Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/9558ee-5648-485e-bbdd-ec92171bc4ad/1/ZE4BS2JcawYJEr0tY5n1GQ_Lyn8.roa
File: ZE4BS2JcawYJEr0tY5n1GQ_Lyn8.roa (raw, json)
Hash identifier: 0OEKCMODj7NnbOp0jAsOZ215i8t2tQFW2QyRXNFmwhs=
Subject key identifier: 64:4E:01:4B:62:5C:6B:06:09:12:BD:2D:63:99:F5:19:0F:CB:CA:7F
Certificate issuer: /CN=20518661c19ac9616515260cbd35003f19d55708
Certificate serial: 01A0B395E2410B84AB753C14D34C5047E140
Authority key identifier: 20:51:86:61:C1:9A:C9:61:65:15:26:0C:BD:35:00:3F:19:D5:57:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IFGGYcGayWFlFSYMvTUAPxnVVwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/9558ee-5648-485e-bbdd-ec92171bc4ad/1/ZE4BS2JcawYJEr0tY5n1GQ_Lyn8.roa
Signing time: Fri 18 Sep 2026 08:15:39 +0000
ROA not before: Fri 18 Sep 2026 08:15:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43566
IP address blocks: 78.110.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/9558ee-5648-485e-bbdd-ec92171bc4ad/1/IFGGYcGayWFlFSYMvTUAPxnVVwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/9558ee-5648-485e-bbdd-ec92171bc4ad/1/IFGGYcGayWFlFSYMvTUAPxnVVwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IFGGYcGayWFlFSYMvTUAPxnVVwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 23:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b3:95:e2:41:0b:84:ab:75:3c:14:d3:4c:50:47:e1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20518661c19ac9616515260cbd35003f19d55708
Validity
Not Before: Sep 18 08:15:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=644e014b625c6b060912bd2d6399f5190fcbca7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7a:59:3a:df:83:c4:27:7e:c7:36:fa:29:38:
c8:37:32:e0:a1:16:a0:9c:45:1a:39:0c:8e:02:c1:
d8:2d:2a:6f:6b:10:ae:13:4f:4e:52:f2:ab:eb:66:
09:90:23:3a:83:01:84:10:e2:e8:99:95:bb:78:08:
14:f3:f6:9f:c4:bc:e0:90:97:13:f9:61:83:66:2b:
6c:fc:37:12:7e:30:90:7f:5b:e2:db:9a:8a:53:62:
45:7a:2a:63:ca:82:6e:7e:51:d0:e9:eb:63:9f:75:
cb:cf:39:28:61:5e:29:3b:79:37:08:00:89:ac:eb:
6e:50:57:3f:da:da:a0:cb:4c:36:6a:d3:c7:05:3a:
23:85:7e:46:33:ef:4c:c9:57:44:f9:bd:3d:f0:02:
5c:ee:8c:16:e4:ad:1f:2e:46:9a:b9:58:58:99:21:
61:2e:7d:a9:b4:db:fe:e9:5d:c3:83:19:77:30:9c:
cc:68:cc:9c:3a:dd:3a:4e:ff:8b:6d:1d:e6:49:80:
62:cb:00:5a:16:a6:65:66:44:e9:e7:2d:b7:6f:ad:
3d:b6:61:2b:80:ad:77:a2:9f:82:1f:22:da:af:f8:
ae:cf:25:d5:e1:a2:45:a2:a2:61:23:c3:a2:fe:6d:
b0:56:48:8d:e4:20:46:99:87:2c:95:73:99:e1:85:
36:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4E:01:4B:62:5C:6B:06:09:12:BD:2D:63:99:F5:19:0F:CB:CA:7F
X509v3 Authority Key Identifier:
keyid:20:51:86:61:C1:9A:C9:61:65:15:26:0C:BD:35:00:3F:19:D5:57:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IFGGYcGayWFlFSYMvTUAPxnVVwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9558ee-5648-485e-bbdd-ec92171bc4ad/1/ZE4BS2JcawYJEr0tY5n1GQ_Lyn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9558ee-5648-485e-bbdd-ec92171bc4ad/1/IFGGYcGayWFlFSYMvTUAPxnVVwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.110.233.0/24
Signature Algorithm: sha256WithRSAEncryption
69:f1:53:0e:20:b2:e0:09:e3:c5:09:08:e7:15:63:bc:9b:30:
be:5a:66:b9:57:4a:76:19:8d:c3:b6:91:85:88:46:13:a6:2b:
92:03:15:11:64:91:49:f9:16:ce:27:fe:ae:5b:4c:51:69:21:
36:27:2c:86:ca:46:f6:4c:f1:e5:96:0e:00:83:e5:89:e2:7b:
d1:f4:ac:91:db:ca:36:0e:15:57:08:94:7b:28:7a:b6:c8:ae:
43:35:ca:d6:29:eb:a7:a5:a5:15:e4:fe:f4:01:9a:1c:bc:0a:
7b:be:8d:ee:e8:c5:d5:66:0c:cd:20:0a:da:7d:49:da:b7:72:
8e:0b:08:82:b8:80:66:4a:30:5b:97:30:0c:8a:b6:38:3a:b5:
0a:f1:90:2d:02:8e:98:db:9c:9e:40:5e:80:9f:c4:a9:f8:82:
a2:ce:c0:5a:38:11:32:d5:9c:97:57:0e:9f:00:89:bb:c9:13:
c8:94:57:52:d7:80:73:ce:e6:2f:88:cc:d1:ec:56:4f:17:97:
30:dd:6d:5b:26:cd:7f:5b:67:ab:37:3d:9f:a4:03:93:2c:84:
52:14:a9:3d:8b:b4:b1:1b:dd:b4:27:a0:de:08:83:21:0f:b5:
64:b3:6d:fe:a1:ad:62:cf:37:d3:0e:58:bf:2f:0f:03:d8:e5:
1a:0b:e0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:40:07 2026 by rpki-client