Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/ZH79cfZtvswrSRgEB8rNyMLIncU.roa
File: ZH79cfZtvswrSRgEB8rNyMLIncU.roa (raw, json)
Hash identifier: GdJB3BYjUYCwb6ugCMPQc81N/mokOXiUDJJvBJrnEFI=
Subject key identifier: 64:7E:FD:71:F6:6D:BE:CC:2B:49:18:04:07:CA:CD:C8:C2:C8:9D:C5
Certificate issuer: /CN=8cc44984c686f2018c48102a284ab5a80f52a646
Certificate serial: 019D861A3E91EB22CE7459F49596AAAD3412
Authority key identifier: 8C:C4:49:84:C6:86:F2:01:8C:48:10:2A:28:4A:B5:A8:0F:52:A6:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jMRJhMaG8gGMSBAqKEq1qA9SpkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/ZH79cfZtvswrSRgEB8rNyMLIncU.roa
Signing time: Mon 13 Apr 2026 09:09:19 +0000
ROA not before: Mon 13 Apr 2026 09:09:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1299
IP address blocks: 91.229.137.0/24 maxlen: 24
91.229.138.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jMRJhMaG8gGMSBAqKEq1qA9SpkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:86:1a:3e:91:eb:22:ce:74:59:f4:95:96:aa:ad:34:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cc44984c686f2018c48102a284ab5a80f52a646
Validity
Not Before: Apr 13 09:09:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=647efd71f66dbecc2b49180407cacdc8c2c89dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fa:94:70:2b:78:50:e8:da:9b:2f:e4:0a:56:
6a:1c:d6:88:59:3f:06:58:7b:60:14:ba:d4:61:1f:
42:3c:85:cc:e4:bc:29:c9:6a:05:99:4c:8b:3a:b2:
bc:6b:ad:17:7a:3e:77:38:82:a4:ae:d1:4e:e3:6a:
49:fb:a0:17:23:aa:73:37:ab:24:33:80:52:83:a2:
5b:78:e3:7b:85:09:aa:a1:39:bf:db:23:ff:e1:92:
fe:84:84:de:fe:58:cb:89:15:00:aa:1d:dd:70:35:
ed:b3:3a:b5:42:eb:62:0c:e4:60:bc:c1:b6:0b:ae:
e7:fd:14:e6:42:a8:d8:c0:3e:6c:8c:6d:f0:78:0e:
09:ea:03:0d:34:51:f5:37:a1:cb:7e:44:09:73:b0:
bc:40:bd:6e:17:6e:96:55:2a:d5:fe:47:9b:8e:be:
cc:ff:77:43:72:25:e9:77:9a:23:8b:e3:56:2f:31:
e4:ae:7e:25:03:0f:a7:c4:c9:43:e0:72:1d:ce:c8:
36:f5:59:aa:d4:a8:97:a8:42:1b:81:a0:fa:df:0a:
48:ff:4e:fe:78:1d:20:0d:0d:1b:9b:b3:d5:f0:a7:
10:4c:8e:04:ae:69:81:b3:88:37:05:b1:fd:62:3f:
31:86:6d:d9:ad:42:d4:ba:e5:94:84:c4:30:49:58:
c1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7E:FD:71:F6:6D:BE:CC:2B:49:18:04:07:CA:CD:C8:C2:C8:9D:C5
X509v3 Authority Key Identifier:
keyid:8C:C4:49:84:C6:86:F2:01:8C:48:10:2A:28:4A:B5:A8:0F:52:A6:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMRJhMaG8gGMSBAqKEq1qA9SpkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/ZH79cfZtvswrSRgEB8rNyMLIncU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.137.0-91.229.139.255
Signature Algorithm: sha256WithRSAEncryption
26:02:9e:03:97:3f:84:d5:2f:bc:b7:d4:36:a8:aa:74:50:6f:
c6:4d:86:f0:b1:b1:a3:3f:7e:3e:44:49:58:bc:5a:0c:39:ce:
ea:f3:58:0d:7b:bd:aa:f1:c4:2c:47:f3:f7:9f:a6:98:3d:70:
3e:9b:48:d7:40:71:f9:61:4a:1c:9a:a3:26:d2:af:9f:aa:cd:
52:40:41:d4:76:da:de:73:2e:75:bc:a4:b1:6f:f6:b0:0f:e8:
63:a6:6b:c3:4d:59:57:4d:13:d6:6b:b3:69:b9:a9:cc:b7:28:
65:90:2e:9d:44:47:ba:39:64:88:23:3f:fc:11:c1:60:67:82:
f5:bb:9e:62:87:3a:47:ff:b7:37:19:13:c6:6a:9e:3a:15:10:
54:05:ab:a7:7d:34:fe:80:47:93:6a:0e:72:96:6d:95:04:8d:
8e:d0:ab:b2:7c:7a:06:6a:ea:24:79:7b:aa:1f:13:4f:b6:c4:
a1:98:3c:99:63:44:ec:da:48:92:1f:b9:1e:20:bb:c5:20:56:
5e:f1:1b:0a:ed:af:7a:44:d7:3e:b6:52:00:c2:5e:d9:7c:52:
01:e3:6c:62:04:57:c3:57:7f:59:94:6c:fc:8c:4d:45:f6:2d:
3b:f6:ed:1a:7e:48:77:2f:e7:b8:3e:3a:5a:92:11:b5:c4:c8:
dc:77:fa:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:13:55 2026 by rpki-client