Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/ZleKFX2c56S9sK2K4_tHcqLSDL4.roa
File: ZleKFX2c56S9sK2K4_tHcqLSDL4.roa (raw, json)
Hash identifier: TvdU/t0E/qrTUc3W9TxNnOBWzJJWrMp0rSNMHVzOglc=
Subject key identifier: 66:57:8A:15:7D:9C:E7:A4:BD:B0:AD:8A:E3:FB:47:72:A2:D2:0C:BE
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01975A40AF833C9A9AE6837C954C3FE9BD8F
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/ZleKFX2c56S9sK2K4_tHcqLSDL4.roa
Signing time: Tue 10 Jun 2025 14:31:18 +0000
ROA not before: Tue 10 Jun 2025 14:31:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201670
IP address blocks: 193.233.246.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:40:af:83:3c:9a:9a:e6:83:7c:95:4c:3f:e9:bd:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jun 10 14:31:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66578a157d9ce7a4bdb0ad8ae3fb4772a2d20cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:be:31:43:bf:ab:05:cd:81:5f:52:a1:67:30:
e2:e3:69:42:05:ec:6d:1f:98:12:ce:45:03:99:c5:
b9:92:e1:ae:cc:cc:1c:ff:bb:30:ad:86:2f:75:3b:
94:94:18:46:18:9b:e2:91:f3:bd:45:48:2d:9b:fa:
04:b7:80:01:b5:e9:fd:96:da:23:02:b6:2f:d7:56:
be:10:30:19:7e:e7:7e:b1:19:9b:66:cf:68:24:b7:
ca:41:8c:0b:1b:68:24:c5:79:ec:b3:48:d9:45:60:
21:90:d8:b6:8a:05:cf:49:b5:73:27:c6:78:f5:bc:
b6:fc:af:1f:9c:d9:87:d2:94:08:52:f8:a3:e7:af:
b3:3e:56:60:f1:b0:f1:5b:da:88:73:78:30:b7:52:
dc:b7:df:b7:cd:5e:27:36:b0:b2:9c:2e:76:54:ad:
ee:69:10:ce:6d:6f:55:73:96:e7:ca:0b:b9:45:ce:
2b:4d:99:5b:81:e9:ee:b6:98:ef:ec:8d:57:d6:cd:
3f:6b:5d:2b:d3:a7:2b:cd:5f:a6:c2:4f:a2:d2:e3:
7a:0a:37:f3:5e:01:04:2d:5b:34:ac:cc:d3:a2:17:
62:df:46:e4:88:91:09:4b:d2:01:f0:8a:d3:3b:7a:
e3:5d:8e:fe:23:28:22:2e:af:a6:5a:b3:48:30:9f:
63:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:57:8A:15:7D:9C:E7:A4:BD:B0:AD:8A:E3:FB:47:72:A2:D2:0C:BE
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/ZleKFX2c56S9sK2K4_tHcqLSDL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.246.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:f6:d0:7f:1b:c5:01:90:fe:46:8b:71:34:f1:fd:92:dc:f8:
b5:99:fa:76:e2:28:6e:9a:4f:03:8f:d8:0e:01:83:59:11:86:
aa:ff:7d:88:7b:6a:62:e6:5e:18:df:4c:e9:a1:34:6d:cf:a3:
61:b8:40:e3:1f:2f:f4:00:5d:14:19:ae:14:fa:28:a6:ab:05:
c3:ca:48:0d:05:52:3d:f8:ea:73:0b:bd:ec:40:ef:38:2e:47:
3e:05:ef:5b:fb:32:68:95:47:48:f6:00:67:5f:18:d3:08:bf:
29:80:ab:7f:9b:58:9c:be:71:8e:ed:70:b8:f6:2b:fd:e9:5b:
8b:66:90:a5:7a:5a:61:a3:ca:e5:e3:72:e9:10:f4:e1:64:20:
ec:93:17:4f:c8:f1:f1:94:a7:35:74:2d:9b:fb:66:b1:fb:89:
cf:0b:46:39:9f:28:16:6e:a5:9d:e3:b9:8e:a1:b5:15:45:67:
f8:ca:aa:c7:ca:af:77:dd:74:e8:21:06:39:cf:15:b0:2d:4f:
2b:26:22:35:66:02:e8:da:ff:6e:b1:10:e5:f8:9d:ae:60:b2:
e1:ba:17:cc:d4:ba:31:d8:f7:8a:81:86:67:3a:cc:40:67:3f:
8e:ec:b1:66:79:90:73:79:f3:85:2d:cf:26:9b:6d:7e:ee:ae:
8b:f7:bc:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:11:10 2025 by rpki-client