Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/EK0tn7JWk0aJiKDK1l6snNTBAWM.roa
File: EK0tn7JWk0aJiKDK1l6snNTBAWM.roa (raw, json)
Hash identifier: K0JNwqu9QwMHxHG2FRxTFqjfps84KGCzpc+oHgaeB2M=
Subject key identifier: 10:AD:2D:9F:B2:56:93:46:89:88:A0:CA:D6:5E:AC:9C:D4:C1:01:63
Certificate issuer: /CN=64cfba184ff9442a8fe7517b503a9e017fa9f2cb
Certificate serial: 0199EE6855C959E72004A4DB088735730B39
Authority key identifier: 64:CF:BA:18:4F:F9:44:2A:8F:E7:51:7B:50:3A:9E:01:7F:A9:F2:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZM-6GE_5RCqP51F7UDqeAX-p8ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/EK0tn7JWk0aJiKDK1l6snNTBAWM.roa
Signing time: Thu 16 Oct 2025 19:03:58 +0000
ROA not before: Thu 16 Oct 2025 19:03:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 185.224.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/ZM-6GE_5RCqP51F7UDqeAX-p8ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/ZM-6GE_5RCqP51F7UDqeAX-p8ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZM-6GE_5RCqP51F7UDqeAX-p8ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ee:68:55:c9:59:e7:20:04:a4:db:08:87:35:73:0b:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64cfba184ff9442a8fe7517b503a9e017fa9f2cb
Validity
Not Before: Oct 16 19:03:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10ad2d9fb25693468988a0cad65eac9cd4c10163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1b:1b:0a:99:8d:5b:da:23:dd:a4:ca:c2:d4:
07:6e:0b:a2:b9:40:bb:f5:6e:f9:c2:dc:b6:04:91:
e9:e0:02:34:7c:65:ed:df:af:78:45:12:2c:ac:21:
fd:8a:6f:9e:9e:45:19:a1:88:10:cb:95:a7:3b:20:
9a:12:5d:40:ec:ec:e8:14:0d:c7:c6:cb:0f:35:42:
2f:3e:75:e9:dc:ea:91:8c:3c:4d:eb:4d:7e:2e:47:
7e:df:7c:41:3a:7c:85:25:be:61:d6:4e:89:d9:ed:
db:09:b0:4c:d5:32:c4:6d:f0:e2:c7:7e:18:1e:d4:
89:5f:b3:49:57:7e:7f:3d:fd:a7:d6:bb:57:a2:02:
6b:eb:55:bc:d7:57:ae:c8:61:82:05:c9:7d:96:27:
3a:a2:bb:9e:e0:fd:6a:60:d2:62:63:cf:1f:2e:4a:
41:90:c9:d4:86:dc:80:6a:52:9b:78:99:5e:fe:40:
46:6e:75:a7:3e:3e:37:b7:0b:74:9f:40:14:d5:17:
a2:68:f1:ac:7f:3d:07:0d:a8:85:aa:2b:dc:70:e6:
d6:c0:7d:0d:d9:c0:6a:5b:51:a7:1c:db:03:61:53:
c2:12:16:58:c0:51:0b:c8:7b:d5:68:33:c2:91:14:
6d:e9:9c:69:3a:cc:70:c6:da:b5:f8:2f:19:43:7d:
d1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:AD:2D:9F:B2:56:93:46:89:88:A0:CA:D6:5E:AC:9C:D4:C1:01:63
X509v3 Authority Key Identifier:
keyid:64:CF:BA:18:4F:F9:44:2A:8F:E7:51:7B:50:3A:9E:01:7F:A9:F2:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZM-6GE_5RCqP51F7UDqeAX-p8ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/EK0tn7JWk0aJiKDK1l6snNTBAWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/ZM-6GE_5RCqP51F7UDqeAX-p8ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.1.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:f5:27:d6:95:b3:69:f2:e2:ae:f9:87:84:f6:e3:50:0f:ba:
