Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/zOidZa_WBKrrVFNvnxbTNUXsqyA.roa
File: zOidZa_WBKrrVFNvnxbTNUXsqyA.roa (raw, json)
Hash identifier: c6CaCJCPxyhkXhFJHJ0Gvk/jlU50dgYSjedGTRGmMqY=
Subject key identifier: CC:E8:9D:65:AF:D6:04:AA:EB:54:53:6F:9F:16:D3:35:45:EC:AB:20
Certificate issuer: /CN=da0047dac8eef8944d78c1b7a26868c03e2ce466
Certificate serial: 01993E808A934E867636EFCAADBF4F611D5E
Authority key identifier: DA:00:47:DA:C8:EE:F8:94:4D:78:C1:B7:A2:68:68:C0:3E:2C:E4:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/zOidZa_WBKrrVFNvnxbTNUXsqyA.roa
Signing time: Fri 12 Sep 2025 15:17:15 +0000
ROA not before: Fri 12 Sep 2025 15:17:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60451
IP address blocks: 185.30.180.0/22 maxlen: 24
185.135.92.0/22 maxlen: 24
2a06:f280::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3e:80:8a:93:4e:86:76:36:ef:ca:ad:bf:4f:61:1d:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0047dac8eef8944d78c1b7a26868c03e2ce466
Validity
Not Before: Sep 12 15:17:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cce89d65afd604aaeb54536f9f16d33545ecab20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:83:de:78:0a:01:dd:0e:dd:ad:25:e0:2c:49:
64:54:88:15:68:83:8f:14:d6:0a:78:3e:83:72:d0:
ee:99:d8:80:b0:e4:79:8b:6c:da:6b:64:f1:16:fc:
cd:a6:ee:37:6d:95:f1:ad:05:a9:68:22:09:0d:25:
e5:35:51:00:7c:e4:54:06:43:b4:45:9e:31:bf:26:
b2:a2:68:66:f2:2a:9d:b0:13:9e:28:bc:8d:00:c0:
5e:dc:db:a9:80:50:40:a3:77:3d:b3:f1:cf:d3:f3:
f8:7f:bc:6f:2d:3b:57:a3:36:98:6c:58:51:b6:9a:
fb:eb:15:47:a2:3b:29:b6:75:75:71:57:bc:df:83:
43:9b:3d:0b:f9:7f:b9:ce:c3:8b:ce:90:67:14:8b:
56:0e:91:91:a3:b4:59:9e:c9:9b:5f:3e:dc:b1:1c:
8f:b4:b5:84:79:34:03:6e:fe:f4:a2:d0:9d:7b:1c:
90:31:c8:4b:dc:55:b5:4b:1c:c3:61:c1:23:3e:da:
51:ce:dc:1d:37:73:db:ae:7d:55:10:24:8d:de:88:
c1:7a:59:61:86:1e:03:a6:4c:d4:91:41:8c:e9:2c:
a8:71:13:f1:3c:22:a5:c2:ff:29:d9:59:01:d3:f7:
3b:2b:84:95:67:46:d5:6b:d4:26:87:21:7f:c5:5a:
70:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E8:9D:65:AF:D6:04:AA:EB:54:53:6F:9F:16:D3:35:45:EC:AB:20
X509v3 Authority Key Identifier:
keyid:DA:00:47:DA:C8:EE:F8:94:4D:78:C1:B7:A2:68:68:C0:3E:2C:E4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/zOidZa_WBKrrVFNvnxbTNUXsqyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.180.0/22
185.135.92.0/22
IPv6:
2a06:f280::/29
Signature Algorithm: sha256WithRSAEncryption
78:0f:09:85:bd:4d:88:5c:8b:3b:a5:e2:44:3a:6c:93:63:82:
