Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/ZQjPC2fpyT-Vvc_kqiwp7b7rczY.roa
File: ZQjPC2fpyT-Vvc_kqiwp7b7rczY.roa (raw, json)
Hash identifier: WGoaZKgovkzunqobaBY3s+Zo6C38U50g1kvmNlqSsZ0=
Subject key identifier: 65:08:CF:0B:67:E9:C9:3F:95:BD:CF:E4:AA:2C:29:ED:BE:EB:73:36
Certificate issuer: /CN=c79d13664a379d8b5dadf763dd04f5115e023184
Certificate serial: 0199C4ECCFC3A05EF4AFFE2F67EA889FFF1A
Authority key identifier: C7:9D:13:66:4A:37:9D:8B:5D:AD:F7:63:DD:04:F5:11:5E:02:31:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/ZQjPC2fpyT-Vvc_kqiwp7b7rczY.roa
Signing time: Wed 08 Oct 2025 17:44:37 +0000
ROA not before: Wed 08 Oct 2025 17:44:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198037
IP address blocks: 2a13:7dc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:ec:cf:c3:a0:5e:f4:af:fe:2f:67:ea:88:9f:ff:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c79d13664a379d8b5dadf763dd04f5115e023184
Validity
Not Before: Oct 8 17:44:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6508cf0b67e9c93f95bdcfe4aa2c29edbeeb7336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:37:d6:4e:f1:7f:f8:ba:67:ac:a6:21:f6:68:
7a:a8:c1:9d:79:82:1a:05:8a:d7:b8:7f:e4:72:1c:
71:45:a0:68:55:06:b7:78:40:fd:b2:d3:2f:44:1d:
57:9f:ad:c8:fb:3c:b3:57:2b:ea:71:bf:66:75:16:
ea:5f:b3:e9:02:b0:23:b1:65:f6:db:c7:34:9f:cf:
43:1b:fe:a9:f9:13:cd:db:3d:af:6a:69:70:fe:fb:
8a:5b:1c:6b:27:b6:b4:58:62:47:ba:04:95:9f:f0:
79:f9:0b:2e:af:88:52:00:ff:16:12:80:06:0f:5f:
1e:b1:45:60:ba:0d:d6:7e:7b:59:a1:b5:fd:4a:15:
43:a3:7e:7c:52:d6:eb:84:6b:22:ce:75:76:f1:53:
d1:83:d3:ce:57:ce:8a:ef:6a:b6:de:bd:33:c8:24:
aa:50:7b:b0:3d:a0:49:3b:fe:1c:a1:f8:e5:e8:df:
e9:27:d7:12:39:f5:ce:fe:3d:f5:ec:0b:6f:25:98:
3d:91:f7:f2:93:ce:81:fb:15:50:9f:4e:87:0a:47:
0f:2a:e5:07:a9:69:dd:80:67:02:f4:a9:aa:62:9b:
2c:92:ba:39:c1:64:ff:86:b9:9f:02:bf:92:be:08:
80:40:f9:a5:5b:ee:19:15:11:40:e8:ff:63:e5:6e:
50:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:08:CF:0B:67:E9:C9:3F:95:BD:CF:E4:AA:2C:29:ED:BE:EB:73:36
X509v3 Authority Key Identifier:
keyid:C7:9D:13:66:4A:37:9D:8B:5D:AD:F7:63:DD:04:F5:11:5E:02:31:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/ZQjPC2fpyT-Vvc_kqiwp7b7rczY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:7dc0::/29
Signature Algorithm: sha256WithRSAEncryption
a4:c4:c4:31:0a:f6:df:45:7c:e6:bc:92:66:6c:a6:35:bd:03:
3d:c5:e9:f4:38:2e:6c:ff:e5:72:66:e7:79:a7:fc:10:74:94:
55:06:1a:8b:5a:e6:9c:2a:e2:8c:40:10:91:fc:e9:3b:c5:c2:
af:cf:c9:2e:5e:a0:52:fd:e5:7a:e3:34:96:a6:29:db:00:3a:
2d:15:5a:f1:9b:c2:5a:de:de:74:5d:b1:36:e4:6c:78:d0:0c:
cf:82:02:c7:dc:37:5f:8d:c9:5b:bf:3a:30:e3:08:90:5f:39:
f1:0b:83:8a:df:6b:4e:3c:d5:b5:20:60:3a:4f:4e:23:e7:46:
9e:ce:33:10:07:3c:c7:e8:96:c4:a7:f6:02:dd:41:1c:7e:1b:
f0:6c:78:fc:10:51:f7:01:13:5d:8b:f8:5b:a5:9c:48:14:08:
06:da:e3:d7:b3:e7:fa:64:bd:cd:e3:ec:bb:e4:5f:af:e7:a9:
f3:78:d2:85:f8:cd:a0:fd:dd:6c:01:a9:0d:83:b1:10:4a:29:
33:24:03:cb:c2:d5:db:f7:4e:17:fd:fe:11:21:db:42:a8:37:
b9:64:ac:96:18:09:93:c3:9c:bc:fb:50:d4:8e:d4:1d:40:32:
a5:b0:b1:f6:68:95:86:d8:77:95:77:b8:88:ef:1d:63:26:93:
9f:8e:cd:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:09:06 2025 by rpki-client