Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/cZ7ZhoEWACPKL1hgzpRrPElX08A.roa
File: cZ7ZhoEWACPKL1hgzpRrPElX08A.roa (raw, json)
Hash identifier: wf0JyXCRSvZ3zP2oo8QOOdxV4cogB8l3U1ibW/7bytQ=
Subject key identifier: 71:9E:D9:86:81:16:00:23:CA:2F:58:60:CE:94:6B:3C:49:57:D3:C0
Certificate issuer: /CN=af9e27ff884d1ff7f47abd0050ed10e01edcedfb
Certificate serial: 01A0C447FCC00E4F107F36EEE8A35375FD9E
Authority key identifier: AF:9E:27:FF:88:4D:1F:F7:F4:7A:BD:00:50:ED:10:E0:1E:DC:ED:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/cZ7ZhoEWACPKL1hgzpRrPElX08A.roa
Signing time: Mon 21 Sep 2026 14:04:07 +0000
ROA not before: Mon 21 Sep 2026 14:04:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62306
IP address blocks: 185.221.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:04:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:47:fc:c0:0e:4f:10:7f:36:ee:e8:a3:53:75:fd:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af9e27ff884d1ff7f47abd0050ed10e01edcedfb
Validity
Not Before: Sep 21 14:04:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=719ed98681160023ca2f5860ce946b3c4957d3c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:48:c8:14:20:c2:6e:31:8d:ef:36:76:b7:83:
13:a0:13:f0:a1:58:10:14:9e:9d:7d:ae:a8:e0:e5:
ad:4e:9d:16:94:41:90:87:bf:85:7d:92:58:b5:c9:
24:8c:17:32:e3:ed:ab:68:cb:1d:19:82:86:b2:b1:
04:1e:2e:c8:29:58:eb:5f:b2:bb:83:96:91:5b:54:
f5:37:9e:f5:ee:11:bb:25:54:49:2c:f4:90:27:aa:
dd:27:28:9b:4a:9c:8c:ee:57:3a:c9:c7:95:ed:89:
dc:ee:e6:f2:60:77:b1:8c:3b:45:39:b8:f7:65:8e:
2f:92:0f:65:9f:f3:a6:05:8c:7e:80:e8:bd:b7:17:
a9:d0:e0:a4:04:82:c2:ff:21:56:48:c6:45:5c:f5:
bd:36:ab:2a:54:89:63:77:38:b1:41:15:82:a3:c6:
05:81:d3:b0:60:64:b3:0f:f7:42:66:e1:04:78:5e:
26:3d:8d:1e:64:88:06:ba:b8:a8:92:c3:99:c8:7a:
d0:e6:4c:ec:9a:93:2a:9b:d1:93:47:06:39:3c:36:
19:f2:3b:54:82:f4:69:cb:fb:71:94:9e:88:c3:ed:
ae:eb:0a:ee:35:8b:0e:93:7e:c4:5e:bb:70:af:a0:
7f:80:e8:7a:93:84:ad:55:75:cf:a4:f5:91:b8:ee:
73:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:9E:D9:86:81:16:00:23:CA:2F:58:60:CE:94:6B:3C:49:57:D3:C0
X509v3 Authority Key Identifier:
keyid:AF:9E:27:FF:88:4D:1F:F7:F4:7A:BD:00:50:ED:10:E0:1E:DC:ED:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/cZ7ZhoEWACPKL1hgzpRrPElX08A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.220.0/24
Signature Algorithm: sha256WithRSAEncryption
57:1f:88:4d:e5:86:1a:dc:42:c3:28:22:66:aa:39:62:5e:15:
ba:ce:a3:50:4e:99:8d:13:ba:18:b9:bd:2e:1f:db:40:49:4d:
99:27:f7:be:6d:d4:f1:ae:b1:bd:02:38:4b:f3:f8:6f:7b:e1:
ce:43:31:e4:86:96:f4:b6:44:2f:25:91:d6:11:a9:bf:e8:7b:
df:be:a5:25:b5:ab:5e:76:a9:3d:a2:de:99:7b:f7:a8:c4:4d:
57:cf:7c:41:14:64:3e:a3:3b:ba:81:1d:56:a7:04:0a:51:17:
6a:02:63:b9:77:8e:5d:b7:1f:9c:98:13:b3:e1:e9:a2:c2:97:
b0:c7:09:30:76:a7:a9:15:0a:b7:92:f0:8f:3b:18:5b:46:73:
8a:5d:36:9e:f7:42:74:8c:0a:30:87:60:d0:44:59:aa:db:59:
7d:05:12:6d:bd:f7:ba:1e:96:31:36:7d:d9:0c:ac:e6:06:1d:
a6:aa:64:82:3b:87:4f:f8:76:a2:89:19:ec:72:28:38:f4:f2:
b1:95:7b:68:6a:20:8e:8e:b8:ef:ca:e2:74:20:39:63:4d:1d:
97:49:d1:4b:5e:93:82:1d:85:c9:29:6b:d0:d5:7c:c5:a4:6f:
ab:d6:f8:aa:a9:0f:f2:d6:5a:c2:59:25:89:9c:ad:f0:fa:e0:
a0:ef:4d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:49:31 2026 by rpki-client