Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/Z8zKwSwU-_AnJQp6zP0kmhvngxk.roa
File: Z8zKwSwU-_AnJQp6zP0kmhvngxk.roa (raw, json)
Hash identifier: DKK2FLL+hiqeGN3n2BFldkSB9QGntlwHo6IOei4/Bt0=
Subject key identifier: 67:CC:CA:C1:2C:14:FB:F0:27:25:0A:7A:CC:FD:24:9A:1B:E7:83:19
Certificate issuer: /CN=b453a86fd3081b803edc10d23bbeda91d7932025
Certificate serial: 01993946F4B1AB71C08660586993348E2699
Authority key identifier: B4:53:A8:6F:D3:08:1B:80:3E:DC:10:D2:3B:BE:DA:91:D7:93:20:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFOob9MIG4A-3BDSO77akdeTICU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/Z8zKwSwU-_AnJQp6zP0kmhvngxk.roa
Signing time: Thu 11 Sep 2025 14:56:15 +0000
ROA not before: Thu 11 Sep 2025 14:56:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 680
IP address blocks: 193.22.32.0/20 maxlen: 23
193.22.48.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFOob9MIG4A-3BDSO77akdeTICU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:39:46:f4:b1:ab:71:c0:86:60:58:69:93:34:8e:26:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b453a86fd3081b803edc10d23bbeda91d7932025
Validity
Not Before: Sep 11 14:56:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67cccac12c14fbf027250a7accfd249a1be78319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:00:87:7c:82:46:bb:44:fd:2c:39:ba:25:11:
44:39:a2:75:8e:ca:db:96:c2:87:e7:cf:25:ce:b1:
92:eb:b4:f8:02:50:ab:c1:35:4b:07:e6:79:c3:37:
21:d2:d4:2a:ce:a3:37:d2:c9:d8:d1:19:69:93:07:
d6:b4:7f:e9:8d:60:16:28:39:7d:f2:a6:3b:01:ef:
32:a8:aa:c7:03:2b:e1:eb:a9:8f:10:ec:9c:31:ad:
52:dc:16:4a:fc:fc:1f:25:25:ad:eb:b4:aa:ae:2e:
21:48:60:5c:65:19:88:ee:e1:98:3d:fe:a8:9d:86:
95:a8:4d:d2:66:b1:b8:62:d1:b4:e4:66:46:8a:69:
03:3a:05:fd:d5:a0:23:80:6d:f0:d6:38:79:ab:43:
bb:58:b9:c9:b8:07:6a:6d:3d:1d:9a:0f:e3:df:3d:
f2:50:c1:76:c3:17:01:f3:33:f0:1a:6c:cc:55:04:
1a:6a:4b:e4:59:27:e4:e4:f0:ef:2d:a4:df:3b:cd:
64:c7:ad:56:c2:8d:bb:4e:91:bd:b1:0c:48:5c:5c:
a6:fb:bd:69:e5:7d:96:42:9c:2d:64:f1:60:ff:93:
26:83:c9:58:cb:96:fd:3c:4b:72:33:ad:66:e2:80:
4d:72:4e:c6:d6:15:0b:02:15:87:28:08:e1:d8:02:
0d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:CC:CA:C1:2C:14:FB:F0:27:25:0A:7A:CC:FD:24:9A:1B:E7:83:19
X509v3 Authority Key Identifier:
keyid:B4:53:A8:6F:D3:08:1B:80:3E:DC:10:D2:3B:BE:DA:91:D7:93:20:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFOob9MIG4A-3BDSO77akdeTICU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/Z8zKwSwU-_AnJQp6zP0kmhvngxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.32.0-193.22.49.255
Signature Algorithm: sha256WithRSAEncryption
94:cc:6e:a1:d0:f6:02:d8:7e:ac:2d:f2:f9:45:73:3d:a3:17:
7c:8e:11:e8:a0:20:c3:e7:e1:c1:db:e9:ec:b8:34:e9:77:9a:
71:05:38:8a:f5:e6:5e:56:bc:bf:8b:4a:8c:d3:24:47:ad:50:
ed:4c:46:13:52:e0:a1:6c:5a:a7:55:fe:5e:a7:20:3f:09:0a:
fa:12:93:18:12:d1:20:c9:02:7d:ae:3d:73:0a:e5:2f:91:ed:
2c:79:a4:31:cd:92:fc:7d:31:9a:c5:1a:94:d6:88:d2:d3:87:
5e:24:88:10:e7:78:1a:89:42:df:18:d2:2b:f1:1d:b9:1f:b5:
8e:ae:53:68:1a:9f:49:f9:98:73:99:39:35:b8:42:a2:7d:a2:
79:52:a0:1f:3c:5f:2a:84:d2:81:3f:6f:b4:8c:90:17:42:a7:
4b:94:2e:45:0f:36:5e:46:4f:53:d6:a0:25:61:d1:4a:9d:fd:
c1:d8:b7:ba:96:c7:30:c0:fa:48:2c:93:b5:24:9d:a8:01:25:
68:81:55:37:04:74:8d:1c:2f:fe:ea:a2:ff:0f:b6:29:7b:e1:
c0:d4:c4:2e:49:58:42:a8:a3:de:f8:d6:b7:31:de:60:2d:0c:
30:07:f5:24:83:91:6c:af:66:6e:6a:df:7d:86:c6:c2:06:0f:
ab:82:21:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:25:15 2025 by rpki-client