Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/zSdg1TL_rZPblgoER4Ka7YZIz5Y.roa
File: zSdg1TL_rZPblgoER4Ka7YZIz5Y.roa (raw, json)
Hash identifier: 5MM1ssf5XEcNEojmTdbrlA8dg78ZH7/NCDsRblaf7f8=
Subject key identifier: CD:27:60:D5:32:FF:AD:93:DB:96:0A:04:47:82:9A:ED:86:48:CF:96
Certificate issuer: /CN=04eee3f09abeb6a434e9905cbc0b000044e79de7
Certificate serial: 01989FDF8D397699A1AB8F02096C39467545
Authority key identifier: 04:EE:E3:F0:9A:BE:B6:A4:34:E9:90:5C:BC:0B:00:00:44:E7:9D:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BO7j8Jq-tqQ06ZBcvAsAAETnnec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/zSdg1TL_rZPblgoER4Ka7YZIz5Y.roa
Signing time: Tue 12 Aug 2025 20:01:24 +0000
ROA not before: Tue 12 Aug 2025 20:01:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21179
IP address blocks: 193.109.130.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft
rsync://rpki.ripe.net/repository/DEFAULT/BO7j8Jq-tqQ06ZBcvAsAAETnnec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:df:8d:39:76:99:a1:ab:8f:02:09:6c:39:46:75:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04eee3f09abeb6a434e9905cbc0b000044e79de7
Validity
Not Before: Aug 12 20:01:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd2760d532ffad93db960a0447829aed8648cf96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b6:66:fb:bd:2f:7f:b7:a8:3c:fe:9b:7a:37:
8e:1b:67:f9:1f:77:bc:ac:48:f2:f3:53:b8:e9:a5:
0e:49:50:2e:29:9e:f4:22:8e:60:91:d2:85:6c:9a:
0f:1b:ac:6b:ec:92:65:41:07:37:42:1b:25:02:d4:
6c:d6:46:2a:5c:e4:4d:40:11:2e:73:b8:2f:1a:c8:
8c:d6:47:d2:40:55:44:d0:46:5a:62:2b:c6:f7:46:
b1:af:83:44:a1:ed:31:7d:4b:af:35:f9:c7:f8:44:
d0:88:fb:df:86:72:61:78:c1:37:54:69:fb:ff:ed:
39:de:12:1a:1c:8c:9d:ce:3f:73:89:87:8d:ee:eb:
02:b8:69:c3:2e:fa:e5:de:04:11:02:88:3f:92:77:
a9:b3:a9:37:f6:f6:a0:13:93:1f:97:22:03:68:5f:
be:a9:0c:fa:c4:5b:85:eb:ec:c7:88:c3:e4:60:b1:
d0:f7:22:c9:29:3b:db:c6:af:eb:c6:49:37:eb:4c:
ce:4b:68:a8:54:1b:fb:57:6e:06:2b:ea:a2:8a:5f:
81:24:1d:10:bd:d1:17:85:11:14:a9:3c:d4:f4:52:
7a:e2:5e:1b:c8:90:d0:c0:d8:c3:49:51:a1:1b:cd:
83:44:19:69:8c:b3:97:78:5b:c8:b2:e5:5b:e7:39:
3b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:27:60:D5:32:FF:AD:93:DB:96:0A:04:47:82:9A:ED:86:48:CF:96
X509v3 Authority Key Identifier:
keyid:04:EE:E3:F0:9A:BE:B6:A4:34:E9:90:5C:BC:0B:00:00:44:E7:9D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BO7j8Jq-tqQ06ZBcvAsAAETnnec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/zSdg1TL_rZPblgoER4Ka7YZIz5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.130.0/23
Signature Algorithm: sha256WithRSAEncryption
96:36:0d:c5:28:26:9e:1d:b7:f3:54:81:df:92:a0:7b:5c:05:
4e:ab:4c:60:0a:42:73:47:52:69:59:65:0c:36:81:48:aa:bc:
76:ea:7c:6a:7d:e1:62:f8:a4:0d:ab:fa:7a:c0:eb:05:17:e8:
9b:11:60:cb:31:19:66:cf:be:09:ca:7d:e7:62:6e:10:07:d0:
e9:80:8c:6f:e6:08:a3:00:9e:a1:1f:e0:7d:8c:d9:08:24:03:
f4:e2:a7:1b:1c:f5:b0:31:0b:7e:36:f1:00:a3:d8:75:a5:48:
d6:45:d7:b3:d3:11:33:fa:72:4a:81:77:60:49:1e:de:ca:7b:
f4:e7:00:67:03:c4:92:31:0b:8b:7a:63:4b:ad:01:43:a8:ef:
b2:35:f3:f1:e8:38:6e:96:ec:ce:19:d7:9a:dd:2e:2b:4e:b2:
9e:c9:84:1b:9b:c1:ee:21:40:0b:e2:9e:29:cc:0c:22:10:c1:
a2:de:1a:c1:c2:e6:eb:24:cd:dc:6c:f0:e6:5e:e3:05:b3:90:
e8:2a:8c:34:dd:7b:84:ad:f1:14:cf:4d:f0:e5:96:fd:25:45:
3f:fa:4b:c7:d0:91:f0:0c:f6:58:0a:f2:74:3e:32:aa:23:84:
14:14:03:30:fa:33:6e:d1:53:b2:f5:0e:d0:16:77:17:28:98:
11:ff:23:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:43:48 2025 by rpki-client