Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/z4-0mMmoIyejZQvLscU0F3zOajE.roa
File: z4-0mMmoIyejZQvLscU0F3zOajE.roa (raw, json)
Hash identifier: vANNj2jxJfRqckJm7O1qZBEwtb2B5XjYC24oRQYqHmU=
Subject key identifier: CF:8F:B4:98:C9:A8:23:27:A3:65:0B:CB:B1:C5:34:17:7C:CE:6A:31
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 0199FAD973B89C328E812FF14B1D8879E268
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/z4-0mMmoIyejZQvLscU0F3zOajE.roa
Signing time: Sun 19 Oct 2025 05:02:58 +0000
ROA not before: Sun 19 Oct 2025 05:02:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204104
IP address blocks: 5.57.33.0/24 maxlen: 24
37.32.43.0/24 maxlen: 24
185.212.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d9:73:b8:9c:32:8e:81:2f:f1:4b:1d:88:79:e2:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Oct 19 05:02:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf8fb498c9a82327a3650bcbb1c534177cce6a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:58:33:11:23:c0:d6:f4:84:2c:b3:1d:5a:ad:
ae:05:31:90:cf:97:f8:32:c6:7c:6e:ed:a1:30:bf:
96:e8:dd:d4:1e:bd:ae:2f:07:ce:8c:4a:2b:d9:ee:
de:3f:76:62:fc:42:5c:3a:01:28:14:d0:f8:ca:99:
f2:69:6b:bc:3f:76:1f:4d:40:d1:79:22:4f:cf:b3:
66:84:5d:34:64:e9:5c:92:80:cf:ab:99:3a:55:9a:
5f:8d:98:48:2a:36:d4:61:ab:f8:da:7f:c4:07:ab:
74:4e:d5:b4:60:5e:e4:80:bb:9c:44:25:9f:a1:d0:
47:29:98:41:17:4d:0a:4c:9d:19:59:87:9e:ff:64:
53:53:31:77:2d:bf:0e:76:ce:5d:b9:bf:87:51:e2:
32:55:dc:07:30:d3:5e:65:d9:30:c0:29:a2:fd:27:
e9:a2:e9:bd:0f:64:0c:9c:cf:8d:86:5c:68:f5:d1:
a5:4d:c3:2e:c1:45:aa:37:28:a9:ff:0d:36:99:6d:
6d:6d:21:66:10:73:c9:3c:d0:30:0c:fc:e4:df:41:
90:15:a9:5a:a4:b9:36:35:ef:98:35:15:15:31:d2:
54:68:45:f9:1f:2e:6b:53:08:11:a7:30:39:be:a9:
b1:0d:4a:f8:f3:bd:3e:ad:3c:30:b5:01:4a:da:ae:
5e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:8F:B4:98:C9:A8:23:27:A3:65:0B:CB:B1:C5:34:17:7C:CE:6A:31
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/z4-0mMmoIyejZQvLscU0F3zOajE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.33.0/24
37.32.43.0/24
185.212.49.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:8e:9b:de:6f:80:71:94:b9:cd:24:0b:90:bb:57:f0:42:f1:
94:d3:ad:47:47:68:6f:66:ea:8d:f4:0a:0c:26:55:72:f8:cb:
ea:45:9b:ab:08:66:c1:1e:cd:69:56:14:4f:07:25:57:dc:25:
61:bc:a9:82:9d:f5:6b:5e:32:bb:72:64:1b:ae:21:57:47:d5:
9f:f8:6e:76:05:b4:2e:08:e4:30:e6:83:4a:6f:e3:05:a2:31:
6e:07:1e:68:24:ec:aa:fc:47:21:e8:cf:8a:5a:02:01:2b:0d:
ee:f5:07:cf:62:16:54:ef:22:26:8a:7c:4e:d2:73:e5:7c:2c:
f2:89:3d:bd:0d:e2:4f:ff:4a:c7:aa:47:f9:fe:25:38:b8:4f:
17:d5:34:39:14:1b:22:14:23:4e:5a:2d:fb:72:e7:45:15:14:
31:4f:18:c8:2d:56:21:40:92:e8:38:7b:0d:18:a8:00:b5:94:
e9:2c:03:5a:ba:89:3e:cc:32:92:00:21:15:aa:d8:1f:32:66:
8c:76:c0:b2:4b:95:f8:85:8b:36:6c:18:b1:86:da:42:2d:7c:
c1:da:6c:d6:9e:3c:42:3f:26:6c:3d:5f:7d:46:e9:24:37:70:
bf:f1:99:13:28:86:2f:f2:8c:ec:7f:8e:e8:13:a3:98:41:3a:
6f:3f:ca:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:36:02 2025 by rpki-client