Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/ZUMP4gFwulXOpnT82AiRknnGbj0.roa
File: ZUMP4gFwulXOpnT82AiRknnGbj0.roa (raw, json)
Hash identifier: bDRLu83yHenh9/HNiwqhOVvpz6DGXK6dcJiMgfWy7JM=
Subject key identifier: 65:43:0F:E2:01:70:BA:55:CE:A6:74:FC:D8:08:91:92:79:C6:6E:3D
Certificate issuer: /CN=6c8e64e0710d32f26a36d68cff7b3f86ac820ceb
Certificate serial: 01976891C4A713EEF417192F6CF98A9888E1
Authority key identifier: 6C:8E:64:E0:71:0D:32:F2:6A:36:D6:8C:FF:7B:3F:86:AC:82:0C:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/ZUMP4gFwulXOpnT82AiRknnGbj0.roa
Signing time: Fri 13 Jun 2025 09:14:32 +0000
ROA not before: Fri 13 Jun 2025 09:14:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3303
IP address blocks: 194.147.234.0/24 maxlen: 24
194.147.235.0/24 maxlen: 24
194.147.236.0/24 maxlen: 24
194.147.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:91:c4:a7:13:ee:f4:17:19:2f:6c:f9:8a:98:88:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8e64e0710d32f26a36d68cff7b3f86ac820ceb
Validity
Not Before: Jun 13 09:14:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65430fe20170ba55cea674fcd808919279c66e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3c:ad:30:4d:6a:96:b8:33:d2:fd:85:af:74:
f3:31:ee:34:4d:8b:1f:39:e0:11:b8:9f:42:bb:b8:
e8:4d:b3:d1:86:46:3d:80:79:90:a9:82:2c:56:45:
b5:cc:68:3b:86:5d:05:59:41:08:f2:95:85:fb:f8:
87:50:ff:26:20:09:18:a2:fe:1b:7b:90:7c:5f:df:
8d:c7:6e:19:b4:ec:3c:1a:39:55:cf:10:99:c8:4b:
3e:e1:cf:ee:20:3f:06:94:d2:a5:cc:d3:05:db:f8:
17:96:cc:e0:91:ea:36:7c:05:3b:7e:85:3c:3c:cc:
8f:e3:8d:7a:39:3d:db:7d:2e:c1:b1:7a:2c:42:f7:
b2:34:8c:67:18:8f:76:ac:11:d7:c0:8d:30:93:cc:
bd:1b:a0:e4:8e:85:92:16:07:2c:77:30:14:92:f7:
0b:3f:46:a3:09:13:e4:31:4f:5f:6b:b9:35:8c:4e:
1f:2e:fe:56:c3:39:7d:2f:e1:e9:e9:25:e2:ef:27:
7c:37:84:99:a9:56:4c:90:ca:3c:41:11:57:4e:08:
84:96:95:46:1b:d8:90:c4:f9:85:9b:57:97:34:20:
2e:6b:aa:5b:01:4e:4a:c4:ae:83:3d:97:98:fd:51:
ad:bd:9e:bd:e1:a1:c6:29:cb:b3:15:66:65:da:72:
25:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:43:0F:E2:01:70:BA:55:CE:A6:74:FC:D8:08:91:92:79:C6:6E:3D
X509v3 Authority Key Identifier:
keyid:6C:8E:64:E0:71:0D:32:F2:6A:36:D6:8C:FF:7B:3F:86:AC:82:0C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/ZUMP4gFwulXOpnT82AiRknnGbj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.234.0-194.147.237.255
Signature Algorithm: sha256WithRSAEncryption
11:68:25:51:81:0f:17:ae:85:1d:08:51:2f:58:e7:f8:94:dc:
b4:1c:99:2e:3f:54:0b:29:7c:d4:9b:14:a2:34:1a:fd:c5:6e:
15:2d:3c:2d:b6:a2:a6:66:ba:3a:17:90:22:0b:3e:71:db:b1:
01:f3:07:ab:93:c4:0e:fa:41:d8:9a:d2:15:ff:92:80:8f:db:
8e:a1:8b:37:78:37:59:96:b2:9a:0b:29:e7:7b:4c:09:cf:14:
21:34:a7:85:e2:23:b3:94:49:01:03:47:86:74:ff:2c:b8:f6:
10:38:c0:4e:03:f8:4b:da:4c:0c:45:cf:63:8d:ce:9d:80:34:
15:6c:39:2d:30:06:26:09:f4:a9:b1:65:d1:ca:0b:07:29:8f:
e5:63:54:d9:33:69:3f:39:9e:ae:d8:62:49:38:33:57:2b:cc:
6e:7e:0c:86:ff:6c:1b:8f:e5:eb:8c:d1:5b:13:f8:0a:9a:76:
b0:1f:74:66:61:21:8a:23:47:ec:a0:31:e3:27:d6:1b:53:94:
e7:e7:8e:fa:6c:2c:c0:e2:1f:d4:05:ee:5e:8c:b8:25:b9:4e:
e2:9b:7e:c6:be:e1:b5:33:cf:2e:db:ed:ae:d9:5b:33:86:e8:
69:5e:28:ce:9e:59:d4:78:bb:1e:2c:2f:1d:f7:7e:9a:21:7f:
fc:08:c8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:50:23 2025 by rpki-client