Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/Zsd4szbKoY9fmiq1xd6ERvh5Sxk.roa
File: Zsd4szbKoY9fmiq1xd6ERvh5Sxk.roa (raw, json)
Hash identifier: kmEp9b9cV1yqsvLtKI36EUBGtSah3oAP9ek+5vNLTcY=
Subject key identifier: 66:C7:78:B3:36:CA:A1:8F:5F:9A:2A:B5:C5:DE:84:46:F8:79:4B:19
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A0D45DEE9C3B989950DAB7DFFD9D90BB6D
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/Zsd4szbKoY9fmiq1xd6ERvh5Sxk.roa
Signing time: Thu 24 Sep 2026 17:02:00 +0000
ROA not before: Thu 24 Sep 2026 17:02:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51722
IP address blocks: 201.3.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 19:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5d:ee:9c:3b:98:99:50:da:b7:df:fd:9d:90:bb:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Sep 24 17:02:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=66c778b336caa18f5f9a2ab5c5de8446f8794b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6f:ab:e3:a9:e5:57:46:c1:3a:ff:52:d1:b8:
7d:1e:f9:98:32:94:85:8b:7d:0e:20:3b:5c:6c:67:
d3:10:fe:37:5a:59:05:e9:d5:ea:27:e3:d7:04:51:
66:46:5c:4e:8d:bb:54:9d:9a:3e:e6:6e:31:95:d9:
ed:9d:d2:ae:df:d7:31:a6:42:80:a6:d4:05:ea:53:
59:73:51:d4:06:43:99:8f:c3:be:24:f8:f8:dc:65:
be:b5:1a:60:13:ea:8e:a5:ac:29:5a:37:2c:6b:a0:
60:2d:e7:ae:7d:ea:7a:11:79:c5:8a:a6:61:09:aa:
cc:96:dd:0c:e9:13:10:56:16:2e:ea:03:b7:f0:37:
28:be:80:8a:a7:90:9b:a0:f0:d2:15:0a:06:bd:c6:
ef:45:e1:92:fd:18:59:d3:a6:67:6d:d0:23:b2:ba:
46:12:7d:73:3f:0a:1d:48:7c:77:4d:7a:06:8b:61:
68:18:7c:8f:fb:d8:d8:a3:5b:c9:7d:89:51:47:df:
74:33:e3:ea:1e:66:ba:76:bf:ac:74:34:e3:47:c5:
09:3e:6b:e2:13:c7:dc:be:95:de:4d:be:5b:e5:ec:
9a:b2:23:c2:d4:97:cb:47:d2:02:56:a9:4f:59:6c:
4d:f6:52:90:20:07:91:09:34:59:cb:b6:35:ed:f5:
1d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C7:78:B3:36:CA:A1:8F:5F:9A:2A:B5:C5:DE:84:46:F8:79:4B:19
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/Zsd4szbKoY9fmiq1xd6ERvh5Sxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.3.122.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:08:1d:7a:db:66:fe:91:33:83:ba:ba:e9:30:52:13:32:78:
58:7f:24:5d:bc:4a:98:e6:79:ad:8f:fb:4d:70:b1:e1:f6:f7:
23:3a:7b:f0:09:ca:fd:a6:09:b1:1c:08:ea:21:45:24:70:a9:
0d:5e:45:40:d7:c5:f9:21:ac:8c:62:66:86:72:9d:b6:36:0d:
9f:fd:b0:5f:aa:75:db:1a:d5:70:c4:21:11:2c:61:a2:d6:64:
db:39:91:30:70:b8:9f:76:8e:e6:e4:1a:54:44:76:70:37:35:
85:0a:3f:08:57:f4:e5:81:3b:87:21:e2:78:a9:0f:0d:50:4e:
f9:07:19:6d:3c:08:d0:c1:fb:a5:ee:4c:44:4b:96:44:e1:f4:
46:31:94:55:08:27:40:df:fc:86:5f:aa:88:9a:ef:f9:a7:3f:
4a:0e:78:59:6a:23:6f:e0:c4:a0:9c:69:ee:b8:b0:18:dd:6e:
5b:fd:49:8d:53:01:1e:42:d8:99:c2:25:ea:96:6c:22:ab:4b:
48:ce:db:77:3d:50:2d:51:e3:ec:12:8f:a6:88:fe:9f:9b:09:
54:01:f5:c7:69:f8:07:ae:5d:67:ce:29:c3:30:c4:09:a3:d8:
60:e3:f9:a1:c5:19:2a:03:10:97:ec:73:d9:36:b4:56:4b:c4:
25:75:d9:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:53:04 2026 by rpki-client