ad:1c:55:ac:94:c0:e3:0d:c1:c1:df:26:51:c0:fe:f8:54:14:
ad:49:cc:f1:9d:48:35:73:2f:0c:04:28:c8:1b:7b:4d:ce:31:
92:1e:81:f5:c1:a8:98:4f:63:7e:0e:0f:bb:3e:e7:0d:3a:93:
b0:68:cb:05:7b:af:6c:19:11:17:d8:6c:80:e5:81:04:fe:1b:
6d:b2:49:6f:e2:0a:c3:b3:9a:9f:46:6b:44:5c:c7:8f:2e:8d:
68:df:f7:ff:a3:56:69:ac:14:6d:81:13:11:ac:39:7b:28:dc:
f7:ac:78:11:ea:74:f1:30:09:8c:06:9d:2b:12:07:c9:13:89:
83:d5:07:b6:75:67:ae:4b:0f:49:38:ee:3f:c2:d3:5f:fe:f4:
a6:a4:c0:ea:3a:ec:d3:e6:8b:0e:bf:2f:10:2e:a9:b6:36:5e:
0a:a6:7a:2b:7a:66:e7:3f:25:76:92:8d:7f:11:1f:e1:72:9c:
64:03:12:31:b4:50:3b:07:ea:80:ce:c9:f7:b0:2d:54:19:c4:
b1:a3:ba:15:2d:77:54:97:10:d9:69:3e:75:0f:17:c5:e9:64:
bd:44:24:f3:57:4b:53:00:70:1b:b4:f4:b1:40:7c:69:50:7f:
aa:a7:2d:fe
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZk+gIqTToZ2Nu/Krb9PYR1eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMDA0N2RhYzhlZWY4OTQ0ZDc4YzFiN2EyNjg2OGMwM2Uy
Y2U0NjYwHhcNMjUwOTEyMTUxNzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjY2U4OWQ2NWFmZDYwNGFhZWI1NDUzNmY5ZjE2ZDMzNTQ1ZWNhYjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoPeeAoB3Q7drSXgLElkVIgVaIOP
FNYKeD6DctDumdiAsOR5i2zaa2TxFvzNpu43bZXxrQWpaCIJDSXlNVEAfORUBkO0
RZ4xvyayomhm8iqdsBOeKLyNAMBe3NupgFBAo3c9s/HP0/P4f7xvLTtXozaYbFhR
tpr76xVHojsptnV1cVe834NDmz0L+X+5zsOLzpBnFItWDpGRo7RZnsmbXz7csRyP
tLWEeTQDbv70otCdexyQMchL3FW1SxzDYcEjPtpRztwdN3Pbrn1VECSN3ojBellh
hh4DpkzUkUGM6SyocRPxPCKlwv8p2VkB0/c7K4SVZ0bVa9QmhyF/xVpwIwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFMzonWWv1gSq61RTb58W0zVF7KsgMB8GA1UdIwQY
MBaAFNoAR9rI7viUTXjBt6JoaMA+LORmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmdCSDJzanUtSlJOZU1HM29taG93RDRzNUdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83Nzk1OWEtNDFkZS00NmJlLWE1ZjEt
YWM5YzhhNTBmMjRlLzEvek9pZFphX1dCS3JyVkZOdm54YlROVVhzcXlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy83Nzk1OWEtNDFkZS00NmJlLWE1ZjEtYWM5YzhhNTBmMjRl
LzEvMmdCSDJzanUtSlJOZU1HM29taG93RDRzNUdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuR60AwQC
uYdcMA0EAgACMAcDBQMqBvKAMA0GCSqGSIb3DQEBCwUAA4IBAQB4DwmFvU2IXIs7
peJEOmyTY4KtHFWslMDjDcHB3yZRwP74VBStSczxnUg1cy8MBCjIG3tNzjGSHoH1
waiYT2N+Dg+7PucNOpOwaMsFe69sGREX2GyA5YEE/httsklv4grDs5qfRmtEXMeP
Lo1o3/f/o1ZprBRtgRMRrDl7KNz3rHgR6nTxMAmMBp0rEgfJE4mD1Qe2dWeuSw9J
OO4/wtNf/vSmpMDqOuzT5osOvy8QLqm2Nl4KpnorembnPyV2ko1/ER/hcpxkAxIx
tFA7B+qAzsn3sC1UGcSxo7oVLXdUlxDZaT51DxfF6WS9RCTzV0tTAHAbtPSxQHxp
UH+qpy3+
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:27:46 2025 by rpki-client