Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/eae6b4-5687-4e4a-845e-742f7c8685ed/1/ZWrLA8P4cNDYX7LqyBxM_pLC7jw.roa
File: ZWrLA8P4cNDYX7LqyBxM_pLC7jw.roa (raw, json)
Hash identifier: zGPBTIivjfCbBMOh6eYhny8i23uv7HAM64XuSqL1vqw=
Subject key identifier: 65:6A:CB:03:C3:F8:70:D0:D8:5F:B2:EA:C8:1C:4C:FE:92:C2:EE:3C
Certificate issuer: /CN=ee022d68df066a761a3be8641a71bb69c15e272d
Certificate serial: 01A0867B1156CBF1731BD6A992F04235D0B3
Authority key identifier: EE:02:2D:68:DF:06:6A:76:1A:3B:E8:64:1A:71:BB:69:C1:5E:27:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gItaN8GanYaO-hkGnG7acFeJy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/eae6b4-5687-4e4a-845e-742f7c8685ed/1/ZWrLA8P4cNDYX7LqyBxM_pLC7jw.roa
Signing time: Wed 09 Sep 2026 14:03:27 +0000
ROA not before: Wed 09 Sep 2026 14:03:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198872
IP address blocks: 109.104.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/eae6b4-5687-4e4a-845e-742f7c8685ed/1/7gItaN8GanYaO-hkGnG7acFeJy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/eae6b4-5687-4e4a-845e-742f7c8685ed/1/7gItaN8GanYaO-hkGnG7acFeJy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7gItaN8GanYaO-hkGnG7acFeJy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:7b:11:56:cb:f1:73:1b:d6:a9:92:f0:42:35:d0:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee022d68df066a761a3be8641a71bb69c15e272d
Validity
Not Before: Sep 9 14:03:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=656acb03c3f870d0d85fb2eac81c4cfe92c2ee3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ba:bf:f6:21:66:ca:06:5f:8c:3b:93:14:ec:
77:4f:76:8a:5b:b7:10:87:2d:a0:4e:10:bc:be:af:
10:f0:01:d9:b4:32:dc:a8:ed:46:69:e8:db:df:f5:
cd:e0:0b:66:44:dd:aa:78:07:8e:13:f7:c9:b7:f6:
e4:2c:fe:66:8e:2c:c6:8e:fc:b8:87:ca:98:a6:62:
71:67:a3:c3:5c:74:97:24:63:86:00:0d:ee:46:48:
a1:88:e2:ea:89:02:ef:c1:a9:1c:57:0b:c2:79:b8:
2f:84:e3:8e:17:60:4f:00:3d:85:20:02:3e:52:8c:
86:6e:46:67:db:68:35:73:73:d6:8c:31:f2:4c:bf:
c8:eb:92:b7:89:17:4f:c8:1b:76:e2:b2:9c:6d:1d:
7f:f1:06:bc:86:0e:47:b1:a8:91:8d:f2:b3:46:38:
9f:01:c5:25:72:31:ea:43:ff:06:10:5d:37:fe:79:
db:ac:59:d7:98:5a:c5:d6:9f:e5:e7:19:2a:6f:d0:
6e:ec:46:91:33:57:20:f3:5d:5e:28:94:28:da:e7:
0a:08:4a:7a:ee:a3:fd:44:b3:b8:83:10:a2:f3:f7:
14:9d:6f:f8:4f:b0:44:65:46:0a:b2:b5:91:54:3d:
13:34:da:c9:e2:92:f0:b6:b6:29:b4:d9:6e:43:13:
9b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:6A:CB:03:C3:F8:70:D0:D8:5F:B2:EA:C8:1C:4C:FE:92:C2:EE:3C
X509v3 Authority Key Identifier:
keyid:EE:02:2D:68:DF:06:6A:76:1A:3B:E8:64:1A:71:BB:69:C1:5E:27:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gItaN8GanYaO-hkGnG7acFeJy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/eae6b4-5687-4e4a-845e-742f7c8685ed/1/ZWrLA8P4cNDYX7LqyBxM_pLC7jw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/eae6b4-5687-4e4a-845e-742f7c8685ed/1/7gItaN8GanYaO-hkGnG7acFeJy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.104.104.0/24
Signature Algorithm: sha256WithRSAEncryption
52:cf:df:29:40:ca:4f:c1:10:87:3e:cf:e2:22:6e:4a:bf:a8:
30:3e:dd:a9:58:37:82:03:5b:45:2d:cc:ee:f2:fd:1d:c8:a2:
a2:f6:e1:9a:0e:5b:65:4c:38:bc:d4:8d:fe:18:15:d4:ce:c2:
b4:d0:67:47:e0:ea:8d:b9:3d:a7:4c:92:c9:4d:a4:4a:43:1f:
88:4e:8a:10:a0:17:a5:11:04:bc:86:e3:b8:73:ab:06:4d:39:
aa:50:95:96:3a:e9:77:5e:7e:c9:69:ed:56:e3:d0:b9:79:f9:
3e:4f:7d:70:fe:42:de:cc:4f:c1:cf:99:71:29:8c:e8:14:42:
7f:ee:57:a6:d7:e3:95:08:a4:0f:6c:81:18:ea:91:93:88:97:
70:d9:92:5b:5e:be:3b:38:d0:aa:3f:2e:bb:00:6c:0e:3d:bb:
6d:59:f5:64:58:83:66:24:e7:c6:5a:7a:95:83:bf:d3:b1:a9:
83:d6:40:58:86:0b:2f:31:bf:e6:92:7c:c2:90:83:b0:5d:88:
5b:3a:24:54:1e:2d:6c:9e:4b:11:90:61:fb:a9:1f:41:a5:5e:
b5:bb:cd:e2:95:c1:98:87:ab:f5:9b:2d:4d:37:89:cb:44:87:
af:f1:9f:d7:18:70:63:35:8d:9c:27:97:0f:95:bf:62:e2:5c:
61:bc:f9:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:21:36 2026 by rpki-client