Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/zxrnmUISOOeHAqrNkhw_ithe-Ms.roa
File: zxrnmUISOOeHAqrNkhw_ithe-Ms.roa (raw, json)
Hash identifier: //QUuySIevnGa8nrOXYGNE5AnRPRUBIqf0Za4X6/opI=
Subject key identifier: CF:1A:E7:99:42:12:38:E7:87:02:AA:CD:92:1C:3F:8A:D8:5E:F8:CB
Certificate issuer: /CN=668e9b2eefb205342382b6072a903f9d9837071a
Certificate serial: 01A04206F7933892A4EBBE199F7FDD5EDBFC
Authority key identifier: 66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/zxrnmUISOOeHAqrNkhw_ithe-Ms.roa
Signing time: Thu 27 Aug 2026 07:02:27 +0000
ROA not before: Thu 27 Aug 2026 07:02:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56676
IP address blocks: 31.130.120.0/21 maxlen: 21
91.237.187.0/24 maxlen: 24
91.237.209.0/24 maxlen: 24
92.62.116.0/24 maxlen: 24
92.62.116.0/25 maxlen: 25
92.62.116.128/25 maxlen: 25
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:06:f7:93:38:92:a4:eb:be:19:9f:7f:dd:5e:db:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=668e9b2eefb205342382b6072a903f9d9837071a
Validity
Not Before: Aug 27 07:02:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf1ae799421238e78702aacd921c3f8ad85ef8cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:46:41:ee:5d:de:22:41:e5:15:c1:62:90:0a:
0c:7a:19:a4:12:84:f2:6a:c1:e3:1f:b4:29:26:fe:
bc:41:58:a8:7d:90:98:98:5f:05:6d:72:f8:d5:ab:
ea:08:5e:9b:4f:fe:fe:de:87:ed:47:5f:1b:04:2e:
2b:4e:37:0a:03:79:76:b5:a1:15:fb:aa:16:75:47:
32:cb:33:c1:ab:b4:16:d0:5c:7f:bb:d6:70:b7:d5:
df:bf:ca:83:69:37:72:17:4d:d5:9b:56:34:a5:86:
f3:5c:c4:0d:47:0b:ab:94:62:40:d0:b3:13:e3:d0:
29:50:b3:e1:72:68:34:cc:0f:45:63:18:e6:47:0d:
ca:31:39:ef:5f:8f:25:c3:fc:a4:3d:3c:a1:4e:11:
40:d1:e7:29:9a:7f:08:71:d6:f5:d1:67:18:69:02:
dc:a5:e4:c4:3e:f3:7c:e9:3f:b0:83:1b:1a:3a:b5:
b9:3d:5b:6d:30:de:fa:fc:c0:de:e1:83:d7:f5:4a:
b5:61:84:5a:a1:45:58:52:36:12:94:d9:85:9c:07:
d8:0c:e3:7a:89:23:10:d5:1f:b2:84:36:2a:77:73:
65:9d:cb:bb:9a:49:4b:54:04:95:94:71:ad:bc:91:
4b:d8:06:0b:63:47:ba:61:61:c0:33:23:0d:9c:d2:
58:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1A:E7:99:42:12:38:E7:87:02:AA:CD:92:1C:3F:8A:D8:5E:F8:CB
X509v3 Authority Key Identifier:
keyid:66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/zxrnmUISOOeHAqrNkhw_ithe-Ms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.130.120.0/21
91.237.187.0/24
91.237.209.0/24
92.62.116.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:77:00:fb:1a:61:8f:94:91:e1:77:1e:7b:39:cb:19:24:c4:
9b:1d:ee:63:12:9a:06:f2:36:75:b2:8e:f7:09:09:4c:69:5c:
2b:9e:89:e0:d4:61:6b:ba:fb:c6:ee:ed:6c:41:f3:6c:c5:61:
e9:37:f0:bb:e1:3b:3e:e6:79:6b:aa:62:f4:79:7f:2f:83:40:
0a:46:64:59:84:07:26:b6:d4:a3:b4:da:a0:81:3b:ee:6b:96:
08:32:ad:fc:e9:47:a1:99:e3:e6:50:d2:3f:a6:4f:79:95:7f:
c4:c4:75:66:60:18:9f:c0:a8:45:38:51:85:93:a2:9b:37:ec:
61:3d:70:d8:9b:e1:c3:c2:b2:36:38:39:3d:0a:e8:a2:c2:94:
98:c3:5d:4e:1c:9e:40:4f:40:21:e1:2b:f1:85:75:8a:cf:f7:
ac:68:e6:87:09:f9:d9:83:ee:e8:87:b0:6e:b2:f8:68:ed:03:
a1:85:c1:9c:c5:d5:f1:79:b3:7a:47:ef:9c:e0:d0:ee:40:4a:
8e:a3:07:13:ea:55:5a:13:47:66:ad:ea:c0:79:7b:4b:b8:d2:
52:15:65:33:a6:57:d9:70:16:2c:f8:6d:3c:7a:1d:13:17:83:
fb:2b:6a:5c:b5:3c:21:6a:94:60:44:a1:f4:5a:06:d2:f9:a2:
bd:dc:cc:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:35:54 2026 by rpki-client