Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/ZZey-0HBZJz6tu5Dx957VQ_cJpY.roa
File: ZZey-0HBZJz6tu5Dx957VQ_cJpY.roa (raw, json)
Hash identifier: Um1c8KK7ILiypS8xrGfkuz2RoJKwXtwUfcSgYkFetK4=
Subject key identifier: 65:97:B2:FB:41:C1:64:9C:FA:B6:EE:43:C7:DE:7B:55:0F:DC:26:96
Certificate issuer: /CN=6faf48b02b97dc2d312250aa234083b8c1bb9e81
Certificate serial: 01988C1D4338F21579C93D27BFEB4EB68972
Authority key identifier: 6F:AF:48:B0:2B:97:DC:2D:31:22:50:AA:23:40:83:B8:C1:BB:9E:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/ZZey-0HBZJz6tu5Dx957VQ_cJpY.roa
Signing time: Fri 08 Aug 2025 23:56:24 +0000
ROA not before: Fri 08 Aug 2025 23:56:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206507
IP address blocks: 2001:30c0:fffd::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.mft
rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:1d:43:38:f2:15:79:c9:3d:27:bf:eb:4e:b6:89:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6faf48b02b97dc2d312250aa234083b8c1bb9e81
Validity
Not Before: Aug 8 23:56:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6597b2fb41c1649cfab6ee43c7de7b550fdc2696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7a:7f:2e:5e:60:8b:ac:1b:21:15:ed:dc:16:
68:68:f2:b5:34:bf:c7:ba:7f:29:7a:82:e8:e8:15:
b6:04:42:4e:67:a2:7c:e7:73:64:be:43:38:8a:35:
99:2e:17:79:bd:7e:69:1e:e2:9f:2c:10:2a:c8:98:
2e:ac:f3:fe:5a:52:35:41:4f:48:e0:20:5f:62:05:
30:f5:eb:3e:2e:b5:c2:67:f9:ef:19:be:e0:40:62:
d4:0c:88:a8:f5:91:b8:00:68:b4:e0:d9:02:b0:8c:
cd:cd:2e:fa:5d:5e:5e:b2:5d:11:92:cb:1b:eb:96:
be:ee:1f:cf:7e:a7:2c:ec:45:4f:90:96:21:86:4d:
de:bf:0e:e7:db:fb:17:74:94:68:e9:fb:65:35:6b:
71:5c:44:3d:3e:91:18:4e:98:88:5d:c5:3a:a6:63:
fe:6b:b8:a5:4a:49:3a:79:a5:70:0e:f0:ac:73:29:
76:38:e9:33:e9:07:e7:5e:ef:c4:73:20:11:51:88:
96:ab:fc:64:0b:04:8b:8e:c3:04:dd:b8:69:40:16:
aa:4f:f3:d7:fe:b9:89:17:6f:47:25:0c:13:48:a1:
1e:a9:84:a9:a3:bd:74:18:03:21:bd:7f:d4:1a:5a:
7d:9c:8f:d2:97:59:16:ce:ca:19:e6:1d:ec:c3:9e:
7a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:97:B2:FB:41:C1:64:9C:FA:B6:EE:43:C7:DE:7B:55:0F:DC:26:96
X509v3 Authority Key Identifier:
keyid:6F:AF:48:B0:2B:97:DC:2D:31:22:50:AA:23:40:83:B8:C1:BB:9E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/ZZey-0HBZJz6tu5Dx957VQ_cJpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:30c0:fffd::/48
Signature Algorithm: sha256WithRSAEncryption
32:f3:99:a4:84:96:57:ed:86:2a:42:07:b8:9b:e3:51:b8:a3:
ea:d9:f3:d9:db:e4:e6:95:0d:04:ba:57:9a:2e:07:cf:38:51:
7e:29:dc:47:09:cb:65:f6:6b:76:06:cd:b7:8f:57:2f:3d:95:
35:67:96:e0:ef:fe:0a:1a:1a:14:42:c4:4c:82:ca:95:6f:c5:
b6:34:0a:d6:a8:16:14:29:c8:5e:92:e2:ec:56:c4:5a:d2:02:
12:11:99:cb:99:03:5c:b4:5c:1a:6a:0b:00:e0:2d:41:ae:11:
38:7b:4b:41:ec:74:c7:76:11:3c:26:61:cf:20:4b:4e:c3:40:
2a:77:2e:83:6a:a4:44:b9:9e:23:90:93:e6:39:43:6b:3d:0e:
e3:ae:73:dd:01:fa:ae:a9:c5:d3:9c:ff:7e:cb:8e:e2:04:eb:
34:35:2c:ce:d5:c3:16:41:69:0e:87:7f:5b:35:43:02:ef:5c:
b7:65:7e:b2:3b:99:e0:8d:bb:8c:c5:ea:9e:29:b2:63:12:0e:
ac:bb:41:4e:33:ee:fa:02:2a:c6:ad:9f:d4:2b:1f:8e:c1:4c:
1e:6a:4b:17:c5:85:23:6f:c6:2c:d8:5b:c1:16:4d:60:ef:d2:
3a:d2:0c:d9:a7:63:9f:9f:42:b7:17:7e:8f:98:c1:b5:08:fb:
15:4d:08:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:56:25 2025 by rpki-client