Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/4dbc4f-5705-496e-a191-35e05902dcae/1/Z7awbOu3jb0D33lIfgYf7h7mP_A.roa
File: Z7awbOu3jb0D33lIfgYf7h7mP_A.roa (raw, json)
Hash identifier: PNsk8h/fACfugNBmH6Czdc0G0GsLs3SVC6pLNJJc6Rc=
Subject key identifier: 67:B6:B0:6C:EB:B7:8D:BD:03:DF:79:48:7E:06:1F:EE:1E:E6:3F:F0
Certificate issuer: /CN=d626a4f5ee714d0b445c1ba610cbf9b15af4671c
Certificate serial: 01A04329D28FE0B68789AE92304D1692FAAF
Authority key identifier: D6:26:A4:F5:EE:71:4D:0B:44:5C:1B:A6:10:CB:F9:B1:5A:F4:67:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1iak9e5xTQtEXBumEMv5sVr0Zxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/4dbc4f-5705-496e-a191-35e05902dcae/1/Z7awbOu3jb0D33lIfgYf7h7mP_A.roa
Signing time: Thu 27 Aug 2026 12:20:09 +0000
ROA not before: Thu 27 Aug 2026 12:20:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56747
IP address blocks: 31.130.164.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/4dbc4f-5705-496e-a191-35e05902dcae/1/1iak9e5xTQtEXBumEMv5sVr0Zxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/4dbc4f-5705-496e-a191-35e05902dcae/1/1iak9e5xTQtEXBumEMv5sVr0Zxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1iak9e5xTQtEXBumEMv5sVr0Zxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:43:29:d2:8f:e0:b6:87:89:ae:92:30:4d:16:92:fa:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d626a4f5ee714d0b445c1ba610cbf9b15af4671c
Validity
Not Before: Aug 27 12:20:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=67b6b06cebb78dbd03df79487e061fee1ee63ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:20:d1:b9:57:3f:a3:cf:14:68:f5:a1:2b:f8:
4a:41:8d:60:7d:66:4a:7d:6f:de:6e:4c:1f:62:9b:
53:8c:b4:76:bc:06:b8:e6:e3:51:41:87:0c:ea:31:
2b:0c:50:c6:3d:48:66:7c:e3:2f:ff:8c:ea:42:1b:
a4:ef:71:90:9b:19:81:61:e6:7a:7e:58:96:16:3f:
54:d2:d4:00:2c:03:1d:5a:96:21:e9:39:ef:dc:f6:
79:91:2f:46:73:dd:ba:0a:2a:8b:7c:87:8f:2e:d9:
e5:09:1f:b0:e6:ca:48:db:68:00:a0:08:0d:a5:1a:
ca:71:b2:32:e8:9e:f2:49:fd:64:64:d3:0a:1a:4a:
f4:b5:3f:14:1b:10:97:66:1e:b1:7e:c5:f7:e6:03:
ea:7e:c9:c0:68:2d:ba:db:61:7e:eb:00:d0:42:08:
06:99:0d:15:b7:55:fc:93:33:c5:58:a9:ad:6f:81:
5e:44:dd:75:43:1e:64:97:83:93:79:9c:da:dd:be:
3d:b5:d4:de:16:5e:7f:0c:07:53:5e:7b:49:4c:2b:
5a:ac:5c:49:11:ca:bb:3e:fc:22:49:cd:7a:fe:7e:
62:26:19:f5:4b:7a:5f:d8:39:ac:d3:d8:4d:da:6c:
c8:82:06:22:87:e0:85:4e:e4:f5:b4:a3:75:d4:d7:
ff:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B6:B0:6C:EB:B7:8D:BD:03:DF:79:48:7E:06:1F:EE:1E:E6:3F:F0
X509v3 Authority Key Identifier:
keyid:D6:26:A4:F5:EE:71:4D:0B:44:5C:1B:A6:10:CB:F9:B1:5A:F4:67:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1iak9e5xTQtEXBumEMv5sVr0Zxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4dbc4f-5705-496e-a191-35e05902dcae/1/Z7awbOu3jb0D33lIfgYf7h7mP_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4dbc4f-5705-496e-a191-35e05902dcae/1/1iak9e5xTQtEXBumEMv5sVr0Zxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.130.164.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:86:a8:92:7a:c3:07:ef:02:b5:a4:ef:14:3f:1c:ea:fe:7f:
99:dd:aa:31:40:d7:6f:1e:1c:f1:87:86:5d:2b:6c:8d:83:c4:
5e:e5:94:91:f5:26:b8:3a:14:a3:64:a1:c9:6b:02:5c:c8:9b:
03:01:27:5a:8d:14:e0:5f:da:c5:42:d6:41:28:bd:3d:39:f4:
95:d7:59:0b:23:5b:2f:d5:3a:66:9b:cd:10:58:08:5e:c8:57:
8f:11:cd:17:c5:1f:2f:15:c6:79:dd:2b:fb:1e:dc:3f:1a:44:
2c:88:37:1e:50:01:64:21:1a:f0:21:74:7b:b8:32:2e:70:3f:
2e:7d:6f:2d:e0:f3:c3:01:fd:51:24:5c:ba:d2:7a:63:3f:52:
d9:c0:20:e8:a5:7d:2a:c4:6d:73:5f:26:b6:ac:81:cd:69:15:
c0:d8:bc:dc:48:2f:fa:bf:44:35:9d:99:fb:3a:a3:95:4f:31:
62:e9:9f:e1:84:3f:d4:a8:7e:fb:01:96:5d:26:62:1b:3c:e2:
89:49:8c:33:e9:f7:68:97:aa:21:c6:b6:2b:99:b0:d8:cd:81:
96:a2:e0:31:22:72:ad:60:37:98:e7:72:1c:5b:d8:c5:7a:d4:
24:2d:dc:f8:5e:da:3b:ec:4d:0d:c9:1a:ac:0b:9d:2b:47:c1:
91:9f:cd:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:52:48 2026 by rpki-client