Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/zA17qoirAi97IIZj_QFD6CKbTws.roa
File: zA17qoirAi97IIZj_QFD6CKbTws.roa (raw, json)
Hash identifier: wIxn+OqU3bbLtcBaIrI+kk/Wk/TrLzNgcnRrWeWUt/w=
Subject key identifier: CC:0D:7B:AA:88:AB:02:2F:7B:20:86:63:FD:01:43:E8:22:9B:4F:0B
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 019D821AAF76358B2A9817BD8EB0D34E1C31
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/zA17qoirAi97IIZj_QFD6CKbTws.roa
Signing time: Sun 12 Apr 2026 14:31:20 +0000
ROA not before: Sun 12 Apr 2026 14:31:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402187
IP address blocks: 85.232.181.0/24 maxlen: 24
85.232.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:82:1a:af:76:35:8b:2a:98:17:bd:8e:b0:d3:4e:1c:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: Apr 12 14:31:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cc0d7baa88ab022f7b208663fd0143e8229b4f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f4:3a:6c:ea:4a:cf:68:5c:86:a0:22:b5:cb:
80:31:da:eb:a2:d0:79:eb:bb:67:1c:a6:13:3a:ce:
95:2f:0a:95:80:da:04:76:e3:f3:a7:bf:8a:14:e9:
af:98:78:a8:22:4f:b1:95:42:5b:fd:64:85:8b:c5:
25:c5:ed:eb:9e:65:ca:73:ac:ea:d3:ef:04:f5:f9:
8f:f7:1e:19:e7:41:ad:c4:27:85:73:ef:a0:bb:83:
a0:d1:f1:07:73:2f:59:68:4b:49:fd:06:e4:0f:d3:
b6:93:b6:03:e4:0c:43:aa:d1:fc:89:bc:b6:c4:64:
55:61:6a:5d:7a:2b:c2:e0:c8:a7:66:cc:99:c5:df:
09:c8:fa:c7:15:58:01:bc:d7:0a:2c:f6:c9:9f:aa:
16:ab:09:42:d8:5f:1f:f3:08:8e:c4:2d:9b:dc:ad:
89:a6:32:69:b4:b3:50:e2:85:b4:1f:ae:7f:60:47:
31:b6:9e:9b:71:40:2c:6a:e3:3c:62:95:ac:ae:71:
c3:24:67:3f:5b:99:41:ca:7e:8e:cc:79:c1:3e:9c:
11:ec:ba:63:3c:dd:e6:40:49:ac:44:65:ee:52:65:
5f:04:71:88:da:0b:0c:0e:0e:2e:2c:b6:b3:32:53:
30:92:00:74:5c:be:6f:fd:a8:95:d5:e6:ef:bc:f8:
52:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:0D:7B:AA:88:AB:02:2F:7B:20:86:63:FD:01:43:E8:22:9B:4F:0B
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/zA17qoirAi97IIZj_QFD6CKbTws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.232.181.0/24
85.232.191.0/24
Signature Algorithm: sha256WithRSAEncryption
55:45:ba:01:d1:a4:05:ed:9f:4c:51:10:22:f4:cc:90:5f:6b:
86:fe:36:d5:76:fa:aa:8e:bd:00:0b:a3:6e:40:95:cc:13:68:
73:a1:90:89:1a:22:d4:4b:2a:5b:8e:40:9a:b7:de:03:a6:50:
bf:34:cb:33:44:ff:2a:87:e3:17:9b:02:07:4c:7f:4b:37:7f:
98:d6:dc:4c:4d:fd:b9:5f:38:24:e0:b5:b7:6f:ad:0e:36:da:
59:83:81:e0:0f:a3:1b:60:68:f4:d9:2d:ba:6b:ff:17:de:5d:
2a:b2:5a:d6:b9:77:73:ad:6d:bd:1c:a4:ff:b8:26:19:e0:74:
ac:05:cf:1a:88:f5:e2:93:62:60:30:d7:fe:58:a3:e0:80:5a:
3a:d8:88:ae:0f:3b:c2:2c:86:67:05:93:ea:11:74:a9:f6:b3:
6c:15:bc:dd:e2:d9:a5:09:6e:e1:49:5b:f7:cc:9a:eb:1f:83:
4b:89:8d:21:d9:77:87:f7:82:fa:50:eb:d5:7b:9f:29:4d:f1:
0c:0a:45:3d:1e:5f:78:8c:32:9d:12:32:c2:0e:0d:ee:1a:a6:
bd:c4:18:19:3f:d8:e3:cd:97:2b:66:76:20:98:90:68:3d:a4:
78:2d:18:2a:84:41:29:45:74:9f:a6:8c:b8:2f:25:cf:49:e9:
f5:10:48:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:10:42 2026 by rpki-client