Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ZYcu8wrfIbufE6Iy8VMFUuGyAuY.roa
File: ZYcu8wrfIbufE6Iy8VMFUuGyAuY.roa (raw, json)
Hash identifier: UZXVUv3S3cNg6npRSvbm/y2Rp2w5vhtlG82p6sftGJ8=
Subject key identifier: 65:87:2E:F3:0A:DF:21:BB:9F:13:A2:32:F1:53:05:52:E1:B2:02:E6
Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Certificate serial: 01A06C932F75C1D3039DED9624EE4FD8B921
Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ZYcu8wrfIbufE6Iy8VMFUuGyAuY.roa
Signing time: Fri 04 Sep 2026 13:19:40 +0000
ROA not before: Fri 04 Sep 2026 13:19:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 88.210.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:93:2f:75:c1:d3:03:9d:ed:96:24:ee:4f:d8:b9:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Validity
Not Before: Sep 4 13:19:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=65872ef30adf21bb9f13a232f1530552e1b202e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:85:98:53:f2:27:50:a5:24:9e:14:f3:6a:07:
4a:18:dc:25:e4:c6:2a:1e:34:4c:4b:9f:d5:95:89:
55:e0:80:25:b5:02:d3:ea:28:b2:81:98:74:10:a7:
e4:d3:b8:40:69:0a:ff:b8:f1:ac:f8:55:6b:05:a9:
54:8d:03:b5:94:b0:f4:db:f0:e9:84:2f:2a:56:47:
5b:39:50:b7:fb:a3:51:7a:9e:c4:f6:4f:b8:80:53:
fc:7f:6b:1e:c6:5f:a2:7a:aa:e8:11:91:e5:93:c3:
3a:50:42:9c:00:04:05:26:af:c6:c5:53:ae:6f:60:
6f:3f:9f:5d:20:85:55:c9:ed:e2:5e:8c:c8:0b:82:
95:2d:dd:ff:3b:a3:f6:95:20:9c:96:50:74:34:08:
e2:41:83:ae:ec:06:ff:90:6b:13:f2:58:4c:10:c9:
90:f8:39:ad:5d:10:07:4c:d6:11:8a:eb:6d:82:15:
59:e2:bc:d1:6b:e8:28:a6:b2:2b:aa:9f:f0:9e:e0:
97:9d:10:f4:8e:1f:4f:f1:77:2d:38:b7:99:a8:4f:
67:77:7a:24:43:62:d8:12:df:47:f5:47:4d:b5:d8:
ac:bf:37:5f:11:5d:ad:7d:ae:91:85:8d:79:50:cc:
fa:cc:f6:fb:cf:31:cb:d8:bd:8e:6b:71:70:f7:e5:
e6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:87:2E:F3:0A:DF:21:BB:9F:13:A2:32:F1:53:05:52:E1:B2:02:E6
X509v3 Authority Key Identifier:
keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ZYcu8wrfIbufE6Iy8VMFUuGyAuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.210.63.0/24
Signature Algorithm: sha256WithRSAEncryption
76:aa:bc:08:9d:0c:21:74:d8:4d:18:b4:a9:df:e9:60:13:a9:
3b:0a:21:d1:d6:1e:17:d7:9f:da:a1:50:34:87:8e:f9:46:f2:
e4:1d:79:cf:3b:44:67:8e:40:52:44:97:11:71:22:a1:e2:e4:
a3:c2:8d:15:01:4d:f7:93:ca:f8:44:71:bc:c7:88:fb:f8:04:
90:f0:71:a0:aa:f2:81:ba:47:fb:c7:18:10:49:6f:56:ba:56:
26:39:ad:0b:a4:88:6a:29:84:12:57:f4:ce:2b:64:23:6b:6c:
a3:80:e7:fb:48:50:04:cf:29:17:9f:47:40:bf:dc:b4:f3:5b:
05:ec:e1:04:73:4a:8c:c6:58:d9:d2:3e:7b:1d:7e:b7:19:15:
a7:5b:70:af:78:50:74:26:29:d5:32:e4:70:31:92:5d:13:99:
02:7e:8e:a7:cd:38:f6:d6:49:e6:2e:de:89:bf:a6:4f:17:d4:
0d:53:3f:76:12:2c:e4:a5:9d:56:3b:20:34:0f:dc:8c:22:d1:
d5:1d:86:38:99:a3:b6:26:16:22:4e:71:2f:41:b5:94:fc:0a:
1b:66:19:2b:67:b0:e1:ad:52:16:4c:41:0b:34:4c:05:35:a7:
83:18:a5:69:d2:3c:64:3b:b2:11:3c:56:15:d1:47:f1:34:d3:
0d:ab:0b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:06:37 2026 by rpki-client