Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/ZYQH8Odgs6j1zgDGSFJsI2Ck79M.roa
File: ZYQH8Odgs6j1zgDGSFJsI2Ck79M.roa (raw, json)
Hash identifier: kZC3BUi9IJGxujxTtEudY5sD/lL78MLQwa1Gtt8Q7zA=
Subject key identifier: 65:84:07:F0:E7:60:B3:A8:F5:CE:00:C6:48:52:6C:23:60:A4:EF:D3
Certificate issuer: /CN=9b7d24416aa8a478b3ed36e2e65855d42259d9ee
Certificate serial: 019865E9AA80716C26058532E3FCB60C502C
Authority key identifier: 9B:7D:24:41:6A:A8:A4:78:B3:ED:36:E2:E6:58:55:D4:22:59:D9:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/ZYQH8Odgs6j1zgDGSFJsI2Ck79M.roa
Signing time: Fri 01 Aug 2025 13:54:28 +0000
ROA not before: Fri 01 Aug 2025 13:54:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13335
IP address blocks: 81.26.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.mft
rsync://rpki.ripe.net/repository/DEFAULT/m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 Aug 2025 18:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:65:e9:aa:80:71:6c:26:05:85:32:e3:fc:b6:0c:50:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b7d24416aa8a478b3ed36e2e65855d42259d9ee
Validity
Not Before: Aug 1 13:54:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=658407f0e760b3a8f5ce00c648526c2360a4efd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d5:4e:8c:76:1c:83:8b:d6:62:d8:08:2d:59:
95:63:fd:31:30:b0:67:ad:e2:41:49:68:38:dc:36:
ea:6b:00:e7:64:78:78:05:8a:0f:9c:1e:af:d6:d1:
00:e3:86:27:86:ec:f7:57:63:a4:ff:76:ac:05:69:
cf:96:d3:67:56:3d:29:5e:5a:47:e2:6a:5e:bd:f4:
c8:bd:c6:d8:2b:27:9a:39:45:6b:a3:69:e0:9b:4b:
1a:06:a6:ed:16:5a:3e:c6:bb:5c:b3:06:99:52:60:
e4:fb:fd:33:c2:59:02:13:b6:7c:c9:3e:f4:5f:40:
fd:85:53:37:6e:41:9b:4e:e8:8a:18:ed:3f:52:04:
6d:50:88:44:46:e7:94:ef:c1:99:c3:f7:7e:58:01:
ce:7a:7e:5b:1a:97:78:84:d8:f8:78:38:04:b3:f9:
ec:d7:d2:d3:4b:dc:76:20:48:e8:5a:31:0b:99:7b:
d7:df:45:ce:e3:96:37:d8:5b:f9:51:e3:e1:86:36:
7a:81:85:ef:ed:37:36:3b:2f:08:d2:e2:a3:57:c9:
75:f9:38:fb:92:79:c9:53:09:40:7a:d3:15:4c:07:
64:df:9d:bd:33:45:0b:49:6c:33:53:e8:8c:78:65:
cf:3f:c4:bc:99:82:e0:9c:99:0c:c9:14:54:29:9e:
51:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:84:07:F0:E7:60:B3:A8:F5:CE:00:C6:48:52:6C:23:60:A4:EF:D3
X509v3 Authority Key Identifier:
keyid:9B:7D:24:41:6A:A8:A4:78:B3:ED:36:E2:E6:58:55:D4:22:59:D9:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/ZYQH8Odgs6j1zgDGSFJsI2Ck79M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.26.174.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:cf:9b:ff:1f:e5:66:36:66:16:63:b1:5f:66:66:77:e1:06:
ec:c7:68:1a:e3:2d:3c:6d:a1:88:6c:e5:f8:7e:ae:72:b0:2d:
c9:d9:b0:e0:3c:6a:58:4a:ba:ce:17:40:89:7f:f7:cc:e6:db:
6d:80:5c:ad:1d:5c:0c:e7:ea:aa:79:27:08:05:5c:d8:ae:66:
02:0d:65:92:5a:9b:26:7b:ab:93:80:46:9b:aa:ae:d8:03:b3:
cd:e8:ce:a3:fb:38:40:6f:ce:f4:24:d8:67:d1:51:d5:8f:c6:
1e:ce:30:ee:6f:b8:1c:8d:08:f9:35:7f:05:2c:12:e9:4e:fa:
f4:6f:d4:c6:6b:42:c1:14:62:2d:e9:b1:dc:38:d1:86:29:8e:
4a:72:a8:a4:dc:58:3d:8d:e2:44:1e:0b:40:99:65:49:c9:6e:
c0:7b:82:3c:d9:2c:3c:49:03:61:ba:37:24:ab:55:f6:e2:37:
b2:0d:d8:41:23:b3:8b:ba:6f:67:75:27:f5:2e:56:68:8a:b6:
44:30:86:48:48:0a:f8:1a:90:be:0c:b4:42:3c:3d:3b:31:55:
15:e8:c4:87:3c:23:d2:e0:06:d0:de:f9:91:07:c2:d4:e1:cf:
b9:58:be:56:0d:22:21:18:e3:71:d7:eb:dc:15:01:93:1d:46:
05:8c:b5:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 01:34:48 2025 by rpki-client