Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZGYU1AgWvl0s5AsJUF6OfrTa_4w.roa
File: ZGYU1AgWvl0s5AsJUF6OfrTa_4w.roa (raw, json)
Hash identifier: VcarqlQubwVe9OZ83eXRemDyoSaxOGjQ14wjwSX/yMY=
Subject key identifier: 64:66:14:D4:08:16:BE:5D:2C:E4:0B:09:50:5E:8E:7E:B4:DA:FF:8C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0199A49095C85CDA65728C45C040E877310F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZGYU1AgWvl0s5AsJUF6OfrTa_4w.roa
Signing time: Thu 02 Oct 2025 10:56:02 +0000
ROA not before: Thu 02 Oct 2025 10:56:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213644
IP address blocks: 217.60.236.0/24 maxlen: 24
217.60.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a4:90:95:c8:5c:da:65:72:8c:45:c0:40:e8:77:31:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 2 10:56:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=646614d40816be5d2ce40b09505e8e7eb4daff8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5f:45:bc:81:f9:af:fb:24:72:9e:a8:78:28:
1f:fe:a7:61:2a:c2:ca:3e:8e:55:60:70:fe:7d:fe:
85:71:d3:ea:fe:9a:81:a5:55:fe:37:01:40:bd:72:
32:79:08:6e:f9:4f:10:2e:e5:5f:76:87:77:ab:4a:
80:28:9c:84:d4:ca:6c:63:c8:72:08:a3:3f:91:6b:
5e:c0:85:f2:ec:c1:d0:95:d1:02:bc:45:ce:b8:ff:
60:f7:9b:d5:3f:b7:bb:2e:ef:25:ad:db:49:ae:c4:
93:d3:6a:a8:09:aa:ca:68:b5:b3:7f:a2:71:93:8e:
90:99:be:60:22:a9:5e:6d:db:43:ef:c0:9a:07:b5:
4b:0f:16:60:2e:18:75:72:1e:97:a0:cb:75:34:74:
ae:b8:93:d2:d0:50:07:1a:c4:72:c5:47:35:cd:8b:
5f:ba:e3:53:cc:c7:87:b1:c9:dd:c1:be:a8:33:b3:
eb:62:27:1b:02:b8:49:5f:67:76:d2:8f:55:d8:ab:
1d:fe:e2:b4:29:a2:d4:ff:e1:a3:5e:45:8b:be:93:
2d:2e:39:47:6f:dc:fd:d1:63:65:9b:25:0d:2f:d8:
26:34:31:4d:d3:c1:23:1b:be:3b:9a:e0:13:38:7e:
65:e1:48:f7:bb:c7:92:a7:9c:5b:d2:2e:19:3f:f8:
37:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:66:14:D4:08:16:BE:5D:2C:E4:0B:09:50:5E:8E:7E:B4:DA:FF:8C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZGYU1AgWvl0s5AsJUF6OfrTa_4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.236.0/23
Signature Algorithm: sha256WithRSAEncryption
ba:83:65:be:07:ef:3e:14:2a:ab:3c:64:fc:95:dc:e7:8b:a0:
b3:12:a2:d6:20:09:4b:04:5a:5e:b2:a8:ae:c2:a3:a2:59:69:
c0:b4:17:8e:1d:72:5d:2b:dd:04:ba:d5:5b:80:a4:b1:a6:d2:
52:e3:1e:98:28:cb:00:01:2e:7e:b8:28:ee:48:01:9f:1b:a6:
72:b6:df:cf:65:6d:e4:c2:5c:ed:e8:7f:52:4d:42:56:68:bd:
d7:08:10:c5:2a:a2:fa:6e:45:fa:2f:ed:8e:46:df:bf:aa:1a:
95:c4:19:ec:d2:09:a0:47:f6:fc:38:f4:46:ac:a3:44:37:4a:
ab:9c:a8:3d:6f:56:05:d0:9a:4e:e9:f3:98:5c:ed:29:50:f1:
f9:33:6a:db:25:88:b6:c0:b0:ef:48:78:3a:90:00:ac:2e:6d:
ae:64:b1:91:1d:aa:df:e8:e9:36:18:ea:5b:4a:3d:0a:db:bb:
11:37:05:6b:ee:27:fe:84:4e:4c:e6:92:d1:73:ab:95:b3:2e:
56:a5:bd:1f:82:7c:fb:c5:58:6b:97:ad:ea:2e:7d:e1:d1:53:
c7:f5:6c:13:93:3b:18:33:c8:32:ec:4f:d7:27:6a:21:33:59:
17:a9:be:be:ea:18:31:ca:9d:f9:62:e4:c2:b3:0e:ec:18:4f:
c6:1e:07:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:50:56 2025 by rpki-client