Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/ZdkeFapLB0pE43XGcxXzUYNmBic.roa
File: ZdkeFapLB0pE43XGcxXzUYNmBic.roa (raw, json)
Hash identifier: 23eZYQkUReYe43mS88wzW1NrxauMIJmVLoWsRcooMao=
Subject key identifier: 65:D9:1E:15:AA:4B:07:4A:44:E3:75:C6:73:15:F3:51:83:66:06:27
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 019976C1EA1633B378198B96ADEA7B8CC3C5
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/ZdkeFapLB0pE43XGcxXzUYNmBic.roa
Signing time: Tue 23 Sep 2025 13:27:23 +0000
ROA not before: Tue 23 Sep 2025 13:27:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21840
IP address blocks: 62.72.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Oct 2025 21:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:76:c1:ea:16:33:b3:78:19:8b:96:ad:ea:7b:8c:c3:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Sep 23 13:27:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65d91e15aa4b074a44e375c67315f35183660627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9a:57:56:a9:7b:d4:a6:5f:65:e6:c4:13:93:
3a:6d:5f:79:29:c3:9b:99:2b:39:53:b6:21:a4:20:
17:db:04:bf:a9:6a:b0:65:c6:53:9a:9f:4b:68:89:
a3:4d:c2:45:d2:c0:23:70:21:5e:fc:77:f6:82:b7:
79:d7:a7:60:52:5a:9c:da:19:60:b0:fa:d0:2d:53:
1f:65:9e:2c:8e:f6:50:b5:bc:fa:b3:81:fa:31:15:
e4:ac:69:1e:10:30:3a:44:96:21:09:9d:f6:7d:b9:
90:67:ff:ef:fb:f3:4d:a0:99:e3:51:ad:f7:50:47:
5d:ef:0c:44:e6:07:da:13:d5:33:92:8a:66:f4:86:
7f:6e:72:b0:21:30:c1:44:8b:69:17:30:00:de:7b:
1f:1f:a9:de:31:fe:fb:2e:b4:4d:77:00:62:53:80:
1e:e0:7d:b1:00:65:ff:cb:d7:05:00:45:b9:d9:fe:
81:79:a6:17:b6:d3:0f:5f:cd:15:47:02:a7:71:f6:
4e:6f:13:18:93:5a:ab:06:7d:77:24:11:ff:1e:7c:
25:1d:02:d8:17:41:72:60:ee:82:a4:6c:29:0a:06:
d6:29:13:0b:24:8e:33:62:e8:fc:0b:c4:7f:6f:95:
65:2b:cd:03:ee:cc:b8:05:06:98:cc:3b:1b:89:c4:
d3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D9:1E:15:AA:4B:07:4A:44:E3:75:C6:73:15:F3:51:83:66:06:27
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/ZdkeFapLB0pE43XGcxXzUYNmBic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.168.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:2a:1d:04:a2:41:35:4d:47:ca:75:b3:19:22:09:ec:25:d6:
36:3c:bd:87:d4:43:2b:9b:8c:f2:9e:4b:43:6c:a4:90:e5:ab:
e5:b8:58:82:88:77:7f:db:ed:85:2c:53:b7:ab:98:dc:95:e0:
71:1f:cd:8c:cf:c4:ac:ec:cd:9f:49:7f:86:dd:ff:b7:33:a5:
7c:37:3c:05:70:65:b4:ba:c9:ce:00:78:d3:f0:ae:d6:88:3e:
91:9f:11:74:cd:4c:28:0a:bf:a0:70:5f:ae:fa:1f:7c:f4:23:
3c:68:72:2a:fe:f8:39:d3:c2:f2:9d:b6:84:e8:59:c7:95:cf:
0b:3d:c3:50:19:56:04:1a:b5:06:34:66:b4:5c:99:86:cd:70:
35:84:87:ab:79:7a:e9:97:7e:be:85:d3:9b:03:14:c7:77:56:
6e:95:79:ea:26:2d:ba:e5:32:25:04:e6:42:e1:16:09:8e:3d:
17:f1:da:a7:1c:db:80:cf:9f:e1:4e:42:67:8b:a6:d0:c4:35:
f7:3f:20:67:5e:23:c3:68:af:ab:93:0f:a9:bd:d3:fe:e0:39:
df:e0:6f:3d:f4:91:97:df:63:ac:c8:3b:44:78:0f:f1:60:d5:
04:6a:14:82:17:81:68:79:15:c9:72:bf:7c:b4:bf:33:87:ff:
e2:7e:11:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 05:05:38 2025 by rpki-client