Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/qZSZRgV-vJBf_xQykzfiics3mkU.roa
File: qZSZRgV-vJBf_xQykzfiics3mkU.roa (raw, json)
Hash identifier: dWHqzEvTKVEmGqupQR8c601UkkKIg6uw+FC0NrVnCvY=
Subject key identifier: A9:94:99:46:05:7E:BC:90:5F:FF:14:32:93:37:E2:89:CB:37:9A:45
Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277
Certificate serial: 019A3C1DE3F1153E8D246F23C2F811CB98C4
Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/qZSZRgV-vJBf_xQykzfiics3mkU.roa
Signing time: Fri 31 Oct 2025 21:13:03 +0000
ROA not before: Fri 31 Oct 2025 21:13:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207432
IP address blocks: 80.83.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3c:1d:e3:f1:15:3e:8d:24:6f:23:c2:f8:11:cb:98:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277
Validity
Not Before: Oct 31 21:13:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9949946057ebc905fff14329337e289cb379a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:16:7e:06:e7:ba:ac:42:77:1e:da:c6:20:30:
47:53:00:89:61:33:a9:82:53:06:83:2d:ef:be:b4:
a4:c6:38:b5:60:d8:c4:78:57:7c:82:c4:08:78:64:
7d:c7:41:9c:34:27:13:9d:4f:33:ea:24:3f:ba:cd:
58:88:67:98:2e:0a:05:15:4e:46:bc:1b:c2:14:2f:
83:ca:50:87:9c:e2:03:bb:a2:83:34:9b:aa:ef:29:
e0:e1:16:30:01:4a:d0:e3:b4:76:6d:7f:47:88:79:
40:b2:6b:12:85:65:67:51:5b:0c:5f:18:29:f0:ec:
61:d6:38:56:37:72:1f:eb:7f:ca:92:39:06:b3:22:
70:a8:d4:0e:72:18:9c:1d:2c:cb:4a:29:cc:d8:9e:
a5:06:6e:5a:03:72:33:71:6f:d6:6f:30:e2:a2:06:
0d:92:52:69:5b:a8:38:4a:a9:01:52:b6:8d:24:b4:
67:b3:fa:7d:47:a2:ed:f1:b4:eb:2c:61:21:51:1e:
89:31:86:79:84:cf:ed:d2:e7:2a:e7:52:eb:4f:80:
67:6c:9b:ee:59:dc:85:78:ff:60:0d:2c:63:32:8c:
5c:3b:be:a2:4d:dc:f7:57:e0:c4:55:9f:87:c3:6e:
1b:a9:94:ba:50:11:aa:21:c9:e1:6f:da:c9:3d:33:
1a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:94:99:46:05:7E:BC:90:5F:FF:14:32:93:37:E2:89:CB:37:9A:45
X509v3 Authority Key Identifier:
keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/qZSZRgV-vJBf_xQykzfiics3mkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.83.88.0/23
Signature Algorithm: sha256WithRSAEncryption
96:79:e3:28:f2:bc:79:21:67:c8:cd:76:9d:e4:0e:f3:90:25:
53:c5:0f:7a:52:74:a8:c9:ab:12:a9:85:52:63:f3:5a:92:97:
52:57:08:52:04:46:c0:70:0b:b1:62:39:52:84:be:ab:79:ce:
ef:7d:e0:a7:f6:c2:2e:68:a2:82:9f:38:b7:60:c9:3c:49:ef:
2a:05:1f:bc:96:1c:74:57:03:79:0e:17:c9:da:4b:51:22:bd:
62:46:1c:c5:4c:9b:80:8e:6c:6c:d8:8c:e8:57:1c:20:58:57:
45:f8:f7:88:77:a3:44:49:34:f0:51:2a:a1:aa:56:39:58:fc:
95:a7:7a:7e:88:8c:8a:e3:e4:9d:fd:c0:41:97:ca:8f:cd:5c:
e1:33:8c:b1:4f:cb:5a:dc:36:aa:07:27:ce:3b:c5:57:18:f1:
41:a4:4b:2a:38:f2:cd:fd:7d:47:02:9c:b8:a7:69:b6:5d:5e:
60:8a:55:6f:7e:9f:f1:38:cc:91:13:84:01:3e:3d:d6:67:f3:
06:ae:d6:02:96:f5:12:b8:47:1b:b9:27:87:bc:fc:d9:83:ca:
76:74:35:69:bd:c3:2b:ed:8e:90:6b:1a:da:4e:3f:c9:46:14:
e6:38:a9:a8:b1:68:c8:b5:61:cd:a7:7a:45:8f:3b:a1:81:ef:
c7:45:cd:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:14:56 2025 by rpki-client