
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Zb-B2XlytbC4lYcrNPUwSOa1Nsc.roa
File: Zb-B2XlytbC4lYcrNPUwSOa1Nsc.roa (raw, json)
Hash identifier: bhAje833MgrJXjVSYtQ4323FI8Rb2fG68Zi2M0p8byA=
Subject key identifier: 65:BF:81:D9:79:72:B5:B0:B8:95:87:2B:34:F5:30:48:E6:B5:36:C7
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01982C42687528825A28B73E5F862047272A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Zb-B2XlytbC4lYcrNPUwSOa1Nsc.roa
Signing time: Mon 21 Jul 2025 09:13:26 +0000
ROA not before: Mon 21 Jul 2025 09:13:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49581
IP address blocks: 45.151.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2c:42:68:75:28:82:5a:28:b7:3e:5f:86:20:47:27:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 21 09:13:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65bf81d97972b5b0b895872b34f53048e6b536c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:be:d8:7c:e7:f9:bf:e0:3a:fe:86:db:a3:55:
64:50:72:5d:62:11:7e:ed:a7:c3:63:f8:d5:13:6f:
e5:9b:ef:eb:95:6d:2d:40:2f:b2:d4:67:27:d5:e9:
a1:df:25:1d:60:68:1f:be:46:bd:46:db:92:5b:18:
b7:33:5e:f9:ed:2a:2a:97:cd:24:de:64:01:4c:7b:
ff:f4:98:94:aa:32:0e:8d:ce:a0:9f:cb:21:42:f6:
99:66:3e:c7:89:e4:4e:3f:b9:4d:dd:92:91:d3:9a:
6f:e2:34:c2:71:ae:f6:13:b1:33:20:ba:c4:26:22:
80:78:3b:91:16:ee:df:27:f0:3a:76:de:40:7d:50:
b4:9e:68:aa:28:b4:56:4b:27:56:93:7a:e4:ef:88:
f0:73:25:f7:65:c4:84:f7:36:b7:55:19:f0:68:0f:
b1:aa:e1:05:f6:b8:3b:a8:ab:5e:b4:ee:49:0c:e7:
e8:03:f1:12:24:8c:4e:ef:eb:92:32:63:0f:60:4d:
bc:08:e4:0b:46:b0:3b:f0:8c:6b:ab:d3:e4:96:c8:
eb:95:23:be:eb:db:44:9f:cc:cc:0e:48:58:d5:34:
c5:56:c3:61:76:ba:1c:9f:65:a2:e2:f5:a0:a3:ea:
b6:ee:d9:87:01:bf:ad:6e:1f:30:a7:f0:c7:d2:ad:
b6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:BF:81:D9:79:72:B5:B0:B8:95:87:2B:34:F5:30:48:E6:B5:36:C7
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Zb-B2XlytbC4lYcrNPUwSOa1Nsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.90.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:9d:d0:41:76:83:fc:26:3f:4a:46:0c:02:32:e7:5b:a6:70:
94:93:a8:9a:64:07:92:b0:de:28:b4:46:07:f7:d1:9f:4f:d8:
74:23:86:7c:73:8c:69:e1:be:79:4c:99:3d:36:c3:eb:5c:f7:
78:da:49:9e:ae:36:4c:99:9e:ef:01:4e:79:e6:03:b7:86:83:
1d:ee:19:d8:38:fd:dd:dc:bf:62:f8:f9:ab:47:75:32:37:14:
9f:5d:6c:9c:54:0e:c3:c3:dc:3e:b8:1b:3c:7d:99:d5:2a:fd:
a9:ae:22:74:64:55:ae:9c:3b:ef:7d:c1:35:e6:aa:76:3f:19:
7b:62:83:56:68:ab:01:7e:97:ef:68:79:6a:35:f6:20:d6:14:
70:76:b9:a9:ba:04:aa:2a:42:0d:50:9e:dd:0e:36:66:66:06:
2f:02:0c:4c:16:4a:85:a7:60:d9:41:57:1b:26:27:0a:7d:71:
0f:e3:60:da:34:6c:1a:4f:e3:8b:05:ec:39:6d:39:5c:bd:bd:
df:71:cf:a1:72:6d:e8:d9:d8:b9:0e:21:85:33:88:79:40:ec:
36:95:fa:9e:14:e8:8b:b3:84:d5:0d:4f:c9:56:8b:89:2c:be:
c3:d1:d9:eb:22:81:40:2f:da:11:0f:ba:d0:b9:bd:0d:5c:38:
14:e4:3e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:18:53 2025 by rpki-client