Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/Ztqr6j7l7h3hs1VNVXmX_PeO6y8.roa
File: Ztqr6j7l7h3hs1VNVXmX_PeO6y8.roa (raw, json)
Hash identifier: ALLvNYgYy+qfhyJjEdyh1rN26Jk0vmO2dzNitEKWBcE=
Subject key identifier: 66:DA:AB:EA:3E:E5:EE:1D:E1:B3:55:4D:55:79:97:FC:F7:8E:EB:2F
Certificate issuer: /CN=af9e27ff884d1ff7f47abd0050ed10e01edcedfb
Certificate serial: 01A0A454106A91F1796DF555AAD891E75525
Authority key identifier: AF:9E:27:FF:88:4D:1F:F7:F4:7A:BD:00:50:ED:10:E0:1E:DC:ED:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/Ztqr6j7l7h3hs1VNVXmX_PeO6y8.roa
Signing time: Tue 15 Sep 2026 09:09:27 +0000
ROA not before: Tue 15 Sep 2026 09:09:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31244
IP address blocks: 89.38.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:04:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a4:54:10:6a:91:f1:79:6d:f5:55:aa:d8:91:e7:55:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af9e27ff884d1ff7f47abd0050ed10e01edcedfb
Validity
Not Before: Sep 15 09:09:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=66daabea3ee5ee1de1b3554d557997fcf78eeb2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:74:7c:08:e9:b0:e9:55:d4:33:3b:5b:20:45:
d6:4a:2f:00:69:82:2f:9d:c2:af:0b:99:ee:2d:c1:
bb:1b:fe:ea:8a:b1:f9:69:b1:a9:7a:97:99:db:3c:
ba:d8:5e:78:cf:59:31:15:45:db:cb:1c:e8:bb:06:
dc:f3:92:4e:0c:69:6f:66:e7:23:1e:ab:f1:70:66:
96:57:43:42:e5:28:08:6b:6b:d5:34:57:40:2d:a7:
4f:27:36:24:f2:0e:84:29:e7:27:e9:27:6b:9f:8f:
cb:19:4e:ed:08:b9:7a:64:e0:99:e0:61:a8:02:07:
fb:93:83:05:ea:42:6d:ad:56:74:30:44:45:a6:07:
8a:b6:73:01:01:f3:7b:7e:1b:52:a2:b3:e2:05:a3:
8e:a6:ee:2e:79:7b:bc:46:55:2a:1c:8b:88:5d:5e:
d9:37:eb:20:36:8f:49:d4:34:7b:0c:11:ae:ec:79:
07:ef:29:9a:1c:35:56:0e:71:42:33:33:d8:82:71:
43:f2:df:24:e8:cd:3d:56:9c:9d:55:fc:ec:ec:c6:
45:4e:9d:28:24:43:c2:a3:a4:16:df:66:ce:16:91:
26:7a:c4:1e:ec:ac:2f:ed:fb:cf:8e:36:07:ea:34:
5d:30:15:c8:bb:70:2e:23:07:4e:bf:e8:2d:50:20:
3e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:DA:AB:EA:3E:E5:EE:1D:E1:B3:55:4D:55:79:97:FC:F7:8E:EB:2F
X509v3 Authority Key Identifier:
keyid:AF:9E:27:FF:88:4D:1F:F7:F4:7A:BD:00:50:ED:10:E0:1E:DC:ED:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/Ztqr6j7l7h3hs1VNVXmX_PeO6y8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.38.233.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:8c:53:33:b2:e3:a0:ce:33:31:d5:24:b8:e4:4f:91:0c:98:
60:fa:12:8f:68:16:c3:80:b8:cf:fc:32:ce:97:f4:80:d1:d6:
dc:97:96:23:6e:b4:d8:35:9d:76:56:5d:02:2d:79:89:73:91:
b0:49:d2:81:7c:77:15:14:9a:86:b8:df:e0:74:2b:2d:95:a2:
62:5f:3a:cd:8c:a9:c1:9b:78:34:44:9d:95:d8:7f:c7:33:8b:
07:ca:ea:c1:01:dc:fe:f5:37:12:a9:3a:67:09:54:c6:34:bf:
9a:2b:ad:55:1d:6d:bb:ca:a1:f2:a1:df:7a:86:1a:c3:f3:0b:
e8:e1:b9:2e:51:d3:af:da:69:5e:ba:eb:3c:36:c1:02:07:8a:
d5:9a:40:0c:c5:72:66:a7:34:cc:bf:7c:37:34:78:f0:85:27:
6c:e3:2b:09:4f:0b:81:38:17:8f:ed:62:e9:16:e7:03:9a:50:
ee:06:df:44:51:88:86:15:78:02:6f:d1:6a:27:4c:03:cb:5a:
b7:b0:c6:d4:75:4d:34:8e:31:ed:db:31:d3:b6:00:be:61:ce:
5c:0d:b2:3d:a0:89:49:7e:66:4e:b3:06:7b:b5:35:67:8a:17:
88:39:c2:2b:82:ef:63:5f:96:ff:4f:c5:f4:06:b8:88:1a:bb:
57:83:81:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:56:45 2026 by rpki-client