Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/zMEZxCCazu0PmcbDnmYIFb-IlS8.roa
File: zMEZxCCazu0PmcbDnmYIFb-IlS8.roa (raw, json)
Hash identifier: 6NpASWJsBcita2tfe+I76FWRY/dxlryUnnwDVVV0E3A=
Subject key identifier: CC:C1:19:C4:20:9A:CE:ED:0F:99:C6:C3:9E:66:08:15:BF:88:95:2F
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 01A0AA9551569A5644E172C121639DA79675
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/zMEZxCCazu0PmcbDnmYIFb-IlS8.roa
Signing time: Wed 16 Sep 2026 14:18:27 +0000
ROA not before: Wed 16 Sep 2026 14:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44589
IP address blocks: 85.239.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:aa:95:51:56:9a:56:44:e1:72:c1:21:63:9d:a7:96:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Sep 16 14:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ccc119c4209aceed0f99c6c39e660815bf88952f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0c:14:fc:9c:63:f3:4d:fe:a0:f1:8f:f5:bd:
aa:56:c7:ca:ee:8b:b4:40:b2:ec:f3:b9:92:1b:ea:
1a:2b:17:c0:d3:bf:f8:83:b8:79:a2:5d:9b:50:43:
8f:bc:f6:c6:9d:69:75:1f:aa:8a:24:fe:44:33:43:
b8:b4:6d:8d:5b:65:6c:3c:b8:92:c7:bc:bf:38:7c:
9a:29:16:92:d6:f3:de:3e:2c:13:e1:3a:a2:76:83:
9a:ec:c8:86:a4:ae:93:e3:92:b0:0e:aa:4a:77:ce:
68:fa:f8:e6:db:7d:fd:93:f2:d3:ec:88:73:84:3d:
de:79:54:de:16:22:3c:d8:f6:c3:e4:0a:30:5a:02:
fd:37:65:58:24:47:78:27:13:fd:72:96:4d:a9:56:
e1:66:d6:49:64:27:93:bd:03:c1:59:f5:49:79:c2:
0a:27:a6:99:ac:59:68:de:35:b6:5b:d3:23:2a:a7:
b3:f7:7b:83:83:49:60:c3:2d:e9:f3:e7:19:ed:42:
e8:37:f8:f3:85:51:98:06:dc:3d:a5:24:6c:3a:f4:
16:d7:1e:51:bf:3e:f8:82:06:1c:c6:39:15:0c:1e:
ee:25:f4:12:d2:9c:77:cc:e5:88:f0:f3:8a:cb:6f:
19:3b:b6:d4:4c:37:18:f9:9d:6a:0d:ad:9a:28:1f:
02:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C1:19:C4:20:9A:CE:ED:0F:99:C6:C3:9E:66:08:15:BF:88:95:2F
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/zMEZxCCazu0PmcbDnmYIFb-IlS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.147.0/24
Signature Algorithm: sha256WithRSAEncryption
50:42:42:37:1a:37:0d:52:d1:0b:5a:7d:04:85:ef:4a:9f:f4:
6c:b2:65:b1:cd:7e:c8:e6:ff:59:09:42:eb:db:9f:ad:9a:9c:
27:44:2f:96:9e:67:36:ac:46:8d:b9:1d:c2:54:57:ea:7c:c6:
2f:a3:82:79:d9:7e:95:1b:2f:bd:84:b1:1d:72:69:e9:02:68:
93:b9:b1:08:61:1a:8a:7c:f8:5e:54:95:04:1f:ca:79:42:4c:
a0:9e:b5:06:bb:9c:74:53:ca:b9:e0:20:5f:9b:77:40:af:67:
cc:ff:da:c9:42:21:9f:ee:4c:de:66:f0:22:33:44:21:28:c3:
de:ee:1f:28:c3:40:a4:00:eb:f3:45:89:ac:28:07:6c:c3:be:
04:c9:03:9c:ec:0f:a6:85:a4:4c:8e:c8:55:63:24:86:17:68:
11:cc:e3:50:7c:a1:35:96:f8:c1:f4:c5:6c:13:59:d2:58:a4:
0d:ac:d9:a3:bd:ad:15:8f:4d:c6:8d:4a:e7:1a:5a:3c:dc:62:
34:e4:c8:c7:ad:b4:cb:62:aa:99:65:a6:8e:55:86:70:d3:4f:
b9:1d:77:da:3b:5b:7f:71:58:7f:b7:4e:75:b7:b2:b9:84:7f:
4a:bb:cc:6a:fc:cc:e6:26:41:8d:e2:2e:69:9d:fb:77:95:68:
d7:c0:7b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:53:43 2026 by rpki-client