Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/zIYV-AHlPU90-XBNQoetOzYswvk.roa
File: zIYV-AHlPU90-XBNQoetOzYswvk.roa (raw, json)
Hash identifier: p0dCTidRwIXLpMY8tWqdSD84EvxWEjiGuWkNvpLqanM=
Subject key identifier: CC:86:15:F8:01:E5:3D:4F:74:F9:70:4D:42:87:AD:3B:36:2C:C2:F9
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019EAE3509F6128A1142DD892970502DFEA8
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/zIYV-AHlPU90-XBNQoetOzYswvk.roa
Signing time: Tue 09 Jun 2026 21:06:11 +0000
ROA not before: Tue 09 Jun 2026 21:06:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198037
IP address blocks: 78.17.132.0/23 maxlen: 23
78.17.147.0/24 maxlen: 24
89.125.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ae:35:09:f6:12:8a:11:42:dd:89:29:70:50:2d:fe:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 9 21:06:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cc8615f801e53d4f74f9704d4287ad3b362cc2f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bb:83:c2:73:4b:9e:45:df:4f:b6:7f:c6:1a:
10:f3:ab:1e:cd:15:f8:65:df:d9:f3:bb:41:fa:39:
e3:e1:9d:b9:d8:18:6d:80:07:ea:ad:58:37:4f:94:
6a:82:5d:4d:dc:0f:bf:22:70:3c:00:a0:46:dc:96:
50:b3:cc:35:e3:90:76:51:1f:9d:79:67:2a:57:42:
14:fd:cb:f6:ea:a2:3d:64:e1:6e:05:8e:10:d9:4c:
c0:4f:14:71:b4:7f:19:a6:8f:3a:20:74:02:a1:d5:
9d:dd:a7:26:05:8a:02:62:a7:dc:bf:34:36:64:d4:
c1:d0:a3:3a:76:2c:f1:0b:ac:22:3b:cd:69:f8:60:
98:42:62:9b:4b:0f:7a:8d:fd:32:fa:0e:dd:c5:c3:
22:d7:d2:33:72:c2:cd:fb:38:69:fa:0b:83:cd:19:
a6:44:2d:31:9a:4e:c8:5a:18:e0:0f:00:18:33:04:
9d:4d:b7:ff:43:a1:38:16:67:9b:c3:19:96:28:d9:
f9:94:5d:bf:93:d2:9d:72:95:c6:96:db:b0:c5:1d:
77:c9:67:8e:cd:f8:49:a0:fb:10:0d:ca:95:05:b6:
d5:73:88:bb:be:d5:ea:f8:4f:31:c1:50:9f:24:c8:
ee:79:72:8d:0c:a7:74:e7:ed:56:6e:3b:08:47:d5:
24:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:86:15:F8:01:E5:3D:4F:74:F9:70:4D:42:87:AD:3B:36:2C:C2:F9
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/zIYV-AHlPU90-XBNQoetOzYswvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.132.0/23
78.17.147.0/24
89.125.33.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:7c:97:1a:84:0d:8a:0f:83:e6:1c:96:02:2d:cb:c8:eb:6b:
55:a7:79:92:ef:86:6b:ec:6b:9c:23:cc:a5:42:34:39:69:dd:
36:69:f2:28:b6:ec:97:94:51:ef:69:10:be:83:76:a5:09:9a:
4e:31:db:a4:05:7e:a3:a8:c4:56:4f:d1:f4:17:17:f2:c0:f0:
01:99:69:e0:c4:9a:08:ad:a1:4d:64:51:66:33:24:1b:af:b3:
ec:04:f7:ca:ca:d1:0e:85:b1:43:c4:cc:a2:cf:7d:3b:86:64:
f3:9a:21:f4:b3:d7:82:92:81:cd:c2:dd:a2:f9:ef:ba:16:5e:
2c:55:17:61:ff:5c:93:55:c6:ed:69:75:39:b3:2c:72:32:a0:
ab:df:4a:17:61:21:b3:36:0a:23:2c:ef:f1:04:e6:dd:a9:8d:
f7:28:7c:d0:54:17:85:b3:c1:83:4a:a6:e0:02:76:14:df:b7:
31:66:3b:d7:11:40:e1:c1:9e:e8:d8:8c:a9:e8:b7:b8:13:ae:
ca:ec:02:e3:cb:d4:85:4b:81:be:8a:c7:a2:90:88:36:9b:66:
d2:23:a1:4d:b7:fa:49:3e:c2:3b:bb:1b:fa:01:09:77:1a:99:
98:2c:cc:38:bf:81:43:22:48:b6:c0:dc:51:33:fb:a0:62:ec:
a5:1a:d0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:30:04 2026 by rpki-client