Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/ZOuUkixv4jIctaV9M6ndSS0jvNg.roa
File: ZOuUkixv4jIctaV9M6ndSS0jvNg.roa (raw, json)
Hash identifier: RsCPPPazauyvfJD3axzsTDj7CGHj5qPNtY0lDybeCBs=
Subject key identifier: 64:EB:94:92:2C:6F:E2:32:1C:B5:A5:7D:33:A9:DD:49:2D:23:BC:D8
Certificate issuer: /CN=bd60edf96266b7c0d43836c854ab472cb74db034
Certificate serial: 019EAD0A91F2A9785752FB06A006D761E700
Authority key identifier: BD:60:ED:F9:62:66:B7:C0:D4:38:36:C8:54:AB:47:2C:B7:4D:B0:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWDt-WJmt8DUODbIVKtHLLdNsDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/ZOuUkixv4jIctaV9M6ndSS0jvNg.roa
Signing time: Tue 09 Jun 2026 15:40:11 +0000
ROA not before: Tue 09 Jun 2026 15:40:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205759
IP address blocks: 83.142.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vWDt-WJmt8DUODbIVKtHLLdNsDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ad:0a:91:f2:a9:78:57:52:fb:06:a0:06:d7:61:e7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd60edf96266b7c0d43836c854ab472cb74db034
Validity
Not Before: Jun 9 15:40:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=64eb94922c6fe2321cb5a57d33a9dd492d23bcd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:23:fa:dd:9f:7b:de:a1:c4:37:f0:39:28:a7:
76:4f:4c:13:21:c9:e9:cc:02:23:dc:43:5d:bd:60:
8b:94:2b:9b:0f:12:c0:d7:29:a7:26:95:29:9e:79:
08:99:e3:fa:5c:f9:c4:18:86:14:6b:c9:12:65:46:
86:a9:9b:38:77:f7:6a:40:21:0d:e8:0e:1c:0f:1b:
f1:12:c4:39:c3:8c:19:a3:8c:5f:61:db:d5:45:34:
8d:c8:b0:a9:5b:62:c2:5f:aa:ac:ea:35:c5:29:9f:
de:36:9d:70:c3:12:76:71:9b:91:e9:f1:0a:26:a8:
7b:fd:c3:57:0d:9d:1c:7a:06:28:d1:4b:42:80:23:
8b:83:a6:8d:06:ab:f7:b5:7d:31:84:02:e3:7f:f9:
5c:68:a4:b8:84:45:8a:ef:5b:26:0f:13:0c:19:fd:
c8:87:59:d9:36:c0:2d:85:77:af:61:7e:81:16:43:
ef:db:63:69:02:8c:77:2f:db:21:ca:70:61:24:7f:
96:23:27:4c:e2:c7:26:d9:34:08:d8:40:18:23:95:
1b:6b:22:e0:ef:a3:68:4c:fc:03:98:49:30:09:ef:
56:a2:5d:0e:2b:f2:db:15:6d:bf:6c:35:e4:42:9f:
db:d7:1a:9c:80:06:19:f9:68:f0:c9:8b:f3:76:f5:
b4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:EB:94:92:2C:6F:E2:32:1C:B5:A5:7D:33:A9:DD:49:2D:23:BC:D8
X509v3 Authority Key Identifier:
keyid:BD:60:ED:F9:62:66:B7:C0:D4:38:36:C8:54:AB:47:2C:B7:4D:B0:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWDt-WJmt8DUODbIVKtHLLdNsDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/ZOuUkixv4jIctaV9M6ndSS0jvNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.142.209.0/24
Signature Algorithm: sha256WithRSAEncryption
00:64:70:a1:05:1c:90:22:3d:82:cd:05:84:d7:e3:e7:bf:11:
50:f3:61:6c:4a:b1:b9:19:70:79:ad:b9:08:25:90:be:fd:cf:
1a:c4:5b:a9:ea:95:50:22:09:ff:90:58:18:7e:ea:1a:ca:5a:
70:9c:73:ce:21:be:71:c2:70:ac:e5:a2:28:40:cd:63:5a:54:
3c:e7:2d:f3:a3:23:13:0c:0b:d0:91:d9:ef:74:d4:f9:3a:ec:
74:d0:59:0c:c8:8f:28:c1:26:07:dc:6d:39:48:aa:eb:67:2a:
41:90:13:3e:a4:b2:23:f2:ca:15:c3:b1:fa:b2:d3:fa:08:9a:
a2:35:44:a2:19:53:00:e2:81:7d:52:78:64:ff:d6:fe:b3:d2:
e8:52:88:bc:bf:5d:d9:ec:7d:ad:7f:9e:98:65:31:2f:33:0f:
81:b8:d4:65:96:e0:1b:b7:f1:c9:ea:ab:33:68:69:c7:4e:df:
ca:68:3e:04:ba:74:5c:a7:50:49:53:ff:49:c6:06:76:0e:01:
0a:1c:f7:25:37:e9:1a:7f:25:fc:b2:5a:a5:2a:b6:de:f0:b3:
4e:47:b8:d4:1f:ae:64:3f:d8:41:69:d7:a0:4d:7b:58:53:79:
2b:f9:c3:16:44:f6:2a:f4:18:bc:9a:1d:b4:da:db:f5:34:60:
cc:32:2d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:27:43 2026 by rpki-client