Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/zpIhgfY5P1eLYLN8PYs34qx47Zw.roa
File: zpIhgfY5P1eLYLN8PYs34qx47Zw.roa (raw, json)
Hash identifier: yFovzfEIL2m5M2FK6tMYZvkFCHVcMoKHd18eXgobGqA=
Subject key identifier: CE:92:21:81:F6:39:3F:57:8B:60:B3:7C:3D:8B:37:E2:AC:78:ED:9C
Certificate issuer: /CN=7df34269c16c3de3a3438d9c83e8e19e47800941
Certificate serial: 019F2368686AFE9B703840CA1B98CEDED6C4
Authority key identifier: 7D:F3:42:69:C1:6C:3D:E3:A3:43:8D:9C:83:E8:E1:9E:47:80:09:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffNCacFsPeOjQ42cg-jhnkeACUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/zpIhgfY5P1eLYLN8PYs34qx47Zw.roa
Signing time: Thu 02 Jul 2026 15:17:52 +0000
ROA not before: Thu 02 Jul 2026 15:17:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201336
IP address blocks: 109.71.248.0/22 maxlen: 22
109.71.248.0/24 maxlen: 24
109.71.249.0/24 maxlen: 24
109.71.250.0/24 maxlen: 24
109.71.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/ffNCacFsPeOjQ42cg-jhnkeACUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/ffNCacFsPeOjQ42cg-jhnkeACUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffNCacFsPeOjQ42cg-jhnkeACUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:68:6a:fe:9b:70:38:40:ca:1b:98:ce:de:d6:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df34269c16c3de3a3438d9c83e8e19e47800941
Validity
Not Before: Jul 2 15:17:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ce922181f6393f578b60b37c3d8b37e2ac78ed9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:80:38:1c:fe:65:97:20:e8:66:5b:3e:00:1d:
70:cc:94:43:8e:ef:4b:10:bb:4d:0e:8a:19:b7:c7:
96:cf:26:4b:bc:e3:1c:c6:28:9e:54:64:e4:c9:00:
1a:38:a5:8d:96:8a:bf:27:60:06:f4:5f:a9:9f:47:
cf:29:cd:16:2b:8c:c0:ba:2b:60:ff:28:99:f2:a4:
3b:4f:0d:4d:4c:6c:18:20:db:0a:63:64:ee:eb:6a:
36:91:34:1b:c7:be:dc:8b:ca:25:b8:e1:51:60:18:
52:05:73:f0:09:8a:f1:5e:57:0d:56:e6:87:08:b7:
49:2e:b1:36:b3:da:de:33:6f:fd:5b:55:db:55:d4:
70:3c:9d:8f:f5:59:38:56:85:b9:ed:29:b8:39:6b:
f1:a2:af:54:9e:ca:a3:0e:e6:18:75:22:db:a6:3b:
5d:c0:11:65:1b:6a:db:37:d6:f9:0e:0a:c7:16:ba:
cc:43:f2:b6:48:fb:66:0a:7f:83:e3:1f:9a:08:7c:
62:8b:3d:6c:25:52:38:5f:ee:d4:c2:f8:c2:95:19:
bb:7c:14:5c:3b:f9:67:c0:c5:43:73:b7:9e:2e:a1:
ee:c1:7e:c7:d1:df:44:4c:30:66:1d:0e:54:9d:c7:
13:58:42:38:7f:0d:e8:7c:d4:1d:e8:75:40:93:f4:
25:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:92:21:81:F6:39:3F:57:8B:60:B3:7C:3D:8B:37:E2:AC:78:ED:9C
X509v3 Authority Key Identifier:
keyid:7D:F3:42:69:C1:6C:3D:E3:A3:43:8D:9C:83:E8:E1:9E:47:80:09:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffNCacFsPeOjQ42cg-jhnkeACUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/zpIhgfY5P1eLYLN8PYs34qx47Zw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/ffNCacFsPeOjQ42cg-jhnkeACUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.71.248.0/22
Signature Algorithm: sha256WithRSAEncryption
77:3c:a8:b8:a5:51:52:df:09:eb:89:b7:ec:1b:f2:c7:a9:22:
51:fd:f7:d2:c9:97:6e:35:a9:46:2a:27:f2:5a:92:ac:ac:87:
22:8c:4e:71:91:2a:3b:01:7b:5c:c8:c5:b6:b9:44:e9:e8:92:
3f:9c:52:ff:0e:d9:5b:7c:60:8b:a8:6c:f3:f2:9a:36:9b:2c:
80:2f:93:e9:00:97:30:9e:56:e2:a3:ea:99:c7:a2:8c:0f:d4:
af:4d:a2:6a:aa:91:a1:d1:c8:b6:24:3f:72:4c:44:15:87:91:
a5:26:8c:cc:b5:ea:96:f4:f2:96:a1:8b:96:66:7e:c8:73:43:
54:31:07:7b:6b:24:12:2c:66:c2:b0:4c:bb:f2:f2:82:f9:aa:
28:01:5c:7a:2a:c4:42:a8:92:ff:b6:80:ea:e2:06:40:cc:7d:
29:40:a3:ba:58:cb:3d:1e:e6:bf:60:49:30:00:b7:57:e4:80:
08:62:60:51:df:23:56:e2:1a:28:94:d7:96:70:ff:1b:87:7b:
f7:03:68:bb:d4:de:f3:50:fb:b0:c3:57:2c:e8:1b:fa:b2:6d:
6f:9c:0b:15:75:3a:e0:fb:a5:eb:15:99:3e:c6:2e:b2:2f:7e:
30:76:2d:68:2d:96:68:10:88:9c:02:ec:66:aa:80:83:f9:43:
04:63:0f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:26:58 2026 by rpki-client