Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/ix-ZSSNlerCaWdEBa65HEpQka7I.roa
File: ix-ZSSNlerCaWdEBa65HEpQka7I.roa (raw, json)
Hash identifier: 1tb0LpSD1iWi8R1yiZ2FFdKAVxcZDqiaztDvg3PO7k8=
Subject key identifier: 8B:1F:99:49:23:65:7A:B0:9A:59:D1:01:6B:AE:47:12:94:24:6B:B2
Certificate issuer: /CN=8b9e36bb6fef9328f518e4b105fc212c152a8c68
Certificate serial: 01997F5AD73A2B3989FA2820E8611F9A849F
Authority key identifier: 8B:9E:36:BB:6F:EF:93:28:F5:18:E4:B1:05:FC:21:2C:15:2A:8C:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/ix-ZSSNlerCaWdEBa65HEpQka7I.roa
Signing time: Thu 25 Sep 2025 05:31:23 +0000
ROA not before: Thu 25 Sep 2025 05:31:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207790
IP address blocks: 89.56.0.0/16 maxlen: 24
89.57.0.0/18 maxlen: 24
89.57.64.0/18 maxlen: 24
89.57.128.0/18 maxlen: 24
89.57.192.0/18 maxlen: 24
185.12.88.0/22 maxlen: 22
194.97.96.0/19 maxlen: 24
2a03:7840::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:7f:5a:d7:3a:2b:39:89:fa:28:20:e8:61:1f:9a:84:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9e36bb6fef9328f518e4b105fc212c152a8c68
Validity
Not Before: Sep 25 05:31:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b1f994923657ab09a59d1016bae471294246bb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e4:9c:e2:81:04:e6:ab:82:58:0a:b0:c5:7a:
f3:82:e7:ff:c4:66:43:5b:76:34:7f:8e:48:12:78:
a5:4c:e9:42:0d:a4:24:6d:19:dd:e7:62:6e:3f:97:
26:54:d5:29:ac:5f:36:3c:9d:48:4a:64:64:0d:d4:
14:40:2e:0e:51:d9:de:56:25:d8:0c:8d:04:c7:51:
45:98:21:51:bc:00:24:94:d1:89:60:19:4f:a7:d3:
79:d9:d3:4a:a0:64:d2:a5:ce:c1:e0:73:fb:86:ba:
cd:52:e1:99:a1:47:ec:96:9d:22:30:82:76:0f:99:
6a:8e:29:65:74:cc:4c:52:07:7a:ba:56:d7:4b:1d:
db:7b:56:fb:7b:c2:7e:e9:14:8e:88:2f:b4:2d:76:
83:92:74:00:f1:18:82:05:62:f7:39:7d:ee:94:fc:
0d:6a:ff:8f:1d:13:88:86:9e:da:49:fc:00:65:81:
22:61:26:30:d2:34:c8:d1:ae:1d:33:8a:3d:e5:94:
15:ff:df:b5:ba:1d:e1:39:d1:d7:19:0d:3d:f2:9a:
0b:8c:ef:c3:93:91:72:4f:c5:48:ee:a7:07:b0:1a:
bf:f1:45:8e:a3:f2:41:4b:ba:60:d8:e4:fd:93:43:
df:7f:1f:c9:97:73:42:35:2a:56:23:e5:b7:5b:31:
35:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:1F:99:49:23:65:7A:B0:9A:59:D1:01:6B:AE:47:12:94:24:6B:B2
X509v3 Authority Key Identifier:
keyid:8B:9E:36:BB:6F:EF:93:28:F5:18:E4:B1:05:FC:21:2C:15:2A:8C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/ix-ZSSNlerCaWdEBa65HEpQka7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.56.0.0/15
185.12.88.0/22
194.97.96.0/19
IPv6:
2a03:7840::/29
Signature Algorithm: sha256WithRSAEncryption
75:41:33:b5:7b:f5:59:75:1e:1f:15:8a:c6:d5:ae:f8:18:74:
cf:dc:e9:78:81:ff:72:ca:91:8a:c1:a8:e7:9a:b6:e1:34:c0:
de:95:80:78:20:53:5f:7c:f6:90:bc:bd:81:be:10:cb:26:86:
59:ba:df:c3:27:fa:b4:fe:e8:0b:17:e9:6b:d9:6f:0b:c2:0c:
78:34:4f:6c:8f:8e:d9:df:1a:36:3c:5c:12:70:6c:69:33:19:
d1:84:58:02:fd:89:55:0e:92:ed:90:09:87:4c:e7:30:bb:ab:
8e:2c:34:0f:3d:c0:01:9b:f0:04:5a:9d:e8:32:36:63:92:43:
8f:d3:d8:7d:17:fb:c7:5c:31:26:0b:12:3c:d8:17:89:ec:a5:
db:a2:f4:f7:7c:59:f0:7e:b1:af:96:30:a1:c5:1c:fa:f6:02:
26:ff:0b:75:5d:36:4f:d5:98:76:51:03:92:c4:e3:6d:7e:d8:
e3:20:52:52:cc:da:b5:c8:fe:f0:ef:ad:fe:70:d0:f7:dd:b6:
2f:d5:82:d5:8f:3d:45:bf:98:19:c2:69:19:e7:6f:f0:5d:07:
16:b8:be:74:71:77:88:d2:b6:36:ff:2d:05:76:4a:1d:72:3c:
57:eb:f6:19:11:07:61:2f:1e:ce:56:fa:13:ca:05:ee:55:1d:
62:02:92:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:21:55 2025 by rpki-client