Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/zOvi4tvGqA3pjzv5kT1FkiWDZmc.roa
File: zOvi4tvGqA3pjzv5kT1FkiWDZmc.roa (raw, json)
Hash identifier: 434rv4cRKqLcMYo5GvbFFeFDY6XbKZly6Jd8xQdtOsE=
Subject key identifier: CC:EB:E2:E2:DB:C6:A8:0D:E9:8F:3B:F9:91:3D:45:92:25:83:66:67
Certificate issuer: /CN=3bd9a177bb5dfb6eabe4cad79def8f8b005df656
Certificate serial: 019A2BEC622BCF0456A414F56CC4F956C48D
Authority key identifier: 3B:D9:A1:77:BB:5D:FB:6E:AB:E4:CA:D7:9D:EF:8F:8B:00:5D:F6:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/zOvi4tvGqA3pjzv5kT1FkiWDZmc.roa
Signing time: Tue 28 Oct 2025 17:45:02 +0000
ROA not before: Tue 28 Oct 2025 17:45:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197450
IP address blocks: 213.190.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2b:ec:62:2b:cf:04:56:a4:14:f5:6c:c4:f9:56:c4:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd9a177bb5dfb6eabe4cad79def8f8b005df656
Validity
Not Before: Oct 28 17:45:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ccebe2e2dbc6a80de98f3bf9913d459225836667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:76:f7:4d:65:9c:5c:a2:d1:af:f1:14:af:16:
88:94:c9:b8:fb:25:29:ac:0b:32:72:09:4c:9d:eb:
d0:bd:42:6a:b3:2d:75:37:0b:56:c9:05:16:a3:3c:
f0:fe:c2:d8:99:a6:ce:d4:35:e8:77:cd:a8:d1:d0:
98:99:2d:8c:bc:04:c3:92:e4:9d:b3:76:c4:c7:e5:
4b:f4:70:57:60:8e:64:0e:3c:c4:26:b1:13:8d:5f:
45:df:74:e8:10:69:d3:fc:68:b9:59:f1:e4:59:d5:
b6:d3:fe:8e:22:7b:cd:63:b0:03:08:cb:02:18:48:
2e:75:ac:42:08:6b:50:f9:08:d2:71:34:de:be:4f:
a3:bf:db:9a:c5:2d:54:94:28:a3:e6:07:b3:45:2f:
3a:a9:8c:24:af:6d:65:c0:6a:87:3e:d4:b7:bf:73:
62:c5:24:37:6b:d2:3f:ce:f0:7d:3b:ca:46:dc:a1:
8a:ac:dd:19:cd:5c:db:54:e7:e8:22:54:bd:70:32:
6e:c4:64:b9:dd:4c:c7:e0:18:d8:79:c0:a2:ca:3f:
ca:1c:c3:7d:64:18:36:d4:91:97:14:12:9d:a9:7e:
dc:c5:12:7b:eb:01:80:4f:0c:3a:c3:e1:77:8d:ba:
c3:44:c2:ea:6d:50:bb:33:f4:79:ed:81:a0:68:7d:
f1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:EB:E2:E2:DB:C6:A8:0D:E9:8F:3B:F9:91:3D:45:92:25:83:66:67
X509v3 Authority Key Identifier:
keyid:3B:D9:A1:77:BB:5D:FB:6E:AB:E4:CA:D7:9D:EF:8F:8B:00:5D:F6:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/zOvi4tvGqA3pjzv5kT1FkiWDZmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.190.15.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:b6:87:68:25:4a:ff:dc:ee:0d:85:d7:28:44:de:48:86:13:
d6:19:04:12:56:86:0e:cb:4b:69:55:33:20:43:9b:1b:e7:00:
81:f1:ef:fc:2d:e1:4d:78:b2:56:5a:1f:92:ae:34:a5:ce:9a:
a0:a0:c5:07:5c:b2:49:56:8a:df:99:cd:c5:44:0b:43:94:91:
2a:24:1f:af:26:59:97:d8:45:a5:03:92:2f:27:4e:db:86:53:
40:14:c3:a5:d9:ef:fe:72:73:e6:42:27:10:8b:a5:ea:31:23:
33:25:ad:42:d8:7f:1e:d3:b0:a1:fb:88:9e:ac:02:dd:dd:46:
ea:e5:d2:2a:85:8e:81:c6:f5:90:3b:f8:6e:6c:60:1b:09:d1:
b0:9c:42:a1:60:df:c3:c9:0f:b2:b7:5a:f6:ba:ea:86:20:29:
17:1c:ee:94:41:d2:72:1a:85:87:39:86:bf:19:cb:0b:11:96:
6d:8d:63:8a:87:16:72:6f:d3:6d:32:6a:87:bb:42:96:fa:05:
fe:13:9d:4d:81:b7:65:6e:f3:b6:f4:9a:98:fa:88:19:fc:56:
b3:3f:bb:0a:9f:2f:27:46:b9:f0:f2:b2:b6:1b:74:64:a9:70:
d4:f6:de:7e:de:21:c1:d9:70:ef:ef:53:54:5e:18:bd:f4:27:
b6:23:82:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:54:45 2025 by rpki-client