Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/zldR7t2bu_wertKzQ3TJznNKjCE.roa
File: zldR7t2bu_wertKzQ3TJznNKjCE.roa (raw, json)
Hash identifier: Yg9qWkGrkBhdxY/Lab0rn600w8RlUBzjFYaLiDvl9fw=
Subject key identifier: CE:57:51:EE:DD:9B:BB:FC:1E:AE:D2:B3:43:74:C9:CE:73:4A:8C:21
Certificate issuer: /CN=1c6c48cccce321ec18702957b396381a1f1a0410
Certificate serial: 01984FFA5EFA3C4EACD56482CE771297FD4C
Authority key identifier: 1C:6C:48:CC:CC:E3:21:EC:18:70:29:57:B3:96:38:1A:1F:1A:04:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/zldR7t2bu_wertKzQ3TJznNKjCE.roa
Signing time: Mon 28 Jul 2025 07:41:04 +0000
ROA not before: Mon 28 Jul 2025 07:41:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29196
IP address blocks: 185.253.136.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4f:fa:5e:fa:3c:4e:ac:d5:64:82:ce:77:12:97:fd:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c6c48cccce321ec18702957b396381a1f1a0410
Validity
Not Before: Jul 28 07:41:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce5751eedd9bbbfc1eaed2b34374c9ce734a8c21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8e:e8:2a:3d:ee:5b:1d:47:38:e4:15:3c:76:
0c:87:44:84:13:45:92:be:1d:07:90:87:62:f4:7c:
9f:ce:e2:ff:77:b9:84:8e:51:af:16:a6:6c:f5:71:
d3:d8:5f:11:8d:0c:d0:8e:a6:76:78:33:3b:f9:e8:
6e:a4:f6:fa:a3:fd:3e:97:fd:76:24:54:f3:d9:7f:
50:c7:be:03:84:0e:44:79:6f:28:c9:cd:ec:af:4f:
3c:c5:3a:93:b6:74:ef:1d:04:5c:b0:0d:b1:75:81:
35:dd:15:02:55:3b:71:4a:80:da:ca:3c:33:05:ea:
9a:db:4e:cf:87:16:f1:a9:8f:99:dd:b2:eb:20:bb:
cd:79:ac:5f:fc:fd:8d:82:36:86:37:b1:eb:ad:9a:
b3:e9:a2:50:56:73:46:1c:fa:e3:02:af:1c:9a:f9:
d4:2a:98:0d:77:4b:70:bb:88:9d:59:76:2a:0d:d3:
dd:13:42:95:2c:69:d2:d7:0d:89:b0:3a:02:46:fb:
98:2f:2e:c6:b2:a0:bf:a3:2c:fa:b5:8a:f0:9b:34:
7a:ce:88:b3:6d:68:ce:7e:11:77:32:a2:ae:d9:7e:
85:42:14:1e:d6:b5:42:9a:76:55:56:36:3d:8b:59:
7c:da:a9:cf:71:05:2a:b4:ef:a4:f2:65:27:2a:32:
09:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:57:51:EE:DD:9B:BB:FC:1E:AE:D2:B3:43:74:C9:CE:73:4A:8C:21
X509v3 Authority Key Identifier:
keyid:1C:6C:48:CC:CC:E3:21:EC:18:70:29:57:B3:96:38:1A:1F:1A:04:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/zldR7t2bu_wertKzQ3TJznNKjCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.136.0/22
Signature Algorithm: sha256WithRSAEncryption
86:61:bd:ca:f0:ff:44:18:6e:2f:44:f4:6e:cb:d5:3c:36:a5:
68:73:19:b5:70:34:73:78:fb:e7:d7:0b:f9:d1:38:b5:57:c4:
6f:af:00:f8:81:c0:a2:84:76:a5:1c:8c:ac:31:38:28:2d:ae:
2c:88:a3:cf:78:ed:23:54:8e:26:f1:df:57:f1:1c:ab:03:17:
76:2f:96:31:9b:18:e6:dc:93:c9:c3:35:d4:6c:bc:ad:6d:b5:
01:39:82:da:56:32:85:b2:96:00:96:ca:a6:cd:d3:eb:dc:26:
a7:06:5b:43:78:0c:59:a7:72:43:08:91:08:63:92:3e:09:64:
4f:3a:68:15:77:2d:76:b8:ee:63:7f:c8:ee:5e:c0:cc:16:2e:
82:97:f2:6e:34:f0:e7:2a:ae:85:fc:dd:16:bb:c2:62:d2:05:
83:09:ac:e6:34:57:00:b0:50:2f:73:e9:d2:ba:d3:53:69:29:
72:3a:53:ad:5c:fc:30:50:b4:ee:f5:39:c9:3b:6b:a4:12:c1:
5e:25:61:5c:73:36:0e:46:4b:c3:a7:47:71:e7:91:95:f0:ed:
c1:4c:39:33:72:c4:b5:c0:ca:eb:b7:78:b9:84:12:a9:53:e9:
de:31:5a:d0:2f:c1:7f:c8:61:e8:96:ef:7c:98:bc:44:04:bd:
6e:95:de:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:53:04 2025 by rpki-client