Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/06205d-e6a5-4d54-96e8-fe4cd2712306/1/7BZgrIdyubMi7Kxr3pcbEsxsTVs.roa
File: 7BZgrIdyubMi7Kxr3pcbEsxsTVs.roa (raw, json)
Hash identifier: 07a2Z1bP4ZM4lvBNnIbYpGRZq/i+QW1+w8DIMuAxBRM=
Subject key identifier: EC:16:60:AC:87:72:B9:B3:22:EC:AC:6B:DE:97:1B:12:CC:6C:4D:5B
Certificate issuer: /CN=66d1233f112a4a3435575a3a219dccc021068d99
Certificate serial: 0199C89AE40E038E8D1FE7F701140FCE1609
Authority key identifier: 66:D1:23:3F:11:2A:4A:34:35:57:5A:3A:21:9D:CC:C0:21:06:8D:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/06205d-e6a5-4d54-96e8-fe4cd2712306/1/7BZgrIdyubMi7Kxr3pcbEsxsTVs.roa
Signing time: Thu 09 Oct 2025 10:53:37 +0000
ROA not before: Thu 09 Oct 2025 10:53:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62165
IP address blocks: 193.163.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/06205d-e6a5-4d54-96e8-fe4cd2712306/1/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/06205d-e6a5-4d54-96e8-fe4cd2712306/1/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c8:9a:e4:0e:03:8e:8d:1f:e7:f7:01:14:0f:ce:16:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d1233f112a4a3435575a3a219dccc021068d99
Validity
Not Before: Oct 9 10:53:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec1660ac8772b9b322ecac6bde971b12cc6c4d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2a:32:28:87:28:7b:50:c1:d3:fc:58:cc:9f:
52:14:c5:f8:62:db:ba:82:72:88:bf:c9:76:19:1e:
69:1e:04:0b:7f:09:d7:41:af:70:39:25:2f:0c:df:
e3:c1:7b:f8:e6:1d:02:68:e0:27:0d:54:bd:a8:32:
c5:1a:8f:35:c6:17:3a:e1:80:67:64:5d:cc:23:f6:
8a:52:11:f5:02:c8:63:c9:bf:97:fb:77:a5:5e:c3:
68:1a:3b:a8:dc:93:a1:21:c0:72:1e:06:c4:5f:ac:
41:7a:bd:b8:de:23:2a:1b:5f:4f:50:17:30:4b:b1:
39:35:1c:14:d6:07:33:74:d4:8c:69:8b:94:14:13:
12:09:26:9a:36:f2:aa:6a:4e:c1:25:da:8c:29:d0:
ab:f3:37:41:50:87:95:55:f8:9d:8e:7e:8b:71:a2:
7d:e4:70:eb:be:ea:f8:95:93:1b:8c:6f:ea:dd:4c:
19:73:8f:1a:86:cd:bc:23:34:6e:fa:51:29:3f:a4:
2f:4c:6c:f9:c4:71:c8:61:0e:69:49:f5:f1:d5:01:
83:6f:19:f8:9c:f1:c9:cc:aa:30:10:c6:35:1d:f6:
1a:1b:65:bd:06:96:b5:7d:1c:a6:6e:3a:3e:32:8e:
7e:f8:7c:bd:75:0b:b1:8f:a7:ae:b4:45:60:3b:da:
96:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:16:60:AC:87:72:B9:B3:22:EC:AC:6B:DE:97:1B:12:CC:6C:4D:5B
X509v3 Authority Key Identifier:
keyid:66:D1:23:3F:11:2A:4A:34:35:57:5A:3A:21:9D:CC:C0:21:06:8D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06205d-e6a5-4d54-96e8-fe4cd2712306/1/7BZgrIdyubMi7Kxr3pcbEsxsTVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06205d-e6a5-4d54-96e8-fe4cd2712306/1/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.52.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:75:9f:52:8d:8c:ad:a5:da:02:3a:b8:1a:c9:2f:f0:ab:04:
