Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/zw3ZQoqzEpP0EhpQ36h6FYlUI5I.roa
File: zw3ZQoqzEpP0EhpQ36h6FYlUI5I.roa (raw, json)
Hash identifier: Jk/Vq/HavBcVMjBR4tqdS47N90EhCkZ4tAXukBLV+pA=
Subject key identifier: CF:0D:D9:42:8A:B3:12:93:F4:12:1A:50:DF:A8:7A:15:89:54:23:92
Certificate issuer: /CN=3e34b02edc7c2878f94c5104cafa8978afb6752d
Certificate serial: 01995CE1289EEA666296F6A0602AD3F4EFE7
Authority key identifier: 3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/zw3ZQoqzEpP0EhpQ36h6FYlUI5I.roa
Signing time: Thu 18 Sep 2025 12:51:23 +0000
ROA not before: Thu 18 Sep 2025 12:51:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30885
IP address blocks: 91.212.110.0/24 maxlen: 24
178.216.11.0/24 maxlen: 24
194.102.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5c:e1:28:9e:ea:66:62:96:f6:a0:60:2a:d3:f4:ef:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e34b02edc7c2878f94c5104cafa8978afb6752d
Validity
Not Before: Sep 18 12:51:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf0dd9428ab31293f4121a50dfa87a1589542392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:15:34:47:26:e0:13:85:4e:f5:da:c4:e1:24:
2b:f4:dd:e7:3f:2b:c9:80:a3:0b:bb:08:cf:c6:94:
68:51:b8:08:c0:c7:ff:1a:f0:74:f3:91:50:81:df:
20:5c:c1:4d:50:37:a7:bf:3f:50:c0:9e:17:84:73:
63:5b:51:90:88:9b:17:59:6f:63:34:28:78:c5:f7:
6a:ef:77:0a:66:f7:35:18:de:f3:72:80:a4:93:f9:
98:d9:e1:f3:ba:1b:2b:4e:11:95:b4:87:9e:ab:03:
8c:b3:9c:bf:49:20:69:b5:c5:27:8b:df:91:de:79:
2f:79:6d:f4:8f:2e:67:2b:f4:a1:1b:b6:1e:33:cf:
6a:41:9c:22:86:cd:c9:00:b6:7f:4d:05:e6:a0:7a:
ce:6f:71:09:13:69:88:60:62:4b:cd:b7:99:4e:ca:
59:50:43:fc:58:a3:d6:f7:d7:03:7a:96:fb:df:18:
54:07:71:18:bc:ff:d6:0d:90:21:87:ec:b5:18:bd:
14:af:29:fb:30:f5:97:fa:c3:94:44:f3:38:c1:1d:
c3:2c:2e:2e:04:a6:5e:69:da:0d:f6:9f:69:c1:d3:
bc:a3:2c:88:56:0b:0d:a9:14:9e:66:40:c4:b6:b2:
ec:00:1d:bd:a1:34:69:9a:98:7a:db:90:31:8a:30:
fe:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:0D:D9:42:8A:B3:12:93:F4:12:1A:50:DF:A8:7A:15:89:54:23:92
X509v3 Authority Key Identifier:
keyid:3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/zw3ZQoqzEpP0EhpQ36h6FYlUI5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.110.0/24
178.216.11.0/24
194.102.208.0/24
Signature Algorithm: sha256WithRSAEncryption
02:22:88:f1:41:cb:7e:24:49:c7:6e:12:c8:f3:14:e2:06:6d:
a4:39:1d:fb:c4:21:54:a7:db:bd:bc:2b:e4:36:c7:13:82:76:
f6:14:fe:69:91:24:61:ca:ae:36:97:d0:03:cb:44:16:1c:47:
3d:6b:cd:fe:05:4c:7a:fb:29:38:bf:5d:15:9b:1a:70:08:ca:
a8:28:ff:99:33:b1:bc:e1:84:4f:09:6e:8f:ab:25:0a:90:21:
ce:af:a5:ce:f4:2d:6c:a2:8d:1d:40:a9:61:36:fe:b2:b6:a4:
46:74:61:0b:38:0c:87:0b:8f:c3:27:78:38:e0:c3:42:9b:fa:
4c:22:ea:99:6f:5e:99:34:98:4c:63:43:88:35:c2:03:4c:d1:
1c:41:0b:50:da:23:45:28:91:c3:46:11:5f:66:6e:85:8a:ab:
93:7e:9d:05:0b:25:df:81:7e:e5:81:a0:d6:7d:20:ee:8f:f5:
1d:2d:3a:67:c3:ab:db:30:62:b0:55:03:a6:b8:e7:49:cb:e9:
07:55:b0:c8:32:25:51:35:b2:12:09:6f:6f:70:d4:a2:cb:59:
3a:12:35:f7:10:e9:7b:38:60:47:29:a8:ad:6e:de:35:88:d3:
97:b1:bf:7f:5c:6a:e4:cb:25:1b:92:c5:2e:65:14:8f:e6:e0:
be:97:e0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:41:10 2025 by rpki-client