Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/pzPJYIhRockaD1nwBbpRbP8xwjA.roa
File: pzPJYIhRockaD1nwBbpRbP8xwjA.roa (raw, json)
Hash identifier: AaK2X03ZjLY2J2lOUNUGtKS+GxqtXwxpBI2KUrE93gU=
Subject key identifier: A7:33:C9:60:88:51:A1:C9:1A:0F:59:F0:05:BA:51:6C:FF:31:C2:30
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0199EBE861626C530DC644510E3C5567E67F
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/pzPJYIhRockaD1nwBbpRbP8xwjA.roa
Signing time: Thu 16 Oct 2025 07:24:58 +0000
ROA not before: Thu 16 Oct 2025 07:24:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 273142
IP address blocks: 45.10.107.0/24 maxlen: 24
201.77.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:eb:e8:61:62:6c:53:0d:c6:44:51:0e:3c:55:67:e6:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Oct 16 07:24:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a733c9608851a1c91a0f59f005ba516cff31c230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6a:de:68:78:6b:b2:8f:c0:7f:bf:9f:69:f2:
63:47:eb:f3:02:4a:f8:fb:35:5e:4d:c9:51:19:d8:
31:91:c1:86:6f:23:3a:14:a5:4e:23:25:37:f3:47:
96:99:d8:3f:dd:0c:21:59:0c:f5:5e:fb:4a:3d:38:
42:6e:4d:0c:23:9e:ec:6d:73:cf:4f:13:f9:fd:57:
d7:0f:8a:d2:e6:dd:38:e7:61:e1:a4:f7:57:d8:79:
a8:9a:7b:39:29:4d:10:21:86:20:00:97:21:d0:be:
b9:c1:32:23:5b:4b:42:56:00:26:a4:c8:02:60:6a:
71:6f:78:a8:31:70:ee:c5:09:0f:fd:57:25:c5:b1:
55:96:50:19:9f:e9:cb:9d:b9:73:ec:9b:58:99:4f:
51:7c:92:a4:87:c4:95:67:ab:16:7f:35:07:64:6c:
a3:ab:20:a7:ea:d4:3a:03:ad:24:ef:b4:ca:c1:1a:
bc:ab:fa:26:e9:d2:51:44:00:59:2d:09:e2:a6:7d:
3d:a3:1c:dc:48:fe:84:b8:e3:6a:fa:03:28:30:f5:
d4:ba:76:c1:01:33:ab:e9:68:e1:2c:e0:3c:2a:6c:
f4:2a:a7:c6:c6:74:63:4d:a4:3d:9b:5d:e8:e8:5c:
3f:60:c1:9a:2b:4a:ec:5e:ed:b9:c4:cf:fe:35:1e:
79:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:33:C9:60:88:51:A1:C9:1A:0F:59:F0:05:BA:51:6C:FF:31:C2:30
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/pzPJYIhRockaD1nwBbpRbP8xwjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.107.0/24
201.77.57.0/24
Signature Algorithm: sha256WithRSAEncryption
79:9c:f7:92:17:e6:ba:0a:0b:43:10:4f:b5:d4:c9:89:5f:fb:
73:6f:1b:7b:09:91:21:dd:97:56:d5:2f:f1:39:93:8f:92:54:
0d:ee:70:f6:24:8f:30:cc:76:21:a4:f6:a0:20:3f:64:b7:2a:
d9:4e:e3:3d:03:d2:0a:ac:cb:f2:7d:55:18:ee:41:92:e0:bb:
7a:43:7a:b1:0c:ef:af:ff:e3:3a:a6:fa:b4:d4:20:d2:e9:e9:
79:1f:e7:fb:26:06:ee:01:da:a6:db:f1:05:67:88:91:e5:60:
d2:07:5e:bc:84:c2:33:b3:8b:e7:fe:bc:ea:71:d8:21:bc:b1:
04:e4:20:d5:91:47:6e:2f:8b:50:12:49:1c:bb:f7:f5:bc:d8:
4b:da:66:e5:5b:88:48:f6:57:30:6f:03:a9:b4:5c:d7:25:75:
f1:3b:b0:c8:e8:3a:dd:25:8e:19:d8:2c:6e:68:f1:7c:29:cd:
f9:bd:5f:b5:7e:18:af:8a:90:dd:a8:2b:87:29:73:34:9c:f5:
a3:c0:34:91:fa:40:e0:e2:94:3c:68:a3:b5:41:d8:53:c9:99:
a5:07:33:28:a5:47:6d:03:c4:f0:ac:e6:5b:0c:18:ff:1b:4a:
ba:79:e8:d7:28:e2:ca:36:24:f6:c8:87:45:a7:5d:b2:5f:c8:
3a:eb:71:52
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZnr6GFibFMNxkRRDjxVZ+Z/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy
N2E0NjcwHhcNMjUxMDE2MDcyNDU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzMzYzk2MDg4NTFhMWM5MWEwZjU5ZjAwNWJhNTE2Y2ZmMzFjMjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmreaHhrso/Af7+fafJjR+vzAkr4
+zVeTclRGdgxkcGGbyM6FKVOIyU380eWmdg/3QwhWQz1XvtKPThCbk0MI57sbXPP
TxP5/VfXD4rS5t0452HhpPdX2Hmomns5KU0QIYYgAJch0L65wTIjW0tCVgAmpMgC
YGpxb3ioMXDuxQkP/VclxbFVllAZn+nLnblz7JtYmU9RfJKkh8SVZ6sWfzUHZGyj
qyCn6tQ6A60k77TKwRq8q/om6dJRRABZLQnipn09oxzcSP6EuONq+gMoMPXUunbB
ATOr6WjhLOA8Kmz0KqfGxnRjTaQ9m13o6Fw/YMGaK0rsXu25xM/+NR55UwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKczyWCIUaHJGg9Z8AW6UWz/McIwMB8GA1UdIwQY
MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt
Y2Q3ZTA2Y2JiNTMxLzEvcHpQSllJaFJvY2thRDFud0JicFJiUDh4d2pBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx
LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALQprAwQA
yU05MA0GCSqGSIb3DQEBCwUAA4IBAQB5nPeSF+a6CgtDEE+11MmJX/tzbxt7CZEh
3ZdW1S/xOZOPklQN7nD2JI8wzHYhpPagID9ktyrZTuM9A9IKrMvyfVUY7kGS4Lt6
Q3qxDO+v/+M6pvq01CDS6el5H+f7JgbuAdqm2/EFZ4iR5WDSB168hMIzs4vn/rzq
cdghvLEE5CDVkUduL4tQEkkcu/f1vNhL2mblW4hI9lcwbwOptFzXJXXxO7DI6Drd
JY4Z2CxuaPF8Kc35vV+1fhivipDdqCuHKXM0nPWjwDSR+kDg4pQ8aKO1QdhTyZml
BzMopUdtA8TwrOZbDBj/G0q6eejXKOLKNiT2yIdFp12yX8g663FS
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:34:51 2025 by rpki-client