Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZBGwyMS-V1DPkyetOg_uvanTE6s.roa
File: ZBGwyMS-V1DPkyetOg_uvanTE6s.roa (raw, json)
Hash identifier: V4qFug9jpZxotkSxJY7qJZG+TcgUYmH9mWN8JhIjMtc=
Subject key identifier: 64:11:B0:C8:C4:BE:57:50:CF:93:27:AD:3A:0F:EE:BD:A9:D3:13:AB
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019D4D3711805FE042840DEF166F7F1A77C5
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZBGwyMS-V1DPkyetOg_uvanTE6s.roa
Signing time: Thu 02 Apr 2026 08:02:27 +0000
ROA not before: Thu 02 Apr 2026 08:02:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202294
IP address blocks: 31.58.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:4d:37:11:80:5f:e0:42:84:0d:ef:16:6f:7f:1a:77:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 2 08:02:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6411b0c8c4be5750cf9327ad3a0feebda9d313ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:33:6a:f0:d2:23:40:f7:e8:f9:04:69:73:f6:
70:0d:2e:e5:3d:ad:5c:9b:00:39:6f:76:ff:0a:c8:
da:f7:a5:d0:87:63:c9:13:21:a6:1f:b1:2f:2d:11:
11:89:a4:94:39:70:2b:10:5b:29:2f:52:b9:06:1d:
8f:6d:9e:39:fb:f5:aa:8c:3e:46:38:3c:8b:85:0f:
0a:77:f6:c7:92:91:61:7e:53:70:b6:7f:1b:3d:4e:
85:fe:b7:68:a7:30:be:6c:25:f9:75:e1:7b:ab:5d:
51:4c:1e:15:f6:ed:8d:2c:e9:3a:af:d7:87:d9:86:
cb:49:f9:36:49:7e:d0:45:c9:8f:55:10:32:55:97:
04:e9:64:f7:c2:4d:42:e5:12:7d:24:22:49:af:66:
e0:57:a0:45:6a:7e:21:81:b4:1b:8d:e8:46:86:de:
16:2f:57:5c:19:d0:79:60:a1:38:96:ec:df:ff:98:
02:aa:49:8e:53:47:ab:e1:0c:d6:55:9f:6c:fa:02:
9b:09:18:4e:8e:37:fe:ba:87:84:b0:c0:7a:76:d6:
09:3a:56:ca:7f:1a:16:41:65:93:23:cf:4d:83:ac:
21:13:0c:fd:75:67:c0:4a:d2:fb:3b:53:d0:a8:84:
c5:9f:79:b1:84:0b:2d:d8:e6:8a:73:e3:9f:ca:19:
96:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:11:B0:C8:C4:BE:57:50:CF:93:27:AD:3A:0F:EE:BD:A9:D3:13:AB
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZBGwyMS-V1DPkyetOg_uvanTE6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.244.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:d6:0a:00:cc:fb:a5:20:4f:1c:15:3c:1f:7e:c3:37:45:cf:
34:a7:a1:2c:4e:5c:08:16:6f:c3:66:18:d6:70:17:5e:dc:a5:
c8:f0:6f:c2:9b:68:b5:03:dd:eb:48:d9:99:79:40:2e:34:45:
ea:bd:39:19:ce:5a:03:8e:e4:89:76:d8:fe:55:82:26:76:02:
a4:fb:74:dd:1a:79:60:f1:40:38:33:85:53:c0:2b:e6:fc:b2:
42:bb:75:72:a2:d8:c3:93:ad:0d:25:d7:d4:67:7a:dc:d5:31:
31:1a:88:dd:13:04:00:94:0e:a5:61:92:9a:c6:b2:9a:50:a6:
0f:81:57:cc:8e:29:8b:d1:7e:52:6b:08:ed:9d:9e:f3:44:2e:
eb:d2:5c:a6:d7:7c:bb:7d:5b:85:54:94:c0:50:a5:56:17:e1:
d4:b1:b0:3f:4f:50:c2:65:f5:56:63:0b:bb:31:69:1e:2e:5a:
b9:4f:a1:d0:fe:4d:dd:c3:df:41:55:0a:db:6c:4d:62:70:79:
fb:02:2b:d0:ee:16:6c:a6:6f:55:62:7b:d4:22:9b:ef:0b:d0:
d2:83:6b:96:70:9d:3c:42:a9:1f:59:e4:b0:e8:24:ff:ee:cf:
7b:47:0b:62:74:9d:39:a2:c0:ad:ec:7e:67:48:14:a6:25:43:
2c:de:a3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:01:54 2026 by rpki-client