Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/zsAzizQNzq-nU7DBqjyFfFYYJlY.roa
File: zsAzizQNzq-nU7DBqjyFfFYYJlY.roa (raw, json)
Hash identifier: lPKM4UQ81kuyk83v9B3QSeG105m6Qhy3mK0i/rPSzW8=
Subject key identifier: CE:C0:33:8B:34:0D:CE:AF:A7:53:B0:C1:AA:3C:85:7C:56:18:26:56
Certificate issuer: /CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76
Certificate serial: 019999B6DF2117671A14D78AE201F8D41EC5
Authority key identifier: 46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/zsAzizQNzq-nU7DBqjyFfFYYJlY.roa
Signing time: Tue 30 Sep 2025 08:22:02 +0000
ROA not before: Tue 30 Sep 2025 08:22:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213105
IP address blocks: 90.156.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:99:b6:df:21:17:67:1a:14:d7:8a:e2:01:f8:d4:1e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76
Validity
Not Before: Sep 30 08:22:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cec0338b340dceafa753b0c1aa3c857c56182656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ba:3f:be:1b:13:66:6f:4e:13:46:d8:f6:d2:
dd:0c:6d:0a:6c:17:6c:81:8b:b5:bf:dc:b5:91:ad:
52:33:c9:1e:40:10:bb:f2:e4:3a:dd:38:e2:f1:31:
28:c6:2f:12:59:4f:ef:98:01:e7:e3:85:a2:d3:00:
73:54:79:d0:92:e5:9d:5b:06:af:3a:b1:3d:85:ef:
fc:c7:e1:a8:02:c5:93:4b:ad:b5:db:91:7a:75:62:
61:91:8b:25:b8:ea:d1:57:73:33:41:0e:0f:2c:03:
89:86:d6:fc:ff:e4:1d:00:61:2f:d6:4a:a9:b5:5b:
7d:bd:c5:a8:47:c1:18:57:44:e8:59:31:98:43:3d:
84:62:a9:dd:95:44:f7:c2:3e:2f:1e:d4:b5:67:72:
69:e3:02:9e:81:b6:15:9a:b0:fe:f9:30:c7:73:4e:
cb:7e:57:a4:56:96:5a:1a:1a:a2:f4:06:21:8a:72:
31:e8:ee:27:6a:b5:8f:64:0b:dc:6b:a4:65:43:f2:
c5:84:37:31:73:49:e9:4b:35:e4:04:ad:1f:27:5f:
6e:8e:93:65:2c:eb:8a:ca:05:95:6d:88:22:be:5d:
4a:e1:3e:3b:a2:0a:cb:c9:79:85:06:56:ad:ef:8c:
ac:19:48:08:14:01:a7:d4:14:ee:6e:f6:ea:40:1d:
67:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C0:33:8B:34:0D:CE:AF:A7:53:B0:C1:AA:3C:85:7C:56:18:26:56
X509v3 Authority Key Identifier:
keyid:46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/zsAzizQNzq-nU7DBqjyFfFYYJlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.156.246.0/24
Signature Algorithm: sha256WithRSAEncryption
79:e2:f4:6b:92:7d:34:85:3b:93:80:28:07:52:6f:d1:5b:d6:
d0:41:66:72:b2:82:ca:a7:b4:45:63:7c:98:4c:bb:0f:5d:54:
62:52:d7:d1:c1:ee:5d:1e:a4:86:bf:83:1b:fb:f1:73:ff:30:
2f:20:f9:15:0c:08:7d:01:9c:89:3c:18:d4:7f:02:7d:02:15:
38:be:32:38:0f:fb:f5:d1:42:b0:60:21:66:a9:2b:36:82:dc:
03:77:4a:7c:97:b8:07:35:f9:3a:9b:e5:7e:91:23:f1:6d:a2:
6b:a2:6f:ff:9e:69:18:b2:26:59:f0:32:6c:ce:05:bd:82:d1:
59:fd:a3:cf:99:59:77:bd:ec:26:6a:6d:71:8f:fb:4c:cf:2b:
f2:74:51:c5:13:1a:76:38:07:79:f0:27:b9:c5:b6:4a:23:b2:
8a:4d:b3:b9:c9:c9:2e:ea:6a:bd:12:31:73:74:c8:6a:d4:21:
c3:6f:8d:c1:a5:8a:e1:12:a7:5b:17:95:ea:d7:d2:1e:97:6f:
d3:41:56:b1:9d:21:e5:3b:59:92:52:7d:84:33:e7:43:6e:50:
85:c5:fe:55:6b:19:5c:2e:66:30:de:b9:86:66:dd:62:14:04:
5f:eb:33:b4:be:cc:02:06:0e:83:a9:5f:26:0a:e0:92:a0:54:
b0:64:20:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:35:56 2025 by rpki-client