Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/ZPm62e8uWHs6KBXJ7NoF7XOySMc.roa
File: ZPm62e8uWHs6KBXJ7NoF7XOySMc.roa (raw, json)
Hash identifier: 30wlsbHL60VdCwwpHaURDp5qoaEvw/fBx8WqJfwV9hQ=
Subject key identifier: 64:F9:BA:D9:EF:2E:58:7B:3A:28:15:C9:EC:DA:05:ED:73:B2:48:C7
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 0198AA01D8E025AAC8390DFAA787650CFBEA
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/ZPm62e8uWHs6KBXJ7NoF7XOySMc.roa
Signing time: Thu 14 Aug 2025 19:15:04 +0000
ROA not before: Thu 14 Aug 2025 19:15:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 89.187.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:aa:01:d8:e0:25:aa:c8:39:0d:fa:a7:87:65:0c:fb:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: Aug 14 19:15:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64f9bad9ef2e587b3a2815c9ecda05ed73b248c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:66:0d:36:b2:3e:29:3e:9f:ed:e6:e3:de:58:
20:25:c8:be:65:e9:ff:07:5c:7d:b7:16:f5:b1:ac:
8c:38:bb:f4:ae:92:bd:24:9b:f3:c2:cf:47:94:1c:
3a:5b:b3:e6:ef:19:43:25:40:3f:8c:5e:b9:18:5e:
80:af:33:de:13:59:61:ee:d3:00:43:0b:26:57:28:
32:6e:cb:fd:5a:61:e8:be:33:30:04:5d:9e:a1:b9:
6b:1a:e8:c2:21:e6:ac:e0:19:31:f3:00:11:69:9f:
07:52:9e:4c:4a:59:80:a6:e0:1a:77:95:5a:98:6b:
4a:20:a0:df:9b:90:28:df:a9:2d:22:e1:f1:d0:ab:
df:9c:83:5e:30:9f:fe:ce:d9:4e:e0:95:84:f7:1c:
1b:5c:a7:18:cf:e4:8e:c9:08:74:20:9d:d7:f8:7a:
84:ad:bb:b4:ce:38:fd:64:c2:24:a3:c3:48:ba:da:
31:2c:b4:16:ec:e9:c7:24:d5:ae:25:17:50:e5:d2:
c6:82:28:0e:52:21:fe:2a:db:e6:5f:4f:f5:5a:57:
54:e9:bf:b4:fd:f9:7b:cc:74:9d:d4:2b:7f:e3:8a:
f1:53:0c:a8:bf:10:de:b8:ad:4d:b2:47:b1:f5:89:
24:07:04:13:d3:f5:6f:c2:b2:53:26:9d:02:60:ff:
06:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F9:BA:D9:EF:2E:58:7B:3A:28:15:C9:EC:DA:05:ED:73:B2:48:C7
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/ZPm62e8uWHs6KBXJ7NoF7XOySMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.21.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:fd:bd:58:65:7a:9a:0b:ad:07:39:21:6d:40:dd:c4:fe:6b:
37:55:09:73:1e:84:10:7a:bc:41:b4:2a:da:4e:07:51:5a:00:
6a:72:57:a6:17:5b:7d:50:1f:a5:50:39:15:69:1b:da:b1:da:
e8:d2:b6:5c:6c:fb:7b:21:6d:1f:2f:7e:29:6b:29:ed:fc:de:
84:41:6f:ec:39:ec:c1:a5:3d:30:33:07:ba:b5:44:11:83:ef:
5b:69:ba:2f:18:b7:20:bb:f6:23:f1:c4:45:6e:44:3a:2f:5c:
eb:db:db:df:66:ee:23:52:40:f0:ed:02:ee:94:01:58:d6:50:
ef:df:8c:81:08:6d:33:da:3d:12:65:dc:8b:62:e2:de:58:f2:
70:03:a2:26:57:7c:14:de:f2:81:a3:6a:56:79:89:93:74:03:
42:e5:c5:1a:c6:94:1b:0d:d0:20:43:23:e5:33:f0:51:33:84:
d4:ab:80:5f:e9:cb:cd:8c:f7:61:98:e6:55:c0:3d:5e:18:5a:
86:c5:39:bd:5d:33:a9:bd:e4:60:2f:2a:c1:af:46:73:bb:f9:
d5:14:b8:69:7b:1b:55:21:88:62:ee:86:86:91:3f:8b:47:de:
d5:cc:82:05:92:d8:ac:96:a0:be:9e:1f:83:66:39:61:59:bf:
92:16:e4:77
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZiqAdjgJarIOQ36p4dlDPvqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MWVjN2NjZjBmYTc2MWVkOTliYzVhN2E5ZWMwZDBlZWIw
YmYwNTUwHhcNMjUwODE0MTkxNTA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NGY5YmFkOWVmMmU1ODdiM2EyODE1YzllY2RhMDVlZDczYjI0OGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGYNNrI+KT6f7ebj3lggJci+Zen/
B1x9txb1sayMOLv0rpK9JJvzws9HlBw6W7Pm7xlDJUA/jF65GF6ArzPeE1lh7tMA
QwsmVygybsv9WmHovjMwBF2eoblrGujCIeas4Bkx8wARaZ8HUp5MSlmApuAad5Va
mGtKIKDfm5Ao36ktIuHx0KvfnINeMJ/+ztlO4JWE9xwbXKcYz+SOyQh0IJ3X+HqE
rbu0zjj9ZMIko8NIutoxLLQW7OnHJNWuJRdQ5dLGgigOUiH+KtvmX0/1WldU6b+0
/fl7zHSd1Ct/44rxUwyovxDeuK1Nskex9YkkBwQT0/VvwrJTJp0CYP8GCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGT5utnvLlh7OigVyezaBe1zskjHMB8GA1UdIwQY
MBaAFAkex8zw+nYe2ZvFp6nsDQ7rC/BVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQt
NDVjZmM4NTdkZGRkLzEvWlBtNjJlOHVXSHM2S0JYSjdOb0Y3WE95U01jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQtNDVjZmM4NTdkZGRk
LzEvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWbsVMA0G
CSqGSIb3DQEBCwUAA4IBAQC7/b1YZXqaC60HOSFtQN3E/ms3VQlzHoQQerxBtCra
TgdRWgBqclemF1t9UB+lUDkVaRvasdro0rZcbPt7IW0fL34paynt/N6EQW/sOezB
pT0wMwe6tUQRg+9babovGLcgu/Yj8cRFbkQ6L1zr29vfZu4jUkDw7QLulAFY1lDv
34yBCG0z2j0SZdyLYuLeWPJwA6ImV3wU3vKBo2pWeYmTdANC5cUaxpQbDdAgQyPl
M/BRM4TUq4Bf6cvNjPdhmOZVwD1eGFqGxTm9XTOpveRgLyrBr0Zzu/nVFLhpextV
IYhi7oaGkT+LR97VzIIFktislqC+nh+DZjlhWb+SFuR3
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:52:58 2025 by rpki-client