Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ZwkIMYeP8W1sXE80XefBozKorb4.roa
File: ZwkIMYeP8W1sXE80XefBozKorb4.roa (raw, json)
Hash identifier: YtErHBBk9ocIUZuC6kmpgxpo4rJjX/vDWJ+dzxnESaM=
Subject key identifier: 67:09:08:31:87:8F:F1:6D:6C:5C:4F:34:5D:E7:C1:A3:32:A8:AD:BE
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0198698DAFE8DA75907669B7C2C9CFB5AF04
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ZwkIMYeP8W1sXE80XefBozKorb4.roa
Signing time: Sat 02 Aug 2025 06:52:29 +0000
ROA not before: Sat 02 Aug 2025 06:52:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207695
IP address blocks: 5.231.56.0/24 maxlen: 24
77.90.41.0/24 maxlen: 24
77.90.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 13:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:69:8d:af:e8:da:75:90:76:69:b7:c2:c9:cf:b5:af:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 2 06:52:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67090831878ff16d6c5c4f345de7c1a332a8adbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:be:99:7e:d1:b3:66:33:38:e1:28:cc:59:5e:
ec:70:d6:b0:d2:ca:c6:6e:70:e6:6c:92:3d:ec:34:
2f:42:40:ca:ae:d6:33:3e:3c:8f:ef:a3:65:f7:03:
21:6d:48:84:e3:a8:88:69:99:a4:e1:74:36:67:81:
0c:b5:7b:d8:bd:e8:0e:e9:0f:b0:92:ec:dc:9f:76:
e2:c5:b2:bc:88:6c:47:d9:6d:0e:05:5f:fa:24:b6:
0a:b3:f6:9e:12:3c:86:61:bc:71:d9:01:70:99:cc:
e0:60:9e:4a:d0:15:a7:9b:d0:d3:af:2a:1d:7f:57:
4b:1b:56:42:e9:03:d1:d9:85:03:c8:a4:ff:cf:07:
7e:d5:40:25:b4:e4:27:16:d1:d4:16:8e:5d:fe:6e:
a9:da:5f:ed:31:3e:42:3e:fb:4d:df:bf:1c:ea:cc:
36:63:ee:74:f4:9f:e3:74:30:e2:5c:b7:b1:9d:f4:
b9:b1:8b:a2:ba:ee:ea:5b:f8:df:e0:04:3f:cf:76:
19:72:0b:9f:c1:e2:ec:2c:6c:ca:2d:74:a1:53:ae:
38:06:0a:3a:21:9a:a8:78:23:61:0e:b2:61:b7:dd:
54:06:06:84:08:26:30:6b:53:ee:2f:3a:dd:ea:d6:
e8:10:09:97:34:42:8f:6e:e8:31:0e:78:19:fd:69:
cc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:09:08:31:87:8F:F1:6D:6C:5C:4F:34:5D:E7:C1:A3:32:A8:AD:BE
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ZwkIMYeP8W1sXE80XefBozKorb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.56.0/24
77.90.41.0/24
77.90.52.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:47:1d:bd:59:6f:41:d9:4f:9a:ec:0e:b1:f7:de:c4:1a:91:
e7:48:1c:47:aa:6d:40:31:d8:57:35:94:a7:ac:e3:f4:4f:d1:
ab:66:9f:ba:64:c8:e9:2f:9c:eb:7f:e2:f6:25:7d:9b:8f:0c:
f8:3d:63:68:b3:c9:07:5a:76:3b:b7:cd:02:82:cc:18:f5:be:
05:32:91:fb:55:c6:e1:b9:95:14:e2:e0:a5:6d:90:70:28:c6:
05:a0:03:b0:30:fb:b5:3a:b4:a9:ae:52:1d:ac:0d:cb:af:ee:
38:a5:5a:75:28:41:a8:fc:3d:0d:58:36:43:d7:7e:48:2a:4d:
32:46:54:01:15:69:ba:b9:42:47:c4:7b:52:ad:f5:31:fe:f5:
b7:b5:e0:e1:6f:76:33:fb:cd:f2:a1:b1:53:00:df:19:51:d3:
22:1e:99:b9:c6:08:22:81:2e:5d:a5:d9:7a:58:69:14:cf:3e:
e7:32:4e:65:63:e2:70:80:6d:bc:94:75:b1:22:78:c9:35:a9:
84:e0:4a:f9:16:fb:fa:6a:49:0e:6c:cb:56:5d:cb:1b:3c:0d:
3c:84:78:d5:75:ed:1d:e8:6f:33:80:9e:e4:2d:4f:84:79:b7:
60:75:44:be:aa:a5:a8:b5:66:c6:4b:03:09:f3:c7:10:92:60:
b7:e5:04:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:24:46 2025 by rpki-client