Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/ZPzCvvAXDEp6OpHBb8rDqpV1VBA.roa
File: ZPzCvvAXDEp6OpHBb8rDqpV1VBA.roa (raw, json)
Hash identifier: wVo6gN+qFZsAuQseg3rAQsoqV8pB36JzHJHizR0u3Ok=
Subject key identifier: 64:FC:C2:BE:F0:17:0C:4A:7A:3A:91:C1:6F:CA:C3:AA:95:75:54:10
Certificate issuer: /CN=01f10a032279133d6d64c82531435e5787d11d6b
Certificate serial: 019F23684594192B79ED4217B4E9FA9FE4BF
Authority key identifier: 01:F1:0A:03:22:79:13:3D:6D:64:C8:25:31:43:5E:57:87:D1:1D:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/ZPzCvvAXDEp6OpHBb8rDqpV1VBA.roa
Signing time: Thu 02 Jul 2026 15:17:43 +0000
ROA not before: Thu 02 Jul 2026 15:17:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211559
IP address blocks: 185.25.12.0/23 maxlen: 23
185.25.14.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:45:94:19:2b:79:ed:42:17:b4:e9:fa:9f:e4:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01f10a032279133d6d64c82531435e5787d11d6b
Validity
Not Before: Jul 2 15:17:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=64fcc2bef0170c4a7a3a91c16fcac3aa95755410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bf:0b:df:fe:39:bf:c6:71:e4:87:9c:52:34:
67:32:9a:bf:fc:9e:dc:d5:d0:3f:7d:9e:6f:04:2e:
b1:d3:10:c5:61:1a:7a:39:ec:ca:25:b7:21:61:c4:
d1:38:65:1b:f1:d2:91:f8:5c:39:35:32:1b:0c:36:
bb:7a:48:f1:3a:5f:74:7f:96:6b:b7:87:ac:37:6c:
96:1e:27:be:b9:9a:49:a3:a2:20:fc:02:07:d0:cf:
ef:96:d3:b3:f7:30:d5:b1:c9:0b:5e:7f:9c:c9:cd:
e6:29:31:28:c6:aa:04:31:44:2e:80:3c:6e:df:f4:
de:28:c6:3b:b5:70:f6:bf:96:85:d2:53:37:1c:75:
27:c8:2e:5f:83:be:47:ba:7f:89:98:60:99:cb:50:
54:9f:a9:bd:b1:55:d5:f7:78:b1:a3:9d:c8:8f:46:
dc:7a:e9:ee:11:94:5f:ea:82:19:c7:6c:47:54:d8:
f8:a4:bd:91:f8:bc:9b:2f:11:8f:5d:5d:a4:93:df:
9b:a0:9b:91:29:6a:6a:e8:44:de:a7:28:b5:fe:ff:
de:c8:7d:f4:e7:02:f0:fa:df:98:b9:22:ff:60:b6:
3c:0e:ed:fb:ed:e7:ad:a0:53:7a:37:1f:36:07:5c:
77:66:fc:62:86:fe:dd:68:50:97:11:13:92:fe:cd:
b8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:FC:C2:BE:F0:17:0C:4A:7A:3A:91:C1:6F:CA:C3:AA:95:75:54:10
X509v3 Authority Key Identifier:
keyid:01:F1:0A:03:22:79:13:3D:6D:64:C8:25:31:43:5E:57:87:D1:1D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/ZPzCvvAXDEp6OpHBb8rDqpV1VBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.12.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:05:b4:18:4d:d2:b6:cf:90:0f:f3:88:4b:f1:c6:f9:62:3d:
3c:0c:07:e8:86:31:e4:71:c7:98:a0:63:15:91:35:98:6f:1a:
79:06:34:c0:3f:fc:c4:bb:8a:aa:d9:2b:7b:3f:9e:d4:4c:9a:
85:b6:85:2e:4c:9b:2d:08:ba:93:1e:c2:7b:5b:5a:a1:58:21:
5b:83:56:71:ce:9d:04:af:74:04:8b:5d:e6:a9:b3:b5:af:9d:
b5:28:4f:c2:d3:b9:55:ed:26:26:80:d8:69:a7:a8:cb:63:8e:
58:1f:b2:db:2f:6a:aa:32:64:12:fe:55:d4:15:67:13:de:ac:
8f:93:70:cf:18:21:af:18:94:7a:1b:26:e7:a3:32:42:d0:29:
9e:22:89:79:83:37:90:77:ee:d4:9c:3e:06:6b:53:a7:d9:2b:
8f:07:92:26:a5:0d:4b:ae:ea:63:cc:6a:ba:58:4e:85:5e:09:
11:4b:9d:5b:86:3f:70:fc:35:8e:e6:4c:da:3b:b8:df:7d:7b:
e0:70:e7:46:25:e3:53:c0:68:f8:97:de:f8:49:37:c3:fc:c2:
03:27:bb:bb:89:bd:8c:44:3f:43:ad:64:1f:25:a5:2d:cb:e1:
41:ae:b7:10:50:eb:66:16:9b:bf:9a:ea:6a:10:05:14:c7:c5:
4a:5d:ba:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:38:23 2026 by rpki-client