Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/ZUR3BAP_7QG_ADM2oChuL6mE8nQ.roa
File: ZUR3BAP_7QG_ADM2oChuL6mE8nQ.roa (raw, json)
Hash identifier: QC0NJCXzeiGu8pGCymaMWOTKZLqngTi+89jFQkLRMjU=
Subject key identifier: 65:44:77:04:03:FF:ED:01:BF:00:33:36:A0:28:6E:2F:A9:84:F2:74
Certificate issuer: /CN=7892669f819ebd8dd2ebba93f2dd2d3e1a27c231
Certificate serial: 01993858EAE831506E173F00EA0ADEF5F6B2
Authority key identifier: 78:92:66:9F:81:9E:BD:8D:D2:EB:BA:93:F2:DD:2D:3E:1A:27:C2:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eJJmn4GevY3S67qT8t0tPhonwjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/ZUR3BAP_7QG_ADM2oChuL6mE8nQ.roa
Signing time: Thu 11 Sep 2025 10:36:15 +0000
ROA not before: Thu 11 Sep 2025 10:36:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33993
IP address blocks: 91.207.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eJJmn4GevY3S67qT8t0tPhonwjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:58:ea:e8:31:50:6e:17:3f:00:ea:0a:de:f5:f6:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7892669f819ebd8dd2ebba93f2dd2d3e1a27c231
Validity
Not Before: Sep 11 10:36:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6544770403ffed01bf003336a0286e2fa984f274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7a:2a:fa:f5:ce:ab:a3:29:00:02:79:e0:4c:
77:a0:99:f8:f3:df:f1:03:a5:ec:0b:00:84:88:e5:
ac:76:c5:89:5e:5c:26:e7:3b:a6:b0:d2:eb:55:b6:
11:82:e9:0a:22:02:4c:4c:8a:9f:33:c6:77:b2:0b:
c0:18:20:e1:29:d8:a2:3d:0a:cb:ba:7d:fb:81:46:
4d:68:29:40:5e:dd:f9:0d:f2:dd:ba:1b:e8:43:5d:
e9:48:e9:5e:9e:c3:3e:c7:1f:d4:58:21:07:a6:b2:
d4:99:b7:2d:3f:67:2e:c7:3c:b2:55:91:52:06:ba:
10:6a:cc:32:e0:58:47:37:a3:22:19:ae:39:13:d5:
a4:b3:5f:cf:53:49:88:ad:42:2c:36:f4:93:00:37:
e0:47:01:a7:03:9a:2f:a5:c4:2a:c6:9f:8f:22:51:
e3:ed:99:2e:b1:be:1b:f6:9a:8f:66:4e:19:55:e5:
78:79:9d:64:55:f3:15:63:04:0c:89:75:1e:a2:8b:
c1:e3:1b:85:a0:d1:0e:98:e8:20:a5:ef:f0:12:f1:
fd:6c:49:67:e3:c1:b6:c7:35:bd:c3:e2:c2:75:1e:
b7:34:a9:c2:85:50:f4:32:fd:cc:ea:c2:46:67:27:
98:3a:10:ec:e0:16:dc:b5:3f:05:f1:62:5f:20:dd:
c9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:44:77:04:03:FF:ED:01:BF:00:33:36:A0:28:6E:2F:A9:84:F2:74
X509v3 Authority Key Identifier:
keyid:78:92:66:9F:81:9E:BD:8D:D2:EB:BA:93:F2:DD:2D:3E:1A:27:C2:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJJmn4GevY3S67qT8t0tPhonwjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/ZUR3BAP_7QG_ADM2oChuL6mE8nQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.183.0/24
Signature Algorithm: sha256WithRSAEncryption
32:9e:56:a7:3e:84:73:06:5e:c8:f8:46:57:b7:41:bd:1c:59:
8d:d0:01:28:ba:05:67:85:2e:1e:b2:46:c5:6a:9c:e1:4a:29:
f6:6c:f0:5a:ae:b6:23:bf:9b:8f:24:20:01:53:c4:f6:f3:4b:
5a:91:4e:ba:a7:8c:89:97:85:0e:25:bf:48:99:d3:ba:e6:b2:
e0:3c:59:04:93:b6:68:ca:17:f3:1f:8c:16:b7:9c:5e:23:55:
10:73:e4:8f:15:12:28:f3:a8:70:82:a9:db:96:ea:91:22:60:
9b:e1:a0:05:b8:bf:2c:a4:3b:76:be:af:4f:c6:cc:5b:2d:97:
1a:ff:30:cc:03:ed:b3:b0:33:c3:50:8e:a7:8d:3d:f2:e4:5d:
6b:f2:27:7b:48:a2:b9:6d:0a:c0:d9:0b:71:54:23:7f:ff:9b:
9d:f8:16:46:eb:1b:e1:c3:a1:69:2d:fa:e3:51:2a:3c:78:85:
d6:39:a3:6e:2d:66:12:78:7e:7a:96:51:de:d2:13:c0:b6:c1:
7d:71:e3:07:c7:16:6d:73:b9:4d:37:31:31:8a:90:54:e4:30:
39:fd:83:d7:74:71:3e:9c:95:6d:12:8d:b6:5d:c7:46:e1:9b:
99:54:bb:41:fd:07:24:a4:14:66:89:68:4c:d9:bd:20:22:67:
8f:c7:b1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:16:25 2025 by rpki-client