Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Z9FVWqpN9TSVGDmkXUC1MdBmsD4.roa
File: Z9FVWqpN9TSVGDmkXUC1MdBmsD4.roa (raw, json)
Hash identifier: Nq8088jCM1835QwivVoCmuQaJVQ81ePp5VnLq38G80Q=
Subject key identifier: 67:D1:55:5A:AA:4D:F5:34:95:18:39:A4:5D:40:B5:31:D0:66:B0:3E
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A094AEA4B249155BA4AAD978378530AB4F
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Z9FVWqpN9TSVGDmkXUC1MdBmsD4.roa
Signing time: Sat 12 Sep 2026 08:14:28 +0000
ROA not before: Sat 12 Sep 2026 08:14:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213449
IP address blocks: 5.175.170.0/24 maxlen: 24
89.144.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 04:39:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:94:ae:a4:b2:49:15:5b:a4:aa:d9:78:37:85:30:ab:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 12 08:14:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=67d1555aaa4df534951839a45d40b531d066b03e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:eb:7d:e7:8f:ee:63:e6:cf:9c:6d:25:01:db:
71:f0:ed:72:91:0d:fe:63:39:cc:8d:bf:81:12:41:
df:5e:e2:b2:36:46:b2:eb:a7:f1:75:51:b7:03:38:
8e:d9:af:6c:ba:79:6c:97:f0:61:b8:93:cb:a8:cc:
bd:19:a8:5f:32:54:8c:06:6c:6a:53:51:7e:87:73:
0d:11:65:39:51:04:6b:2b:7e:a9:39:9d:34:d0:34:
63:bd:c2:de:49:6c:dc:a5:58:46:de:ad:97:10:95:
13:c5:a9:4f:87:08:00:94:8f:a1:4a:6b:54:77:75:
ca:45:e5:97:94:0c:b7:f6:a5:19:c1:c2:ae:98:4e:
70:5a:6b:98:4b:22:4e:72:00:c7:70:40:00:69:0b:
07:e2:6e:62:f8:f1:61:a4:5a:2a:11:cd:3c:20:bf:
80:e9:8e:68:2f:0d:7b:31:67:02:41:69:4d:99:f8:
28:d5:ce:4d:f4:87:de:fb:b8:5b:40:a3:18:5f:98:
23:1a:61:02:9c:fb:aa:94:12:1e:f8:a7:b8:5a:33:
8a:04:9a:7e:fa:22:f5:55:33:3a:bd:38:08:e6:4c:
eb:d5:f2:77:f7:96:3e:ae:63:2c:f4:cf:86:47:b0:
f3:22:76:74:c3:c7:3f:97:1e:3e:64:8c:8b:c9:fb:
5e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D1:55:5A:AA:4D:F5:34:95:18:39:A4:5D:40:B5:31:D0:66:B0:3E
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Z9FVWqpN9TSVGDmkXUC1MdBmsD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.170.0/24
89.144.63.0/24
Signature Algorithm: sha256WithRSAEncryption
52:cd:e6:cc:f5:21:c1:a3:63:39:01:c9:b8:a4:c1:4b:37:89:
48:db:84:43:86:b4:c6:06:cb:66:7e:07:2e:70:af:75:09:98:
b5:4a:e8:a7:0e:2b:2f:b4:9c:b8:7d:ec:39:a6:78:d0:8f:39:
a8:07:f1:05:94:4d:0e:ca:5d:f6:0d:71:05:16:a5:9d:54:16:
e7:e7:5c:5b:3e:3f:f5:ec:9e:ec:82:86:26:5a:16:84:4f:12:
55:18:e0:5f:d3:c5:0e:8a:3a:43:85:4b:b2:42:cd:a1:7b:55:
8a:0b:a7:0a:e7:f5:b6:6c:f8:89:96:32:5a:74:c9:21:e2:7c:
ea:fc:6d:a5:01:2e:ba:03:3f:2a:ca:3b:8a:d9:6a:5e:93:40:
b8:10:4c:17:b2:c1:07:2d:dc:47:27:9f:25:df:5c:31:2e:76:
ae:a9:0e:e9:3c:13:43:16:7c:2f:52:41:44:53:09:a5:5b:6b:
00:0c:e4:c5:14:23:26:cf:59:71:2c:51:3c:cc:81:bc:a9:28:
7f:a9:13:e6:79:02:d5:57:f9:60:a8:72:79:2c:39:e1:a3:09:
92:be:ca:ec:c6:ea:23:cb:cc:ac:68:ad:18:af:88:2f:d0:34:
27:f5:5c:32:fd:be:b6:f1:bc:a7:96:e0:57:9a:8b:1b:ed:49:
07:6b:87:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:26:41 2026 by rpki-client