Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/472bd1-74ab-42c6-a178-7d078441647b/1/ZrmdH1kr224-YSXeiDmPzJXjPVY.roa
File: ZrmdH1kr224-YSXeiDmPzJXjPVY.roa (raw, json)
Hash identifier: 2yOtH6rywtY2yujkNBEikTZTohQoI2VueFklC9+pgaA=
Subject key identifier: 66:B9:9D:1F:59:2B:DB:6E:3E:61:25:DE:88:39:8F:CC:95:E3:3D:56
Certificate issuer: /CN=582285f4e1f629ad9a2ccfe031e2812ee4ce6e7a
Certificate serial: 01A0B406E9C379D590A28DAA103949A6A3B8
Authority key identifier: 58:22:85:F4:E1:F6:29:AD:9A:2C:CF:E0:31:E2:81:2E:E4:CE:6E:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WCKF9OH2Ka2aLM_gMeKBLuTObno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/472bd1-74ab-42c6-a178-7d078441647b/1/ZrmdH1kr224-YSXeiDmPzJXjPVY.roa
Signing time: Fri 18 Sep 2026 10:19:07 +0000
ROA not before: Fri 18 Sep 2026 10:19:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218772
IP address blocks: 157.173.68.0/24 maxlen: 24
2001:67c:9b0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/472bd1-74ab-42c6-a178-7d078441647b/1/WCKF9OH2Ka2aLM_gMeKBLuTObno.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/472bd1-74ab-42c6-a178-7d078441647b/1/WCKF9OH2Ka2aLM_gMeKBLuTObno.mft
rsync://rpki.ripe.net/repository/DEFAULT/WCKF9OH2Ka2aLM_gMeKBLuTObno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:06:e9:c3:79:d5:90:a2:8d:aa:10:39:49:a6:a3:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=582285f4e1f629ad9a2ccfe031e2812ee4ce6e7a
Validity
Not Before: Sep 18 10:19:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=66b99d1f592bdb6e3e6125de88398fcc95e33d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9e:ee:12:9d:c8:af:09:68:fa:a8:0d:0b:bf:
8c:cc:d6:56:8d:f3:d6:5f:e2:c6:e2:3d:6c:ed:fe:
58:5e:4d:ee:62:96:bd:9b:62:8c:da:29:2e:b5:46:
15:b2:5e:3f:39:4b:69:1e:92:f4:59:61:c3:f5:be:
a3:06:39:5b:ff:76:e7:b6:00:86:ab:eb:de:0f:5a:
7d:08:08:1f:40:70:a1:9b:53:7e:45:b0:39:d5:c6:
ca:0d:30:07:fa:18:a1:f4:27:eb:a7:33:74:49:e0:
86:7f:4d:2b:42:a9:f2:d8:d8:6d:cf:6a:d5:fb:91:
e8:ed:8f:79:4b:b2:17:d0:0e:82:36:c2:24:d4:64:
a6:20:10:c1:09:40:88:29:a7:3c:36:3c:7b:e6:16:
a3:ab:3a:a8:2b:b8:72:b5:8f:3e:a9:14:ea:dd:df:
e5:3c:60:2d:dc:bd:25:36:38:d4:ed:a4:8f:61:d4:
a1:82:67:c2:60:3b:b8:a4:b2:47:2c:8a:2e:e1:24:
33:70:b7:b6:60:3d:c7:ac:e0:dd:43:22:77:d4:c7:
92:45:e0:78:cd:d0:66:01:f9:ba:92:e1:ef:38:4c:
fb:48:1d:f4:48:81:c2:49:fa:d6:53:94:38:f2:c1:
58:62:d1:c7:72:63:03:f8:c2:f3:9e:32:40:cb:5b:
73:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B9:9D:1F:59:2B:DB:6E:3E:61:25:DE:88:39:8F:CC:95:E3:3D:56
X509v3 Authority Key Identifier:
keyid:58:22:85:F4:E1:F6:29:AD:9A:2C:CF:E0:31:E2:81:2E:E4:CE:6E:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCKF9OH2Ka2aLM_gMeKBLuTObno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/472bd1-74ab-42c6-a178-7d078441647b/1/ZrmdH1kr224-YSXeiDmPzJXjPVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/472bd1-74ab-42c6-a178-7d078441647b/1/WCKF9OH2Ka2aLM_gMeKBLuTObno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.173.68.0/24
IPv6:
2001:67c:9b0::/48
Signature Algorithm: sha256WithRSAEncryption
26:73:db:85:31:d3:f0:0f:b7:fc:05:9e:a2:7d:b9:6b:a7:21:
62:1b:24:3b:22:7a:91:ad:c9:14:9c:48:9e:05:c6:b6:ff:ba:
0c:bb:5c:e5:5c:06:46:dd:14:16:f6:b4:20:f0:ea:00:81:9f:
28:23:2d:9e:49:eb:b9:01:54:c7:a0:b6:15:ba:f5:d6:7b:ed:
b5:e1:5b:55:e2:5f:f0:a4:ef:16:b2:08:20:5f:36:bb:ec:b4:
1c:74:68:f1:da:29:97:db:b9:1f:24:6d:75:02:03:5b:cd:61:
35:c0:20:74:d6:34:49:b7:e8:c2:cb:f4:43:41:3b:ec:e1:8e:
a8:2b:98:50:96:77:2b:94:13:72:18:02:37:11:29:80:3f:81:
a8:32:58:04:73:1c:4c:34:1d:0f:c0:52:08:1f:a0:88:2d:fa:
9f:3c:3e:e4:d1:ab:db:93:13:e8:b0:bd:c3:4e:4e:68:96:f2:
66:08:19:7b:42:b3:24:0f:b9:fc:6c:1c:15:f5:b4:18:c5:79:
6c:5e:1e:7e:ea:50:c9:f5:fa:d0:17:81:31:38:a7:e7:c2:d6:
8e:09:9f:1e:26:e3:4e:67:3c:b4:0b:34:7c:a2:1d:d6:a5:67:
3f:26:86:5c:32:96:fe:0e:db:26:f1:83:da:30:b7:ee:fb:74:
6e:60:19:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:55:12 2026 by rpki-client