Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/dF9Z1hRCjc0A-Oc38t_zlHILO1U.roa
File: dF9Z1hRCjc0A-Oc38t_zlHILO1U.roa (raw, json)
Hash identifier: hTQoO0FIfz44AwpzVYePEc4NBZx4cLNTj4TVq0ihJaI=
Subject key identifier: 74:5F:59:D6:14:42:8D:CD:00:F8:E7:37:F2:DF:F3:94:72:0B:3B:55
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 019C5C7675673896073B8E884D20689B422C
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/dF9Z1hRCjc0A-Oc38t_zlHILO1U.roa
Signing time: Sat 14 Feb 2026 14:03:13 +0000
ROA not before: Sat 14 Feb 2026 14:03:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215355
IP address blocks: 109.74.16.0/24 maxlen: 24
2a14:67c0:100::/40 maxlen: 48
2a14:67c0:110::/44 maxlen: 48
2a14:67c0:298::/48 maxlen: 48
2a14:67c0:300::/40 maxlen: 48
2a14:67c0:600::/48 maxlen: 48
2a14:67c0:601::/48 maxlen: 48
2a14:67c0:1000::/40 maxlen: 48
2a14:67c0:1000::/48 maxlen: 48
2a14:67c0:1001::/48 maxlen: 48
2a14:67c2:d00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:5c:76:75:67:38:96:07:3b:8e:88:4d:20:68:9b:42:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Feb 14 14:03:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=745f59d614428dcd00f8e737f2dff394720b3b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:08:05:1b:41:29:6e:e9:fe:2d:14:2a:8b:54:
26:eb:84:0d:13:ed:09:84:f1:c9:d4:e5:e3:e7:96:
ab:4c:67:d8:43:1b:e3:20:33:11:b9:af:8c:d9:af:
ce:64:c3:7d:cb:3a:2e:6b:33:bc:83:15:b5:28:d1:
57:f6:2b:1c:0f:2e:3d:70:41:14:ac:a3:70:89:de:
0d:7b:e0:a1:b1:26:ea:a5:78:79:8f:10:38:68:a2:
9d:e4:3f:50:46:35:61:92:58:4e:45:bd:47:de:7a:
ed:85:30:00:48:89:e4:85:11:65:12:49:e7:00:d2:
f8:59:58:7a:a6:70:37:63:94:b0:26:19:89:6f:03:
0e:71:22:bc:2d:4e:09:9b:af:d3:31:80:fc:fc:4e:
70:87:d5:1a:ac:17:4e:65:15:e1:69:7e:96:37:5e:
e4:8c:00:04:18:14:60:2a:2e:03:4c:a3:f6:0e:01:
03:66:1d:a3:e9:3a:41:b8:d2:9f:ed:e6:a3:a6:81:
be:a7:26:09:2f:69:3c:b9:7d:c3:8e:1c:64:06:55:
c5:c1:89:dd:7f:8f:5c:1a:a3:45:61:bd:63:6d:78:
42:55:31:fd:bd:e4:3c:6f:89:67:ac:bf:64:c0:d0:
e9:bd:0d:ae:7b:35:f3:46:f1:55:e2:83:8b:80:a7:
78:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:5F:59:D6:14:42:8D:CD:00:F8:E7:37:F2:DF:F3:94:72:0B:3B:55
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/dF9Z1hRCjc0A-Oc38t_zlHILO1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.74.16.0/24
IPv6:
2a14:67c0:100::/40
2a14:67c0:298::/48
2a14:67c0:300::/40
2a14:67c0:600::/47
2a14:67c0:1000::/40
2a14:67c2:d00::/40
Signature Algorithm: sha256WithRSAEncryption
94:44:99:04:bc:d0:7b:41:39:a7:f1:7a:f3:33:f8:cc:57:bf:
6e:46:4f:2c:54:d6:f3:68:b1:15:41:e9:24:33:97:b4:46:59:
a6:90:0f:8c:54:91:ca:ad:1b:0c:03:c7:d1:73:79:e8:e1:db:
fa:b7:60:7d:28:15:9d:fa:a6:07:a9:37:c8:51:0f:80:15:f4:
94:8f:3b:ae:e7:57:97:7f:e2:62:eb:20:1b:ae:d1:40:97:46:
e5:47:50:98:a9:de:ee:fa:bc:0e:16:0c:a5:40:36:b5:07:13:
98:22:2f:8c:b0:6c:5f:68:c6:e5:85:e9:38:88:b7:37:97:57:
4f:09:fc:2d:46:8f:97:ec:ae:63:25:74:5a:89:16:60:5b:cf:
6c:80:18:13:01:79:0d:2b:b3:8b:c5:b5:0d:bd:92:b6:a8:0d:
67:6e:49:8a:ee:c0:31:66:a1:05:98:61:4a:d1:02:7f:29:20:
40:03:0e:95:00:27:b4:cd:72:bc:df:8c:6a:a6:c4:2a:4f:6f:
c5:6c:80:d2:1b:9f:fd:85:b2:bb:b5:dd:fb:df:07:0d:25:48:
50:4d:48:1c:2e:37:55:fb:2b:14:92:8b:ff:7b:a9:15:ee:b8:
2c:7b:60:f7:82:83:8b:d8:43:f8:a7:11:9d:d0:19:6a:ff:2e:
2a:b8:63:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:15:12 2026 by rpki-client