Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/zsqlSKujJDEpPxbXLnbR63-l1vg.roa
File: zsqlSKujJDEpPxbXLnbR63-l1vg.roa (raw, json)
Hash identifier: PnSwjAwNQ6gRKWOEYcqHvgvuayLLY4sW0dSTLof3lrQ=
Subject key identifier: CE:CA:A5:48:AB:A3:24:31:29:3F:16:D7:2E:76:D1:EB:7F:A5:D6:F8
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 0199D263C56E421D546684404DA71CE4C916
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/zsqlSKujJDEpPxbXLnbR63-l1vg.roa
Signing time: Sat 11 Oct 2025 08:29:37 +0000
ROA not before: Sat 11 Oct 2025 08:29:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 77.246.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:d2:63:c5:6e:42:1d:54:66:84:40:4d:a7:1c:e4:c9:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Oct 11 08:29:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cecaa548aba32431293f16d72e76d1eb7fa5d6f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:06:27:35:3d:56:09:b0:76:1f:42:56:fe:07:
7c:74:2b:b2:07:28:57:1a:dd:57:11:af:28:10:64:
b6:32:6b:ca:12:a8:62:9f:67:19:29:3b:72:45:22:
08:a0:cc:28:00:70:80:db:7e:df:52:3b:ed:b0:dd:
9a:32:4f:43:c1:fb:da:ba:47:e6:1c:dc:64:1b:61:
90:df:2b:6e:e4:16:21:f2:53:8a:a2:89:80:63:04:
d8:00:39:95:22:9d:44:a2:20:3e:c9:cf:5e:dd:6d:
3d:f2:8f:60:9d:6d:aa:d5:0f:86:64:cc:19:4e:6e:
ed:29:b6:63:94:02:7e:d2:21:1a:9e:3f:1b:5f:ee:
ce:dd:d2:bd:e8:e2:5f:06:51:da:e4:37:dc:e1:27:
a0:de:03:8c:db:83:2d:8f:fc:bb:db:43:84:56:2b:
5b:54:f7:a9:6e:51:68:7c:c4:78:d6:e8:88:68:57:
6f:41:20:6f:89:4d:8a:b2:86:5f:68:28:07:e5:30:
1b:da:f6:de:3c:be:9e:ce:f9:d3:2a:c8:d6:9a:22:
7b:7d:b9:8c:07:05:75:44:23:a3:6a:52:61:55:aa:
91:0e:21:af:8f:81:25:ac:e4:74:46:7a:71:53:4a:
f4:94:a4:05:ef:f4:10:31:eb:31:bb:b6:0c:7f:b7:
b0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:CA:A5:48:AB:A3:24:31:29:3F:16:D7:2E:76:D1:EB:7F:A5:D6:F8
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/zsqlSKujJDEpPxbXLnbR63-l1vg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.220.0/24
Signature Algorithm: sha256WithRSAEncryption
20:b4:5f:c1:d0:04:b1:51:4e:9e:05:de:7f:91:30:2d:79:63:
31:df:fe:16:8c:01:31:ec:2c:5a:7b:54:83:47:3f:59:80:08:
c4:97:c0:43:5a:14:d9:4c:43:0d:25:c8:f9:90:12:f9:af:91:
8d:3a:22:6f:f7:48:04:2a:11:ff:f5:f9:70:ce:7b:14:58:6f:
37:67:b7:df:bd:02:e6:54:c0:f9:48:9f:57:ec:5a:ac:17:20:
ef:80:fd:6f:15:6d:1c:cd:4e:7d:e0:f3:10:6e:aa:1d:6c:00:
60:ad:79:b5:18:40:08:4a:80:7a:90:b5:c5:98:75:b7:3e:04:
50:2f:01:df:f1:5d:f0:21:3c:99:9e:a0:34:a3:da:89:50:9a:
e0:64:1a:b3:70:35:42:dc:0c:93:70:2d:30:e6:c0:ff:21:7c:
49:68:72:fd:9d:04:9e:d9:1c:be:7c:80:30:39:c7:86:63:1b:
ab:5c:e6:d9:e9:a0:ab:aa:9d:ec:3e:c6:89:da:4b:8f:42:93:
ef:5e:7f:e7:9d:33:0f:6a:c2:e0:78:cb:8e:4e:ec:76:b8:26:
22:ff:38:7f:39:b6:26:cc:e8:a6:df:c1:5f:d2:b9:43:e3:99:
82:6c:b9:d0:6a:69:cc:14:b4:02:17:3a:e9:fa:2b:45:57:0b:
6e:30:e0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 14:41:20 2025 by rpki-client