Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/zAC2MLNJrmguNG5Jgx7gNvDzV-4.roa
File: zAC2MLNJrmguNG5Jgx7gNvDzV-4.roa (raw, json)
Hash identifier: FC34BHiFfWv+RgcCSV025nDem+cRfaFiqLlBEcQFqPA=
Subject key identifier: CC:00:B6:30:B3:49:AE:68:2E:34:6E:49:83:1E:E0:36:F0:F3:57:EE
Certificate issuer: /CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Certificate serial: 019A33D49D49F813224279DB4BA5BC578B2F
Authority key identifier: D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/zAC2MLNJrmguNG5Jgx7gNvDzV-4.roa
Signing time: Thu 30 Oct 2025 06:36:03 +0000
ROA not before: Thu 30 Oct 2025 06:36:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59432
IP address blocks: 78.108.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:33:d4:9d:49:f8:13:22:42:79:db:4b:a5:bc:57:8b:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Validity
Not Before: Oct 30 06:36:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc00b630b349ae682e346e49831ee036f0f357ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f4:dc:09:e6:3c:1f:4c:59:ff:e4:f7:cc:61:
52:f4:b1:04:76:55:15:6b:ec:e3:5c:d9:e8:85:b2:
ba:cf:6a:e8:9c:26:37:c3:c7:e7:1a:7f:cf:8a:8b:
8d:f8:d8:c4:94:85:75:d9:e5:4e:b9:d2:ad:18:70:
e7:f5:c7:ad:02:52:d9:4f:9a:c3:bd:63:ac:3c:b0:
f6:0a:51:e7:85:9b:d9:b1:90:62:98:ed:9c:50:53:
d1:dc:fd:bc:99:f9:8d:ff:83:ba:d2:b3:bf:81:2c:
d9:e1:ee:76:e9:e7:0e:8f:3a:2d:a3:d1:32:da:c5:
2a:a9:96:85:26:0c:8b:91:f2:d4:31:61:dd:ce:93:
f8:2e:25:e1:67:5b:88:74:a9:0b:76:d7:bd:79:c0:
cf:39:b4:18:14:5c:7c:fe:e5:6b:de:4d:6c:2e:5e:
ae:08:3a:e1:74:eb:c9:e1:e8:19:f7:5e:47:c9:27:
64:92:de:3e:ea:f0:70:d7:94:a7:3e:e4:0b:09:82:
e7:cf:ae:a2:13:a3:59:6a:de:7c:06:63:4c:30:86:
34:a4:32:f5:1e:8d:eb:df:be:92:6d:75:32:ef:9a:
85:7c:16:d1:5a:85:d1:79:88:35:d2:0f:86:da:a3:
b2:0f:df:a1:f5:29:a4:3a:94:2d:c4:09:dd:e7:c4:
a6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:00:B6:30:B3:49:AE:68:2E:34:6E:49:83:1E:E0:36:F0:F3:57:EE
X509v3 Authority Key Identifier:
keyid:D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/zAC2MLNJrmguNG5Jgx7gNvDzV-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.60.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:39:c1:6e:38:f8:d7:30:f3:4c:4a:64:48:89:96:d3:e7:69:
8a:ef:09:58:b6:cf:cd:89:c5:ac:b7:cd:b7:28:ff:3b:a1:56:
b7:a6:2e:9e:f1:cf:fa:73:e2:3f:d2:4a:22:92:74:84:f7:21:
59:48:ba:f6:6c:2b:21:16:ee:d1:3f:c4:64:a3:f2:f3:d9:9d:
1e:c1:98:65:63:3c:01:4c:46:03:60:fe:fa:74:76:10:78:b9:
60:f1:1d:e5:de:bc:1c:22:48:5b:a3:35:3d:8b:77:48:2f:25:
c4:a7:f4:76:36:d6:d1:e4:7e:93:12:dc:1f:41:14:fc:af:cf:
c6:d3:40:fe:b8:90:94:3a:bb:4a:3d:ed:cb:ff:41:7f:63:76:
04:7a:d6:d1:7c:74:1d:74:9b:77:e8:63:3e:61:6e:af:22:56:
be:fd:1f:61:c2:85:04:b3:20:a9:88:45:45:bc:26:f9:fb:27:
cd:7b:82:7a:f4:af:95:02:d3:0f:ab:80:6d:17:cb:72:9e:00:
a1:02:9e:d3:9d:89:4b:95:a8:d3:43:e7:3a:2e:d2:fc:91:11:
c1:42:e1:bd:34:99:2c:17:07:7f:e2:2a:06:b4:9e:0b:a1:f1:
9a:a7:9f:53:ae:c8:1a:5d:7c:81:24:f6:76:35:2d:5f:6a:d6:
59:fd:80:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:36:07 2025 by rpki-client