Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/z9ae-Gs7r9KKpMcDJbVz7FmiTRs.roa
File: z9ae-Gs7r9KKpMcDJbVz7FmiTRs.roa (raw, json)
Hash identifier: JszRMzQKTmymxrpiY4Ap7YZRfZnYk8CJdCSLIzjXOQo=
Subject key identifier: CF:D6:9E:F8:6B:3B:AF:D2:8A:A4:C7:03:25:B5:73:EC:59:A2:4D:1B
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 019942F0B671AC6911EA6644BE8A1DAB6630
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/z9ae-Gs7r9KKpMcDJbVz7FmiTRs.roa
Signing time: Sat 13 Sep 2025 11:58:15 +0000
ROA not before: Sat 13 Sep 2025 11:58:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207483
IP address blocks: 77.83.203.0/24 maxlen: 24
2a13:a440:9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:42:f0:b6:71:ac:69:11:ea:66:44:be:8a:1d:ab:66:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Sep 13 11:58:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cfd69ef86b3bafd28aa4c70325b573ec59a24d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:53:4f:13:7d:2b:d9:20:4e:94:a9:3a:51:f5:
9e:e0:55:10:71:11:54:f9:08:89:2d:25:8d:1d:4a:
4a:cb:d0:2e:7a:a3:e8:af:8b:fe:6d:c2:08:b9:c2:
9f:f1:69:4b:0e:16:3a:ef:b7:c1:dd:05:08:d2:91:
aa:e2:c3:1f:b2:51:6e:76:e2:f1:60:8f:39:cd:f1:
23:a9:3c:5e:87:ea:57:af:5f:5d:0c:57:66:35:27:
04:a8:ed:bc:82:b4:f4:8c:43:82:91:20:e0:d8:73:
45:5f:8e:af:71:02:6c:9b:70:dc:fc:d3:c0:a5:82:
a5:7c:c6:60:79:bc:dc:60:38:67:09:dd:92:f8:dd:
77:f5:f5:d5:d0:82:4b:e3:03:89:c2:d1:f1:0e:ee:
6b:3d:fc:10:3b:95:00:ff:98:5a:67:41:c1:ef:40:
0c:60:e3:74:94:07:22:c0:7f:b7:bd:d4:fd:d7:dd:
e6:b4:a9:f7:2c:ed:2b:31:29:ad:bd:55:c1:c0:4a:
74:f4:a3:4a:69:ec:8d:d5:9c:57:89:8b:b2:68:2e:
c6:84:31:12:c4:4a:c0:70:76:5f:ae:ee:01:5c:d1:
a0:48:9e:e5:4f:15:e1:d3:01:cd:88:d2:ff:1c:f3:
ed:46:6f:2e:8d:cd:12:9e:3e:de:69:8c:25:b7:23:
f1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D6:9E:F8:6B:3B:AF:D2:8A:A4:C7:03:25:B5:73:EC:59:A2:4D:1B
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/z9ae-Gs7r9KKpMcDJbVz7FmiTRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.203.0/24
IPv6:
2a13:a440:9::/48
Signature Algorithm: sha256WithRSAEncryption
3a:8e:28:02:ab:94:b8:29:9f:58:48:84:04:19:14:92:f2:66:
bb:18:c4:73:4d:95:70:93:17:e3:c2:72:89:08:87:06:f2:76:
44:29:9d:1a:65:99:75:43:9e:1f:ce:33:f2:94:1c:20:c1:d6:
8a:87:71:d9:cb:db:51:4b:3e:31:7d:32:75:6d:65:a8:6c:ef:
02:15:33:c4:9c:2b:c4:9f:8b:5d:8b:bd:d1:df:7a:36:4c:a0:
1c:c5:87:b6:4e:57:0d:e0:d6:42:15:4d:53:5b:2f:5e:c1:d2:
73:c1:0f:0d:c4:e8:48:52:1a:ed:ab:5b:91:af:50:d2:61:fc:
f2:b8:f5:5e:fe:55:3a:7f:cf:9f:b5:4a:a7:97:95:7d:93:81:
af:89:89:a6:b5:00:da:26:7a:77:79:31:f1:b9:c1:46:8c:7d:
76:1b:a9:52:d2:93:f5:87:0f:12:7f:db:bf:62:29:a7:fc:5d:
61:1c:1d:0c:9f:fb:d9:19:7c:b7:c2:da:9c:11:ce:3b:f8:5c:
1c:74:ae:44:ce:96:40:a8:da:94:cb:97:81:a3:cd:7d:53:19:
d0:2b:fc:e5:8b:95:69:1c:5a:11:3e:8b:11:a8:6a:d0:d8:ec:
5c:0c:68:46:1c:6f:74:8f:84:b9:8f:83:d7:de:5a:0a:53:ff:
7d:b6:10:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:06:20 2025 by rpki-client