Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/ZJrKYNVeNIz0VYlhoJzi7d7m2vA.roa
File: ZJrKYNVeNIz0VYlhoJzi7d7m2vA.roa (raw, json)
Hash identifier: EFqLQnOjEFl37vCVsoiCRywmssmLRwolJfsBoc/u7Qg=
Subject key identifier: 64:9A:CA:60:D5:5E:34:8C:F4:55:89:61:A0:9C:E2:ED:DE:E6:DA:F0
Certificate issuer: /CN=0f1d5b9d88b579d0ddf7c21cb3d387d61ea516c1
Certificate serial: 01A01EE791B9AF2C3B5D529F1AE77CAD18B9
Authority key identifier: 0F:1D:5B:9D:88:B5:79:D0:DD:F7:C2:1C:B3:D3:87:D6:1E:A5:16:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dx1bnYi1edDd98Ics9OH1h6lFsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/ZJrKYNVeNIz0VYlhoJzi7d7m2vA.roa
Signing time: Thu 20 Aug 2026 11:21:27 +0000
ROA not before: Thu 20 Aug 2026 11:21:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62167
IP address blocks: 37.202.25.0/24 maxlen: 24
193.142.108.0/23 maxlen: 23
2a00:be40:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dx1bnYi1edDd98Ics9OH1h6lFsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1e:e7:91:b9:af:2c:3b:5d:52:9f:1a:e7:7c:ad:18:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f1d5b9d88b579d0ddf7c21cb3d387d61ea516c1
Validity
Not Before: Aug 20 11:21:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=649aca60d55e348cf4558961a09ce2eddee6daf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e0:82:76:9a:2e:fc:bc:14:93:c2:44:d7:8f:
02:7c:b1:0b:5d:e1:32:35:2b:19:31:e3:0a:d3:91:
da:21:bd:f1:4d:9a:d3:c4:66:5c:95:d7:9f:4b:e4:
6b:bc:ee:7d:75:cd:f7:7a:50:85:82:ef:44:5a:86:
1c:62:c0:cb:80:e6:bb:1a:e7:be:ff:91:23:2d:78:
e0:31:41:36:12:80:f7:57:40:37:a5:5f:04:c4:ac:
2e:a1:45:fb:44:8d:ea:23:37:49:10:e4:40:a5:cf:
1c:70:e3:c3:db:87:c5:44:90:a7:e6:e8:f4:ef:99:
a6:8d:45:d3:5c:c2:3c:dd:ab:49:01:ea:99:0b:5d:
0d:17:45:61:7e:8e:d7:12:de:35:fb:26:5c:0e:bf:
9f:74:70:cc:9a:bc:e8:c3:40:f7:3b:60:ff:e9:f3:
a6:5c:67:51:00:f2:ec:ce:ac:7a:44:bb:d4:33:9f:
6e:32:ac:dd:25:25:db:7b:5b:43:bf:68:1b:4b:86:
42:aa:c6:1f:f8:88:f2:0b:99:19:53:58:d6:4c:e8:
f2:61:70:06:54:eb:80:92:e0:a6:5d:73:0f:82:31:
34:e2:89:9b:32:e5:32:e5:f6:f0:e2:a4:a5:ff:ae:
ea:3b:14:29:81:05:c7:d9:8f:d0:8e:bf:8b:8b:58:
16:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:9A:CA:60:D5:5E:34:8C:F4:55:89:61:A0:9C:E2:ED:DE:E6:DA:F0
X509v3 Authority Key Identifier:
keyid:0F:1D:5B:9D:88:B5:79:D0:DD:F7:C2:1C:B3:D3:87:D6:1E:A5:16:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dx1bnYi1edDd98Ics9OH1h6lFsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/ZJrKYNVeNIz0VYlhoJzi7d7m2vA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.25.0/24
193.142.108.0/23
IPv6:
2a00:be40:2::/48
Signature Algorithm: sha256WithRSAEncryption
82:9e:49:b2:4b:c7:39:5f:a2:99:53:c5:c9:78:cd:7d:e8:7a:
bf:13:81:c1:21:b8:7c:93:e6:fe:46:73:48:6f:00:ef:db:d9:
23:19:5c:33:3d:c2:26:77:83:86:8f:89:c1:96:4e:45:f5:d3:
32:50:83:62:53:a4:af:f7:eb:ea:a9:22:37:54:d5:8e:c3:16:
eb:79:ec:44:04:a5:4d:9b:b5:78:1f:f5:30:25:d9:a0:d2:2f:
bf:b7:3d:76:ea:92:00:1d:44:c7:4c:14:02:55:59:be:32:10:
b8:3b:1a:3a:e1:2e:12:32:20:11:ea:f4:b7:93:81:38:a8:d2:
9a:e2:a7:82:74:98:cd:a9:23:68:14:fa:7c:3d:b7:85:3c:25:
b4:b3:36:a9:ae:86:35:65:bb:0c:82:62:7e:fd:a8:f8:a9:3b:
6f:fd:fc:66:12:e9:52:92:2f:d8:eb:b3:94:ba:0e:a6:9c:ca:
59:93:05:57:de:e6:c2:c3:96:37:eb:01:df:21:a9:b2:0d:1e:
4e:f9:22:65:6a:a4:4b:1d:14:91:aa:df:61:44:38:27:e5:49:
55:a7:9d:24:13:70:c3:cc:44:90:72:cc:5e:58:a5:a0:37:93:
77:70:e3:8c:7d:07:db:51:00:81:54:da:8c:e1:f9:cf:76:cd:
11:b0:59:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:38:52 2026 by rpki-client