Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/Z9n5DV0w7GnExRRm5adMC5c1O74.roa
File: Z9n5DV0w7GnExRRm5adMC5c1O74.roa (raw, json)
Hash identifier: 61N91t8/tHrGPHbqd/Q8TWwC/7eUsMLcp5Fv9vIC6tI=
Subject key identifier: 67:D9:F9:0D:5D:30:EC:69:C4:C5:14:66:E5:A7:4C:0B:97:35:3B:BE
Certificate issuer: /CN=e19cbb88d2b1a896658506778662e75c732a67e7
Certificate serial: 0197CF3DC98D68A696C631D58DCC9A0AD347
Authority key identifier: E1:9C:BB:88:D2:B1:A8:96:65:85:06:77:86:62:E7:5C:73:2A:67:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/Z9n5DV0w7GnExRRm5adMC5c1O74.roa
Signing time: Thu 03 Jul 2025 07:43:42 +0000
ROA not before: Thu 03 Jul 2025 07:43:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59659
IP address blocks: 5.159.120.0/21 maxlen: 21
185.220.88.0/22 maxlen: 22
185.221.144.0/22 maxlen: 22
2a07:c9c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cf:3d:c9:8d:68:a6:96:c6:31:d5:8d:cc:9a:0a:d3:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19cbb88d2b1a896658506778662e75c732a67e7
Validity
Not Before: Jul 3 07:43:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67d9f90d5d30ec69c4c51466e5a74c0b97353bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:29:9a:15:25:18:88:05:e7:dc:87:18:38:7f:
4e:59:b6:48:0a:e8:bd:ca:32:48:8e:1c:26:f8:cc:
9b:7d:62:c0:6b:4d:8b:08:f5:c4:5b:7d:f6:3a:99:
d8:e5:fb:df:d8:64:87:ea:78:ca:db:73:73:37:f8:
c7:5f:2d:83:55:f3:29:52:d6:0c:83:02:b6:95:c0:
fe:cd:bf:79:af:7a:1f:ce:f4:9a:79:87:e8:2a:cf:
2a:e7:04:bc:03:0a:03:d6:c6:ff:2c:c3:43:a5:a2:
c3:4e:d7:ee:ff:fe:74:60:9f:1f:65:bc:48:1c:52:
b3:72:cb:d8:48:0e:be:54:41:37:5f:89:50:96:ea:
df:1c:8e:e6:28:ca:9d:7f:e4:d5:0e:2f:f3:97:65:
36:60:5a:12:23:45:f4:7d:18:4a:8d:62:a0:85:f4:
46:29:53:30:28:e1:15:c0:d9:76:81:6b:bc:71:74:
62:44:b3:0c:cb:4d:0e:01:b6:93:dc:fc:2c:27:c8:
3b:1b:96:1b:3a:1b:49:f5:ec:f5:11:34:cf:ef:9d:
59:78:04:b2:39:94:77:04:44:da:37:59:e0:a0:c3:
1b:61:68:ef:47:3a:da:67:be:35:61:c4:a9:50:e5:
44:74:6d:5c:76:c6:50:e6:f1:bb:b5:56:1c:17:bf:
a5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D9:F9:0D:5D:30:EC:69:C4:C5:14:66:E5:A7:4C:0B:97:35:3B:BE
X509v3 Authority Key Identifier:
keyid:E1:9C:BB:88:D2:B1:A8:96:65:85:06:77:86:62:E7:5C:73:2A:67:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/Z9n5DV0w7GnExRRm5adMC5c1O74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.159.120.0/21
185.220.88.0/22
185.221.144.0/22
IPv6:
2a07:c9c0::/29
Signature Algorithm: sha256WithRSAEncryption
80:54:20:6f:92:f8:8b:e2:bc:7b:62:a3:c1:a7:02:80:d0:0e:
a6:61:e9:9a:c2:26:41:73:28:aa:71:fd:40:bd:dd:51:c9:dc:
01:19:87:36:bb:33:d1:94:7e:2d:6b:f7:92:96:cb:e7:ad:ad:
c7:58:ab:46:c8:1b:ac:f8:f4:81:08:84:28:b1:72:b8:97:ad:
f6:5a:0e:15:c5:b8:d3:73:ee:70:10:b9:42:6d:bb:c1:f0:e9:
a3:73:9c:32:1e:c2:36:14:c3:5d:30:77:d2:f1:a9:21:14:27:
a6:52:ee:1e:58:ec:f1:70:19:cd:cf:1e:d2:5f:a4:ed:60:52:
51:f2:60:e1:cc:09:26:3c:76:22:10:82:61:9b:c6:4f:85:67:
af:40:b2:30:0f:47:00:13:f8:c8:ec:1d:e8:e4:41:99:db:c8:
ef:ad:df:3a:f5:fb:9f:b6:98:13:7b:76:0e:ad:c4:82:ff:51:
9c:ec:ca:93:85:b8:c1:0c:c9:ba:0f:21:4b:fa:a0:0c:c7:ef:
b4:32:13:3b:1b:85:d0:7d:55:34:a0:2f:b3:a3:e1:86:c2:7b:
13:8a:a8:3e:9f:0b:e6:71:d3:3c:82:8a:70:3e:28:87:13:1b:
95:62:fe:28:81:4a:ab:3f:ff:40:ad:49:1b:44:ce:0f:80:73:
6d:ce:17:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:44:38 2025 by rpki-client