:a0:a5:24:08:c1:32:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99201f609e7a893da86cf0ebbca4bbf47279d617
Validity
Not Before: Oct 5 09:16:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=71909eef3d52b8424ef6ea3ba547d1b0c937cd41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e4:c2:ef:b7:e1:6b:48:82:55:99:df:50:cc:
72:04:e5:22:e7:d9:73:2e:9e:f2:a2:da:d2:f9:f8:
06:f9:ce:da:63:ec:dc:f1:15:92:a1:8b:4d:df:f8:
7d:d6:aa:da:e5:71:9f:5c:96:72:83:e7:82:ab:8f:
e0:aa:28:d0:d9:f9:e6:bc:56:42:7c:36:38:8b:da:
ef:96:3e:06:07:bf:0d:e1:3f:76:29:70:1d:f5:13:
53:36:99:8c:03:ed:ff:2c:3c:06:fe:b4:55:e9:6d:
d0:9d:2d:ce:21:5a:08:04:84:e6:99:16:1b:77:76:
3f:7f:62:7e:3b:b2:55:7a:0c:12:49:83:af:b5:b8:
f7:4a:1c:4f:21:60:63:98:4c:bd:36:42:bf:5d:eb:
8e:49:c3:8c:42:5f:05:fb:bf:58:2e:8f:1d:4a:f2:
8b:f0:66:ac:7d:d0:98:28:be:82:1a:e3:12:e8:59:
7f:f0:bb:92:12:32:a1:bb:0a:75:a7:ff:10:f0:3d:
63:4c:70:bc:2d:fa:91:a6:a8:4f:38:8f:05:bd:f8:
57:89:86:89:7d:5d:f9:9d:c2:85:77:30:cc:a8:2f:
7b:db:1d:c8:96:b4:e9:ab:37:a7:21:f9:4d:3b:ea:
ea:8d:e6:30:c0:8d:bc:a8:98:b1:0c:41:7b:1b:0a:
07:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:90:9E:EF:3D:52:B8:42:4E:F6:EA:3B:A5:47:D1:B0:C9:37:CD:41
X509v3 Authority Key Identifier:
keyid:99:20:1F:60:9E:7A:89:3D:A8:6C:F0:EB:BC:A4:BB:F4:72:79:D6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSAfYJ56iT2obPDrvKS79HJ51hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/cZCe7z1SuEJO9uo7pUfRsMk3zUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/mSAfYJ56iT2obPDrvKS79HJ51hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.246.34.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:a1:12:e6:da:eb:9c:d5:95:fb:6b:fb:cc:6b:ae:13:ce:33:
56:1f:e5:46:b5:38:48:d0:a2:ca:2b:f8:48:6d:7f:2d:c7:45:
df:d0:5f:5c:50:ad:4c:6b:bb:82:ce:70:cf:38:d6:c3:fd:1e:
43:9f:c6:f5:80:f9:cf:08:78:f4:66:1a:dd:cb:af:a1:f0:ff:
20:22:2b:e4:81:fd:34:c9:0f:00:46:85:68:7e:fc:3c:15:24:
05:5d:6c:d1:48:77:b1:47:9d:61:2a:5a:d6:8f:24:fa:0c:6d:
71:78:33:98:ae:88:a8:86:f9:bf:72:5b:90:db:42:e3:e0:cb:
4b:47:a2:09:b3:13:f8:67:ef:41:ea:4e:14:58:1a:14:35:9e:
e5:b3:ef:aa:1e:ca:85:45:bc:a9:5d:ef:c2:ac:3c:d7:fc:d6:
84:dc:92:d4:a4:f5:50:c2:26:46:89:5e:ed:47:5b:6a:34:a8:
7e:2c:00:6b:59:21:59:99:c4:12:50:18:dd:fe:fd:67:7b:bc:
7c:de:74:64:ff:31:92:25:98:7b:9c:79:fa:62:96:b7:2a:a3:
f1:17:a3:c5:1e:91:9f:ad:b1:d4:79:a5:94:7e:b4:be:3d:67:
d7:01:83:c7:af:f8:7a:44:b6:2a:8f:a2:bc:74:cc:40:c0:f6:
70:a1:d6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:57:40 2025 by rpki-client