af:f3:70:a8:17:eb:2b:6a:02:ef:86:21:46:88:57:90:45:69:
2e:de:37:96:55:d9:82:7f:e9:da:d0:6c:08:f5:3f:60:a5:fd:
bf:1c:63:ae:b5:95:2f:45:53:29:be:54:1d:d8:bc:84:73:c3:
57:6b:0c:24:d3:69:a5:b9:22:1c:b4:de:53:3b:51:23:8f:d1:
56:24:4a:c9:4a:9b:ae:71:91:be:2f:a9:96:85:61:6a:e3:25:
21:ec:e5:8c:28:cc:bc:b2:c4:09:dc:06:0f:e9:23:3e:89:b8:
52:4d:3e:75:41:12:10:ff:87:5f:c5:34:fe:3d:79:e2:5d:00:
f4:67:a2:80:b1:ce:bd:9e:97:cc:be:38:46:0c:81:12:b3:42:
e6:84:9c:90:9c:ce:31:ab:10:66:ef:e3:da:32:65:e2:fa:a4:
88:f2:a1:ea:67:d7:d3:19:3f:bb:5c:22:3b:7d:34:e5:1e:25:
52:8b:93:d5:0b:4a:d2:03:b8:9d:ec:27:bb:9a:b0:dd:7f:44:
a8:04:0f:1d:c5:50:31:99:db:97:a6:ab:4b:33:bf:80:fc:33:
ba:13:68:94:36:72:d8:da:92:e2:93:31:8f:61:c3:eb:c9:ea:
85:3e:11:97
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZnuaFXJWecgBKTbCIc1cws5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0Y2ZiYTE4NGZmOTQ0MmE4ZmU3NTE3YjUwM2E5ZTAxN2Zh
OWYyY2IwHhcNMjUxMDE2MTkwMzU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMGFkMmQ5ZmIyNTY5MzQ2ODk4OGEwY2FkNjVlYWM5Y2Q0YzEwMTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BsbCpmNW9oj3aTKwtQHbguiuUC7
9W75wty2BJHp4AI0fGXt3694RRIsrCH9im+enkUZoYgQy5WnOyCaEl1A7OzoFA3H
xssPNUIvPnXp3OqRjDxN601+Lkd+33xBOnyFJb5h1k6J2e3bCbBM1TLEbfDix34Y
HtSJX7NJV35/Pf2n1rtXogJr61W811euyGGCBcl9lic6orue4P1qYNJiY88fLkpB
kMnUhtyAalKbeJle/kBGbnWnPj43twt0n0AU1ReiaPGsfz0HDaiFqivccObWwH0N
2cBqW1GnHNsDYVPCEhZYwFELyHvVaDPCkRRt6ZxpOsxwxtq1+C8ZQ33R9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBCtLZ+yVpNGiYigytZerJzUwQFjMB8GA1UdIwQY
MBaAFGTPuhhP+UQqj+dRe1A6ngF/qfLLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWk0tNkdFXzVSQ3FQNTFGN1VEcWVBWC1wOHNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8yNTNmMmMtNGVkOS00ZjFmLWE5NmYt
ZGVmZjcxMTI0MjMzLzEvRUswdG43SldrMGFKaUtESzFsNnNuTlRCQVdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8yNTNmMmMtNGVkOS00ZjFmLWE5NmYtZGVmZjcxMTI0MjMz
LzEvWk0tNkdFXzVSQ3FQNTFGN1VEcWVBWC1wOHNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueABMA0G
CSqGSIb3DQEBCwUAA4IBAQCL9SfWlbNp8uKu+YeE9uNQD7qv83CoF+sragLvhiFG
iFeQRWku3jeWVdmCf+na0GwI9T9gpf2/HGOutZUvRVMpvlQd2LyEc8NXawwk02ml
uSIctN5TO1Ejj9FWJErJSpuucZG+L6mWhWFq4yUh7OWMKMy8ssQJ3AYP6SM+ibhS
TT51QRIQ/4dfxTT+PXniXQD0Z6KAsc69npfMvjhGDIESs0LmhJyQnM4xqxBm7+Pa
MmXi+qSI8qHqZ9fTGT+7XCI7fTTlHiVSi5PVC0rSA7id7Ce7mrDdf0SoBA8dxVAx
mduXpqtLM7+A/DO6E2iUNnLY2pLikzGPYcPryeqFPhGX
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:18:22 2025 by rpki-client