Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/z3ZLPttN_dLEWt9RRuV7F-68KD8.roa
File: z3ZLPttN_dLEWt9RRuV7F-68KD8.roa (raw, json)
Hash identifier: C7j0Qnqfcw9VtnlF4ckZWrE6xR0zYsksmWqIp1TS2Ik=
Subject key identifier: CF:76:4B:3E:DB:4D:FD:D2:C4:5A:DF:51:46:E5:7B:17:EE:BC:28:3F
Certificate issuer: /CN=78decead419807747c92ace69448113ff0928b85
Certificate serial: 019736C87E5A64307EE16B8867297922DBE9
Authority key identifier: 78:DE:CE:AD:41:98:07:74:7C:92:AC:E6:94:48:11:3F:F0:92:8B:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eN7OrUGYB3R8kqzmlEgRP_CSi4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/z3ZLPttN_dLEWt9RRuV7F-68KD8.roa
Signing time: Tue 03 Jun 2025 17:13:18 +0000
ROA not before: Tue 03 Jun 2025 17:13:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197566
IP address blocks: 91.224.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/eN7OrUGYB3R8kqzmlEgRP_CSi4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/eN7OrUGYB3R8kqzmlEgRP_CSi4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/eN7OrUGYB3R8kqzmlEgRP_CSi4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:36:c8:7e:5a:64:30:7e:e1:6b:88:67:29:79:22:db:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78decead419807747c92ace69448113ff0928b85
Validity
Not Before: Jun 3 17:13:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf764b3edb4dfdd2c45adf5146e57b17eebc283f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a3:a2:b7:e0:99:e0:77:ee:22:5a:e2:aa:d5:
9b:be:5a:e2:24:d2:34:8c:63:e5:3f:5e:55:a7:8f:
e2:28:35:bb:76:6a:49:59:86:96:c8:64:c1:e4:5b:
eb:f6:49:26:16:10:7f:85:94:db:21:60:1c:73:e0:
83:0f:d3:ce:3a:50:51:06:e6:c2:0a:5c:e3:27:e2:
ed:eb:ef:67:a8:ab:ea:21:6c:71:55:e0:54:1b:26:
ab:eb:75:e6:10:69:58:81:3f:24:4f:02:0a:58:3e:
95:af:72:5f:09:e8:e9:9c:22:af:0c:2b:29:13:31:
05:f4:21:ea:9e:e9:be:42:2c:98:bb:73:12:70:07:
69:07:56:5e:96:d0:a1:ce:a9:ea:f9:45:db:42:8d:
e3:ff:94:25:6a:85:93:33:bb:06:ee:05:5f:f4:1d:
25:51:a5:b8:5f:82:60:0e:a0:0a:8c:56:3a:e8:e5:
26:f2:13:ca:de:8b:e0:28:93:58:b9:82:1c:58:f8:
ef:dc:11:84:21:fc:cf:96:e1:39:13:ec:6f:2e:61:
91:cf:ca:00:07:1c:db:dd:f1:2b:bc:3a:ce:3b:b9:
90:27:26:87:37:c8:92:24:37:7e:4a:95:2f:69:9c:
7e:e4:b4:c8:d4:81:1e:1e:46:61:59:cc:55:5d:55:
c2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:76:4B:3E:DB:4D:FD:D2:C4:5A:DF:51:46:E5:7B:17:EE:BC:28:3F
X509v3 Authority Key Identifier:
keyid:78:DE:CE:AD:41:98:07:74:7C:92:AC:E6:94:48:11:3F:F0:92:8B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eN7OrUGYB3R8kqzmlEgRP_CSi4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/z3ZLPttN_dLEWt9RRuV7F-68KD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/eN7OrUGYB3R8kqzmlEgRP_CSi4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.90.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:d3:c5:49:22:ff:3a:b1:85:02:3f:f6:26:df:1c:a6:b5:78:
4d:0d:e3:ed:96:e4:35:3b:1f:9c:65:d2:c2:c0:0b:9f:f0:37:
07:bf:d1:b2:47:38:bb:26:ef:f7:5a:b6:3d:70:90:b2:ef:d5:
69:a0:59:17:f1:42:ca:eb:28:dc:4a:a9:85:5d:9d:01:fb:e3:
ae:e2:7b:1a:5b:1a:3c:7b:96:49:a1:2c:bc:35:b7:13:b4:17:
87:cc:54:a9:e9:fa:15:ba:35:e2:39:08:98:4b:54:86:5f:65:
a0:24:ac:0e:d2:bf:87:4c:80:2b:44:ea:69:5a:e5:5d:fa:f7:
2c:a1:a1:ad:58:d7:56:80:3e:29:14:82:ac:3d:9d:30:48:e1:
d1:25:cd:b2:44:10:97:ee:1f:39:66:de:84:fb:59:da:c0:71:
46:14:e3:ef:17:77:55:87:18:fe:74:be:ee:7b:d6:71:f7:fc:
0c:48:20:5b:e6:0b:0b:38:61:5a:33:22:37:88:a8:20:76:e2:
af:4d:70:4d:29:70:9f:b8:8f:54:05:e7:b7:06:52:93:b9:19:
98:ac:de:4d:e6:f7:78:96:69:a5:5d:ff:65:25:e2:67:99:39:
7f:1d:53:d6:48:a1:81:81:eb:0c:6e:64:15:f1:78:a5:d4:fc:
79:33:e0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 21:30:47 2025 by rpki-client