Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ZlRM7H0TWwK_Zsa6ZvJKxyipp7s.roa
File: ZlRM7H0TWwK_Zsa6ZvJKxyipp7s.roa (raw, json)
Hash identifier: uutUeNgXwtTy/lTLgoHXl40RXfOQGuJXcLCvUM2lux8=
Subject key identifier: 66:54:4C:EC:7D:13:5B:02:BF:66:C6:BA:66:F2:4A:C7:28:A9:A7:BB
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01998DA0647BFE9DC520B047632108DA7FEB
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ZlRM7H0TWwK_Zsa6ZvJKxyipp7s.roa
Signing time: Sun 28 Sep 2025 00:02:02 +0000
ROA not before: Sun 28 Sep 2025 00:02:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214639
IP address blocks: 185.229.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:8d:a0:64:7b:fe:9d:c5:20:b0:47:63:21:08:da:7f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 28 00:02:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66544cec7d135b02bf66c6ba66f24ac728a9a7bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a7:03:13:2c:a6:bb:b3:ae:5f:b9:35:78:32:
34:b5:8a:16:04:04:a8:80:90:86:72:18:44:a5:9f:
88:7a:ec:ee:e1:b1:37:c1:ff:fa:2d:40:d8:31:92:
ca:01:af:9a:ea:bc:3f:ca:25:51:49:3f:e6:e3:7b:
48:ad:24:3b:3d:7d:29:d7:19:37:fd:29:b4:df:a1:
67:ac:a9:58:c0:f0:0f:49:e2:86:ae:d4:89:db:d7:
5a:87:a6:30:7c:f0:5c:4a:cb:ea:96:92:2d:2a:24:
e2:58:ad:30:f2:b0:9f:00:2d:f7:7d:76:b5:6c:07:
64:d3:7a:58:bb:e3:75:4a:0b:b4:46:a3:13:16:f0:
9a:46:9c:11:f4:97:22:14:f3:3f:d2:16:fb:48:84:
63:f2:b1:16:dc:4f:24:dd:a2:32:af:b2:5f:01:a3:
3a:be:09:64:0a:13:95:06:10:3b:cf:de:67:31:e2:
95:5d:e2:3f:e4:05:db:2d:7d:e2:11:2b:08:5a:42:
4e:23:97:b2:03:da:6e:30:82:ee:3c:7f:1f:d3:af:
b1:9e:9d:36:a9:47:58:ce:90:e4:30:0e:62:45:52:
c5:9a:b3:19:5e:03:91:0b:8b:f9:95:92:34:e9:83:
0f:9e:3a:63:6b:f3:69:a3:8a:99:44:50:df:1c:69:
bb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:54:4C:EC:7D:13:5B:02:BF:66:C6:BA:66:F2:4A:C7:28:A9:A7:BB
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ZlRM7H0TWwK_Zsa6ZvJKxyipp7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.221.0/24
Signature Algorithm: sha256WithRSAEncryption
14:9a:a4:e6:53:0c:87:c5:3c:49:7c:c5:ef:07:b6:4b:6e:7c:
f5:8c:f8:c2:43:55:eb:5b:2a:f0:9d:b4:ec:44:08:a5:72:1b:
8e:ca:f3:c3:41:e0:08:25:1b:ce:63:c1:b0:35:7c:81:24:0f:
05:92:0d:62:10:7b:bd:ac:c9:f2:b2:b0:df:0e:6e:3d:6d:86:
d4:1d:c4:93:f6:26:b6:21:35:19:69:81:69:b8:c5:c8:3d:5b:
7e:ea:fe:93:d7:ac:c7:2e:e3:dd:45:b8:37:cf:ac:58:d7:a0:
be:15:a7:bf:0f:cd:f0:df:6b:d7:f3:99:44:b9:14:64:cc:01:
36:34:d7:ee:6c:8f:46:b0:e7:b0:c5:28:0a:54:a3:45:f8:0e:
41:51:31:c8:ac:2d:3f:ef:7c:41:6b:b6:72:ba:80:93:fb:46:
30:7f:11:b7:aa:a4:4d:79:48:16:e9:57:ea:f4:de:dc:1f:be:
1a:87:00:58:97:dc:ce:b7:eb:20:53:e2:4d:8a:26:b7:1f:34:
15:dc:7c:05:67:54:99:7c:1d:1c:10:33:57:bb:af:98:71:c2:
e6:3a:dc:be:e0:39:94:15:7f:42:ea:01:48:52:d3:fb:c3:b5:
9d:65:ef:4f:9e:b6:5f:c1:7d:c5:34:09:c3:93:fe:e3:33:3f:
8b:b5:03:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:40:08 2025 by rpki-client