b0:02:b8:63:09:46:a6:7c:ef:94:6a:ce:9d:30:d4:e5:c6:98:
21:0f:55:d3:70:76:90:dc:78:e5:05:01:78:b5:21:fc:43:b6:
06:76:2f:1d:19:35:da:2a:60:d1:a6:e7:1b:6e:80:8a:00:92:
48:c9:d0:4d:5b:11:3d:ca:0b:c6:bd:88:18:67:fd:0a:e0:98:
f3:8c:96:0e:6b:b7:19:e7:3d:4e:69:47:c3:97:e8:1a:cc:00:
6e:6f:df:e3:da:a7:9d:18:09:5a:99:95:01:a9:11:e1:7d:22:
3e:fc:60:36:ec:ff:ea:ab:f7:fe:19:b0:7c:8d:ae:2f:a3:04:
4e:89:00:e5:1f:a5:54:2d:f6:80:2d:e4:7e:d6:42:f2:2f:de:
e7:9a:59:f4:d5:91:56:9f:ef:4b:9b:fa:2b:b3:c2:15:2c:d2:
d1:de:49:bc:2a:dd:2c:1f:ce:07:16:87:20:37:fe:7b:51:9a:
2e:b4:0e:4d:b1:8d:1d:3a:06:f0:a2:2d:c9:a4:7f:9d:55:75:
4b:bd:6b:8a:df:05:de:e6:9c:0f:e4:d4:2e:b0:59:6b:b7:de:
71:fd:b1:97:30:7a:1f:bd:56:5f:0a:d0:a4:54:8e:55:3f:ce:
2f:5b:83:d8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZnImuQOA46NH+f3ARQPzhYJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZDEyMzNmMTEyYTRhMzQzNTU3NWEzYTIxOWRjY2MwMjEw
NjhkOTkwHhcNMjUxMDA5MTA1MzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzE2NjBhYzg3NzJiOWIzMjJlY2FjNmJkZTk3MWIxMmNjNmM0ZDViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCoyKIcoe1DB0/xYzJ9SFMX4Ytu6
gnKIv8l2GR5pHgQLfwnXQa9wOSUvDN/jwXv45h0CaOAnDVS9qDLFGo81xhc64YBn
ZF3MI/aKUhH1Ashjyb+X+3elXsNoGjuo3JOhIcByHgbEX6xBer243iMqG19PUBcw
S7E5NRwU1gczdNSMaYuUFBMSCSaaNvKqak7BJdqMKdCr8zdBUIeVVfidjn6LcaJ9
5HDrvur4lZMbjG/q3UwZc48ahs28IzRu+lEpP6QvTGz5xHHIYQ5pSfXx1QGDbxn4
nPHJzKowEMY1HfYaG2W9Bpa1fRymbjo+Mo5++Hy9dQuxj6eutEVgO9qW4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOwWYKyHcrmzIuysa96XGxLMbE1bMB8GA1UdIwQY
MBaAFGbRIz8RKko0NVdaOiGdzMAhBo2ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnRFalB4RXFTalExVjFvNklaM013Q0VHalprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8wNjIwNWQtZTZhNS00ZDU0LTk2ZTgt
ZmU0Y2QyNzEyMzA2LzEvN0JaZ3JJZHl1Yk1pN0t4cjNwY2JFc3hzVFZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8wNjIwNWQtZTZhNS00ZDU0LTk2ZTgtZmU0Y2QyNzEyMzA2
LzEvWnRFalB4RXFTalExVjFvNklaM013Q0VHalprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwaM0MA0G
CSqGSIb3DQEBCwUAA4IBAQBedZ9SjYytpdoCOrgayS/wqwSwArhjCUamfO+Uas6d
MNTlxpghD1XTcHaQ3HjlBQF4tSH8Q7YGdi8dGTXaKmDRpucbboCKAJJIydBNWxE9
ygvGvYgYZ/0K4JjzjJYOa7cZ5z1OaUfDl+gazABub9/j2qedGAlamZUBqRHhfSI+
/GA27P/qq/f+GbB8ja4vowROiQDlH6VULfaALeR+1kLyL97nmln01ZFWn+9Lm/or
s8IVLNLR3km8Kt0sH84HFocgN/57UZoutA5NsY0dOgbwoi3JpH+dVXVLvWuK3wXe
5pwP5NQusFlrt95x/bGXMHofvVZfCtCkVI5VP84vW4PY
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:24:47 2025 by rpki-client