Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/zc8LMUqNR__vsuZof5Ze02cRBnE.roa
File: zc8LMUqNR__vsuZof5Ze02cRBnE.roa (raw, json)
Hash identifier: 5ZIu0TMAuzJhn3UFEKcf1wUp8zRJAg6yYLHhiuq0r8c=
Subject key identifier: CD:CF:0B:31:4A:8D:47:FF:EF:B2:E6:68:7F:96:5E:D3:67:11:06:71
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 0199C0713FE786F55C81E71547BDEECC9CDC
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/zc8LMUqNR__vsuZof5Ze02cRBnE.roa
Signing time: Tue 07 Oct 2025 20:51:11 +0000
ROA not before: Tue 07 Oct 2025 20:51:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48031
IP address blocks: 2.56.136.0/24 maxlen: 24
194.32.228.0/24 maxlen: 24
213.5.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 16:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c0:71:3f:e7:86:f5:5c:81:e7:15:47:bd:ee:cc:9c:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Oct 7 20:51:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cdcf0b314a8d47ffefb2e6687f965ed367110671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9d:ad:aa:ed:21:07:86:c9:26:4d:56:fc:62:
12:85:c6:8f:57:05:e3:db:39:70:dc:30:46:05:d5:
6d:80:eb:53:14:f0:78:e8:f2:7d:56:09:db:4c:3a:
48:d0:65:30:f1:4b:ad:c1:72:89:a2:dd:46:66:e4:
f2:c9:19:b8:2f:a3:a6:7c:cf:8f:4c:31:c2:b1:c4:
59:43:45:45:7f:99:26:95:dc:c5:b9:ee:52:5f:be:
0a:5d:31:df:26:07:0b:76:ac:14:05:2e:e6:58:af:
12:99:51:8a:7c:16:03:55:ab:64:00:9b:39:a2:c6:
30:a3:99:b7:f9:9c:d4:11:06:05:93:3e:27:54:8e:
a9:1e:eb:48:ed:d4:78:3e:74:18:e9:75:55:0b:92:
cf:78:6b:d3:03:ad:1d:59:c9:79:04:8c:a3:91:e0:
c6:5e:0f:82:fa:e9:b7:24:23:c2:29:ad:d4:69:ef:
86:15:50:a5:df:15:69:55:73:7b:04:f3:0a:5e:a8:
ad:ad:32:0c:e3:5e:03:dd:71:14:ec:2d:d2:49:ec:
22:a9:bc:b2:8e:9e:ff:3e:0a:23:97:ff:c9:f8:e9:
16:3f:ec:8c:38:a3:f9:31:1d:50:d5:18:a7:6f:56:
a9:72:5d:f5:e0:28:dc:54:98:59:3f:79:c3:d7:4b:
52:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:CF:0B:31:4A:8D:47:FF:EF:B2:E6:68:7F:96:5E:D3:67:11:06:71
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/zc8LMUqNR__vsuZof5Ze02cRBnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.136.0/24
194.32.228.0/24
213.5.131.0/24
Signature Algorithm: sha256WithRSAEncryption
58:36:6b:5b:34:01:2c:3f:28:e2:6a:f3:ce:4f:98:53:44:b4:
a0:17:be:33:e3:58:a0:3e:5d:78:f8:18:65:14:3d:70:a5:72:
88:86:d6:e3:26:f0:aa:1a:6f:ab:42:8b:79:c3:fc:9f:72:f0:
b3:99:0d:24:e8:fc:7b:cd:2b:0a:30:88:1a:08:1c:77:24:24:
01:8e:e2:1c:8c:31:56:a3:06:a1:13:fb:a2:83:a3:6f:37:dc:
4d:3e:e5:9c:69:ac:2c:ed:e6:95:b7:43:38:d2:03:7c:06:9a:
bd:10:65:cd:3b:d7:a9:66:30:f6:ab:92:68:8f:cd:48:b0:69:
39:30:ab:78:ec:92:e3:c7:91:da:e4:11:0b:11:e5:fa:3f:5c:
b6:4a:5d:66:2d:e3:21:b1:d6:e5:3c:27:bc:1f:97:66:34:79:
15:1f:61:07:27:58:98:3c:08:f6:19:e9:e0:0d:cf:33:be:ac:
ba:59:76:0f:e7:c2:fe:4c:3c:5a:62:a8:81:ff:6d:63:5f:04:
d7:87:01:8e:4e:95:ba:db:45:a7:a9:26:c1:d0:d2:09:a3:b2:
d1:a0:e4:0a:fc:f6:c6:c7:19:f6:7b:22:97:12:0a:d3:15:61:
40:97:9e:80:44:ae:55:6d:be:dd:93:24:cd:2e:05:12:91:92:
cd:17:6e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:05:05 2025 by rpki-client