Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/zMWv_Tzk5R0gCy2Cc9eJiIx-Aw8.roa
File: zMWv_Tzk5R0gCy2Cc9eJiIx-Aw8.roa (raw, json)
Hash identifier: VtCwVrACcHsEgw0S9Oyh6gDqRG10Ho0UaYy7kmtliJE=
Subject key identifier: CC:C5:AF:FD:3C:E4:E5:1D:20:0B:2D:82:73:D7:89:88:8C:7E:03:0F
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 019A0ECFFE03EFF7F6E3D7AF18309B8D1C1A
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/zMWv_Tzk5R0gCy2Cc9eJiIx-Aw8.roa
Signing time: Thu 23 Oct 2025 02:05:03 +0000
ROA not before: Thu 23 Oct 2025 02:05:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40676
IP address blocks: 193.148.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0e:cf:fe:03:ef:f7:f6:e3:d7:af:18:30:9b:8d:1c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Oct 23 02:05:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ccc5affd3ce4e51d200b2d8273d789888c7e030f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:db:df:f4:69:a6:bd:34:cf:00:90:ae:c3:2c:
8c:0f:c7:a8:ba:83:3c:e9:00:a1:1a:83:8d:ef:dc:
14:bc:c7:65:91:74:e8:1f:6f:a7:d1:b2:de:d0:c2:
9d:8a:19:75:1e:35:94:db:41:43:e7:d7:15:e8:7a:
90:f3:7d:94:e7:65:4d:51:d2:54:d7:5d:c3:07:67:
41:f1:64:88:dc:c7:d2:24:89:6a:7b:97:a2:06:9b:
af:ca:2e:2f:fe:aa:30:0e:30:1a:21:03:d7:09:90:
41:29:ea:ce:6b:a0:fd:a5:6d:c4:9c:96:b5:42:61:
44:2b:44:c0:7c:a9:70:4d:54:1b:61:41:24:53:07:
0c:f8:ba:11:0d:e7:28:db:b7:73:a9:2a:35:24:13:
b1:ec:10:da:c4:b3:93:27:70:58:b7:ff:80:31:0c:
4b:6d:a0:94:26:97:ea:4c:b9:06:ea:02:8f:ff:9d:
92:be:6a:85:e3:a6:91:2d:f9:cd:32:a2:49:a7:92:
e6:55:08:66:c2:d4:c2:c1:de:13:f4:e8:88:ba:f3:
d9:f6:b5:10:d5:6e:b8:88:9d:45:1d:c2:aa:a3:f9:
c7:b0:e3:69:81:65:a9:49:4d:00:b1:33:72:58:26:
1c:46:e1:da:43:34:20:a2:cb:c4:95:1b:8b:8d:68:
96:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C5:AF:FD:3C:E4:E5:1D:20:0B:2D:82:73:D7:89:88:8C:7E:03:0F
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/zMWv_Tzk5R0gCy2Cc9eJiIx-Aw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.148.95.0/24
Signature Algorithm: sha256WithRSAEncryption
32:c7:02:3e:80:c9:31:36:a8:e6:27:9f:0c:0a:6e:b8:ef:82:
2c:27:c7:7a:f5:ec:93:ac:29:31:44:2a:26:a8:99:a5:93:1c:
39:1c:ba:ad:55:81:f6:34:5b:4d:6f:99:51:f0:fe:a0:64:55:
40:86:2c:82:a0:11:39:fa:0a:92:d6:d5:52:ac:0d:f5:a2:1b:
54:75:2e:d6:63:05:be:17:4b:7d:e6:a8:b9:b6:53:7a:ad:89:
f9:c1:75:4d:70:e0:17:fd:82:14:0c:ab:70:b6:44:3c:71:d1:
ca:78:48:55:02:e8:7f:0a:e9:33:06:70:00:59:ed:ad:09:ed:
8f:df:e4:57:2d:09:e6:69:a2:4e:81:67:1b:51:b3:ee:dd:82:
d5:bb:84:35:15:63:f7:2b:94:aa:12:20:f2:5f:99:c4:ee:38:
ff:07:84:6d:a9:39:e0:2f:e2:9c:70:22:08:14:dc:a7:f1:4f:
41:4b:21:a9:04:2f:74:1f:89:12:84:b7:da:b4:e6:da:cb:9a:
f7:1b:21:53:e9:3a:29:b7:e6:4c:b3:c4:1f:a4:f5:43:01:36:
32:9f:42:19:87:be:fe:af:89:12:ee:c0:b8:1b:ef:52:48:8b:
96:d0:d7:07:9a:85:f4:2f:d1:37:5d:8d:53:2e:ae:54:54:f6:
4f:b9:c1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:30:48 2025 by rpki-client