Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/zHqxbQjsVxET0tUTd0EOVp1axi0.roa
File: zHqxbQjsVxET0tUTd0EOVp1axi0.roa (raw, json)
Hash identifier: 8HunWpHIu087fvWko+Ptb+/I6KzvPWrDFWZjAoDfaKQ=
Subject key identifier: CC:7A:B1:6D:08:EC:57:11:13:D2:D5:13:77:41:0E:56:9D:5A:C6:2D
Certificate issuer: /CN=5871720a8884167fef82a49267661fb346d7561a
Certificate serial: 019A3CADA12DEBAA4E50D29CEFE9E1204EF6
Authority key identifier: 58:71:72:0A:88:84:16:7F:EF:82:A4:92:67:66:1F:B3:46:D7:56:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/zHqxbQjsVxET0tUTd0EOVp1axi0.roa
Signing time: Fri 31 Oct 2025 23:50:03 +0000
ROA not before: Fri 31 Oct 2025 23:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208070
IP address blocks: 45.159.168.0/22 maxlen: 22
45.159.168.0/24 maxlen: 24
45.159.169.0/24 maxlen: 24
45.159.170.0/24 maxlen: 24
45.159.171.0/24 maxlen: 24
2a01:fc00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.mft
rsync://rpki.ripe.net/repository/DEFAULT/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3c:ad:a1:2d:eb:aa:4e:50:d2:9c:ef:e9:e1:20:4e:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5871720a8884167fef82a49267661fb346d7561a
Validity
Not Before: Oct 31 23:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc7ab16d08ec571113d2d51377410e569d5ac62d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ef:6b:fc:17:51:1a:d1:a3:ba:17:e6:41:af:
49:86:f9:f5:19:e2:05:61:b9:9f:1c:ae:e2:fb:7f:
5d:af:80:1e:3a:b9:7b:c3:60:56:0d:00:c8:5e:50:
86:44:7c:50:86:d3:b0:a1:08:b4:80:68:8a:05:06:
4a:68:40:af:f4:8b:1f:48:13:5f:77:9e:95:b6:60:
64:3c:ba:22:cf:6b:69:b3:85:91:75:6e:be:7e:0c:
7c:5d:50:b0:64:b7:96:02:f2:12:e9:26:57:2c:4e:
55:a6:c3:37:56:11:7d:14:cb:76:4f:a6:33:49:b3:
bc:84:b6:b5:ea:dd:37:c5:e8:bb:f3:76:4d:37:0d:
e1:91:36:1b:1a:4a:37:1c:9c:12:21:4d:ac:98:32:
84:96:d7:e8:61:76:9f:88:17:c9:67:48:76:e1:dd:
aa:c6:00:52:71:98:37:6f:a5:72:f0:1d:c9:71:2c:
83:fd:8d:48:de:2f:11:c4:84:f6:c1:c1:85:24:48:
ae:c5:10:cb:47:55:5f:de:5c:83:f6:37:81:ec:02:
0a:f6:67:29:26:41:a6:50:b9:b4:b8:d3:ff:7c:db:
a8:d9:7c:f5:f6:91:6a:e6:2c:cc:ba:69:e5:ee:0c:
13:b5:9f:85:04:76:26:ee:8c:be:0d:44:a6:8a:b5:
ec:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:7A:B1:6D:08:EC:57:11:13:D2:D5:13:77:41:0E:56:9D:5A:C6:2D
X509v3 Authority Key Identifier:
keyid:58:71:72:0A:88:84:16:7F:EF:82:A4:92:67:66:1F:B3:46:D7:56:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/zHqxbQjsVxET0tUTd0EOVp1axi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.168.0/22
IPv6:
2a01:fc00::/29
Signature Algorithm: sha256WithRSAEncryption
37:34:ef:8b:d6:54:96:2e:25:cf:8b:fe:c6:45:5d:5f:1f:9d:
5f:9a:de:8b:ce:4e:d8:10:9e:ff:9a:26:00:a6:86:7e:e2:13:
a2:28:a1:f2:80:24:f3:4f:3a:7f:cf:6a:a0:79:f1:fc:93:7d:
80:20:eb:3a:9a:b7:94:4e:1f:8a:f6:18:4a:b2:bf:4c:55:2f:
90:c5:65:69:fe:a4:36:11:94:b4:12:c0:6b:d3:3c:3a:a6:59:
c0:3c:37:a8:14:b4:81:16:72:9c:ab:73:45:7f:12:0e:98:ad:
d4:31:58:fb:f5:80:9f:0f:08:01:ea:6d:3b:3f:ed:f5:1d:7d:
13:33:1a:1e:4c:93:fc:55:c8:a0:54:34:4f:06:87:71:06:9e:
61:59:5e:7e:fc:fd:28:62:24:be:bf:1c:c9:b2:e6:ad:23:5e:
25:58:b9:33:39:be:66:d4:6f:fa:e6:f6:63:7b:80:c8:11:b1:
d2:b7:b7:7b:f1:6e:50:73:de:f9:ae:84:e1:bd:19:54:93:00:
56:f5:e5:7e:83:87:3d:6f:39:91:a7:4b:75:5b:e9:10:75:ad:
b6:ee:0f:b5:a2:23:f5:b6:20:db:61:b9:8c:72:61:4b:50:38:
62:d0:ca:7d:20:24:c8:a6:40:af:90:85:97:f3:0a:17:e9:2c:
5b:e8:e9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:25:59 2025 by rpki-client