Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/ZPCa8LQzKDqUpRq3xwqs6wcVgP8.roa
File: ZPCa8LQzKDqUpRq3xwqs6wcVgP8.roa (raw, json)
Hash identifier: pzJkGMjERLepMBuQCiqoAo0aqIY6I+eV0YqeRO3/Yuc=
Subject key identifier: 64:F0:9A:F0:B4:33:28:3A:94:A5:1A:B7:C7:0A:AC:EB:07:15:80:FF
Certificate issuer: /CN=69fa2623b222d08d9356975044b9407b5fea48ba
Certificate serial: 01A080190D9E27F9FCEAFFA07B22C19DB1DA
Authority key identifier: 69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/ZPCa8LQzKDqUpRq3xwqs6wcVgP8.roa
Signing time: Tue 08 Sep 2026 08:18:40 +0000
ROA not before: Tue 08 Sep 2026 08:18:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197401
IP address blocks: 187.13.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:55:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:80:19:0d:9e:27:f9:fc:ea:ff:a0:7b:22:c1:9d:b1:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fa2623b222d08d9356975044b9407b5fea48ba
Validity
Not Before: Sep 8 08:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=64f09af0b433283a94a51ab7c70aaceb071580ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f2:17:d2:47:2a:e9:85:c0:10:70:d7:1f:8c:
ba:81:b3:97:eb:6f:6f:07:ed:64:b8:98:84:d1:55:
67:8b:5d:2a:22:ee:85:93:86:2b:91:40:cb:78:e9:
bb:7e:27:6e:92:e3:6f:da:88:21:98:e0:14:7f:66:
54:86:c7:17:f9:8d:47:13:a3:1d:02:c6:90:98:2f:
4f:2d:07:dc:96:ad:ff:d2:ca:59:21:2f:b4:d9:76:
d0:09:57:70:10:e6:f3:22:7f:27:ea:bf:10:df:52:
3d:52:43:01:71:8f:3a:4b:a4:ea:2a:a7:53:09:56:
41:b3:71:17:35:42:2c:7b:38:82:bd:2b:2a:9b:7e:
a5:c3:51:45:29:de:39:09:1d:c5:b9:b5:34:8d:5d:
bf:e6:9c:60:81:c9:5b:01:31:e0:ef:71:bb:05:ec:
a8:34:52:4a:fc:8a:bb:5d:a6:5a:cf:52:22:e7:e9:
c4:33:a1:80:c4:b4:6a:30:26:02:cc:6f:3b:79:54:
e4:26:93:71:33:4c:fc:6f:a7:ae:d1:c5:7c:34:39:
86:71:54:bc:9a:50:e6:90:80:21:4f:fd:14:1f:fc:
ef:a3:7c:e5:4a:59:aa:91:eb:8c:76:3d:23:0c:99:
c0:b2:a8:07:a4:0f:39:25:99:3f:1d:9f:cd:d6:32:
22:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F0:9A:F0:B4:33:28:3A:94:A5:1A:B7:C7:0A:AC:EB:07:15:80:FF
X509v3 Authority Key Identifier:
keyid:69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/ZPCa8LQzKDqUpRq3xwqs6wcVgP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.13.72.0/24
Signature Algorithm: sha256WithRSAEncryption
16:70:97:f1:27:67:ce:53:bc:93:b0:b2:dd:c2:35:07:b9:5f:
b2:3d:85:db:42:70:95:04:f3:a4:6e:69:d2:ea:62:28:b9:ed:
12:28:85:cc:62:6c:fd:71:c8:27:ff:96:70:89:fc:0b:2d:de:
2f:5c:74:6d:52:67:42:31:57:79:77:42:84:d2:79:a9:f3:09:
76:a1:8c:11:95:7c:77:ce:01:90:17:12:12:38:82:55:84:a8:
b7:18:2f:41:8b:d4:f6:12:40:a4:7c:05:c1:41:7d:81:a4:18:
ef:41:1e:74:aa:9d:20:dc:36:89:2f:1b:64:5c:b0:60:28:15:
95:d3:0e:0d:84:08:71:3d:5a:c9:75:61:14:a2:20:ac:9f:8a:
f6:73:73:5e:e1:15:15:c2:cc:59:e0:ce:1a:0b:7c:5a:09:b6:
fc:3e:62:84:69:13:3f:3a:c0:b9:4c:ba:59:58:29:1e:f6:54:
e4:c6:35:1d:38:ec:07:84:95:0b:51:52:c4:5a:c6:43:0c:79:
bb:f7:d3:81:80:d3:a9:b6:6f:42:1d:b9:75:e0:33:55:1c:e0:
e4:23:0b:69:0d:8b:72:51:da:5a:08:b0:75:5c:29:48:e2:82:
c3:55:28:f4:1d:91:a9:5b:a2:70:7a:4d:d5:65:f5:59:f2:63:
a6:3b:e8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:13:46 2026 by rpki-client