Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/rzoZvYZhRAmFi_AJLf1i4VME7pw.roa
File: rzoZvYZhRAmFi_AJLf1i4VME7pw.roa (raw, json)
Hash identifier: yynZ3LNe2GLN2DksQlwGtRqK3zJ9YCcJbYj09fZ8Pag=
Subject key identifier: AF:3A:19:BD:86:61:44:09:85:8B:F0:09:2D:FD:62:E1:53:04:EE:9C
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019EA61A7562B1C255B38B9E8F20969FBD77
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/rzoZvYZhRAmFi_AJLf1i4VME7pw.roa
Signing time: Mon 08 Jun 2026 07:20:12 +0000
ROA not before: Mon 08 Jun 2026 07:20:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212306
IP address blocks: 77.107.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a6:1a:75:62:b1:c2:55:b3:8b:9e:8f:20:96:9f:bd:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 8 07:20:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af3a19bd86614409858bf0092dfd62e15304ee9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:45:a4:bd:73:ec:5a:12:5b:01:64:68:d8:ef:
0d:d2:e8:fe:93:4a:b5:ee:57:b7:fb:97:1f:26:84:
7b:13:77:66:6e:57:1d:5c:30:f6:18:e5:67:f9:67:
b0:5f:69:b9:9d:70:d4:11:3b:70:a2:bb:95:f8:63:
eb:4c:4e:14:72:b7:4f:19:d5:57:ac:56:a8:18:c3:
83:39:77:ee:5a:cf:39:5c:49:c1:04:03:00:d8:6f:
b7:d7:ab:06:fd:08:5a:a8:82:2f:61:48:77:54:9a:
ac:06:3c:55:82:58:04:83:a4:3d:41:84:8b:80:9f:
6f:84:29:a8:d3:45:02:72:f0:ff:73:7c:a4:9c:54:
f2:37:1f:86:25:1c:6a:20:77:84:fa:cb:61:ff:be:
5d:9c:57:c3:8e:29:03:31:c6:44:3f:6a:66:d3:4c:
cb:e7:84:85:4f:5d:1d:b0:18:c9:75:45:e5:3f:e1:
64:9a:ea:02:09:1c:19:bf:29:40:40:95:fe:91:5e:
9f:43:12:14:cc:9c:70:14:3c:7d:ea:9e:97:37:4b:
65:26:23:fd:21:68:15:88:be:53:ea:d6:77:e4:49:
5d:77:99:19:bc:39:79:ca:c0:16:3c:1c:08:6d:b1:
8d:4f:d7:36:4c:7f:bc:88:6b:60:62:89:6a:5f:fd:
71:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:3A:19:BD:86:61:44:09:85:8B:F0:09:2D:FD:62:E1:53:04:EE:9C
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/rzoZvYZhRAmFi_AJLf1i4VME7pw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.107.95.0/24
Signature Algorithm: sha256WithRSAEncryption
45:fa:d2:1e:28:d7:62:b6:18:83:08:5b:d5:a5:64:04:10:18:
1b:ea:12:36:b8:7c:41:9a:d3:47:a1:1d:50:5f:4d:cd:58:75:
b8:64:25:8a:77:26:e2:e0:03:f4:be:65:1b:f7:b9:d4:ad:de:
1d:2b:f5:8c:27:f2:d1:0f:71:d4:3b:e8:04:75:bc:1b:08:a1:
32:cd:3a:ca:b7:98:90:e0:20:fe:16:69:e7:a1:6a:2c:b3:f8:
05:72:95:e3:6f:33:c5:25:ab:05:39:63:e8:9d:3e:4e:29:d0:
6b:37:c3:04:03:d5:25:62:ad:51:9e:02:da:96:52:85:ae:91:
7d:7b:ba:4d:fa:29:00:0a:74:7d:e3:e3:19:ca:6f:57:c9:63:
c3:97:73:ac:78:41:75:d9:0b:fe:43:ef:69:62:52:65:5d:c4:
b1:c8:c0:32:7f:36:49:af:5f:e0:0d:d7:e5:69:65:3c:be:94:
52:03:47:67:0a:57:fd:dc:97:17:fc:bd:9f:9f:d6:70:ef:a1:
c9:b0:7e:1f:0e:b5:96:5f:20:18:13:43:8a:90:76:f4:73:71:
19:22:0f:8f:c1:fb:be:f5:53:4c:73:6f:22:4f:a5:8f:4f:ae:
4c:7b:03:85:ef:14:0d:d8:b6:15:a7:af:f2:d6:5a:13:03:62:
6a:05:97:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:55:39 2026 by rpki-client