Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/ZvpuGGPdR0Tj_mnqlFaplbB1d-k.roa
File: ZvpuGGPdR0Tj_mnqlFaplbB1d-k.roa (raw, json)
Hash identifier: 4iEHh8+6ED1W538BelIuRGbwkQ6XCFjzfzmp0Noffyc=
Subject key identifier: 66:FA:6E:18:63:DD:47:44:E3:FE:69:EA:94:56:A9:95:B0:75:77:E9
Certificate issuer: /CN=9bed36af13da482fdf79fb5403e5074860eecd0d
Certificate serial: 01A0C3E7DC574D9F0F6CD5878D3DF34D7525
Authority key identifier: 9B:ED:36:AF:13:DA:48:2F:DF:79:FB:54:03:E5:07:48:60:EE:CD:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-02rxPaSC_feftUA-UHSGDuzQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/ZvpuGGPdR0Tj_mnqlFaplbB1d-k.roa
Signing time: Mon 21 Sep 2026 12:19:07 +0000
ROA not before: Mon 21 Sep 2026 12:19:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203680
IP address blocks: 131.117.140.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/m-02rxPaSC_feftUA-UHSGDuzQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/m-02rxPaSC_feftUA-UHSGDuzQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-02rxPaSC_feftUA-UHSGDuzQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:e7:dc:57:4d:9f:0f:6c:d5:87:8d:3d:f3:4d:75:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bed36af13da482fdf79fb5403e5074860eecd0d
Validity
Not Before: Sep 21 12:19:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=66fa6e1863dd4744e3fe69ea9456a995b07577e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9a:16:58:6d:ad:8f:99:76:25:cb:9a:ff:2a:
66:f9:fe:59:aa:f3:d9:1e:a4:0b:87:f2:34:37:3f:
39:5c:aa:8e:31:ad:96:a0:4e:40:1e:2b:83:86:0f:
b5:e3:1e:19:06:99:65:65:46:34:62:f5:19:2a:b1:
f8:3b:e3:16:d0:28:34:68:38:5e:b1:2f:33:1f:4c:
d1:fc:30:fd:12:52:4b:c5:e8:a6:45:51:fa:40:69:
f5:9b:24:bc:06:e9:e9:b7:02:6a:c8:1b:1f:04:16:
ed:ef:dd:d5:31:ca:a6:d7:c5:d6:44:96:13:08:9f:
ca:ca:e0:f2:f5:62:60:ec:64:e2:09:1f:78:aa:e4:
d9:23:6b:2a:97:29:69:dd:48:8b:e3:68:86:fa:2c:
55:65:59:4c:3f:70:4f:de:b3:17:71:3b:41:39:60:
7a:e1:8c:e9:1e:85:aa:11:90:80:16:b0:d0:01:35:
f0:af:80:71:1b:9e:81:01:07:40:2a:96:1f:af:91:
97:b8:b6:99:af:ea:22:a9:1d:8e:d9:2a:e4:cd:7f:
04:06:22:dd:f9:ae:b4:91:b9:db:89:e2:5b:4c:a6:
e7:a5:b0:a1:08:29:b6:38:b7:08:fc:18:9b:4e:e8:
2f:0a:82:b6:04:10:f5:d7:c3:d8:93:52:0a:c5:f7:
c4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:FA:6E:18:63:DD:47:44:E3:FE:69:EA:94:56:A9:95:B0:75:77:E9
X509v3 Authority Key Identifier:
keyid:9B:ED:36:AF:13:DA:48:2F:DF:79:FB:54:03:E5:07:48:60:EE:CD:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-02rxPaSC_feftUA-UHSGDuzQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/ZvpuGGPdR0Tj_mnqlFaplbB1d-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/m-02rxPaSC_feftUA-UHSGDuzQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.117.140.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:be:90:3b:17:30:47:70:5b:b2:3e:9a:69:07:63:46:eb:3f:
87:52:e3:af:cb:41:d5:1f:27:a2:76:49:a6:c6:34:94:4e:f1:
03:f9:8b:05:54:5a:25:8f:6b:7c:8f:a5:e5:24:01:e7:29:3d:
07:fd:ae:41:1f:e0:8f:0c:1d:04:38:dc:15:cb:c9:37:0d:96:
51:69:1e:66:0c:ad:98:28:3a:73:35:80:08:52:0a:8c:c4:49:
af:63:5b:97:d4:0a:31:5b:8c:7b:ef:e1:b6:15:b4:cf:62:fe:
a4:76:79:7a:7e:32:a3:4e:78:f6:7e:c4:2c:64:f3:bd:e9:07:
9f:eb:ee:96:5a:f1:02:f1:b3:a8:d8:46:34:72:2a:7a:d8:ce:
ae:8d:33:ad:90:32:37:10:e4:9d:bc:72:41:c1:8f:56:cf:53:
6a:ae:14:4b:88:11:d2:be:ab:33:da:c1:11:e8:b2:50:eb:47:
b3:ec:1a:83:2d:91:6d:2a:0a:32:f0:9c:da:e6:2a:b0:57:79:
0f:a0:f3:cb:77:81:7c:82:57:3e:a6:aa:94:09:f9:19:52:4d:
28:07:7d:d8:a0:06:f1:6d:44:d7:29:25:e2:ee:8b:03:cb:dc:
f8:a3:ea:83:aa:66:d9:b6:02:85:46:a8:4d:13:56:6c:5e:29:
ac:b5:60:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:28:05 2026 by rpki-client