Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/zd2dqaKa6O4wz9TxJzSxhbKbteU.roa
File: zd2dqaKa6O4wz9TxJzSxhbKbteU.roa (raw, json)
Hash identifier: Sv1+bPBughIj/le0hfMKADppbA91Co/u0NeJGW/Uifs=
Subject key identifier: CD:DD:9D:A9:A2:9A:E8:EE:30:CF:D4:F1:27:34:B1:85:B2:9B:B5:E5
Certificate issuer: /CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Certificate serial: 019B7F1523C8B4E916EFA0B8D14CAB392A31
Authority key identifier: 32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/zd2dqaKa6O4wz9TxJzSxhbKbteU.roa
Signing time: Fri 02 Jan 2026 14:20:50 +0000
ROA not before: Fri 02 Jan 2026 14:20:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207925
IP address blocks: 45.141.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:15:23:c8:b4:e9:16:ef:a0:b8:d1:4c:ab:39:2a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Validity
Not Before: Jan 2 14:20:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cddd9da9a29ae8ee30cfd4f12734b185b29bb5e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:ae:be:40:dd:f4:fb:54:78:48:af:54:6e:3f:
6c:bc:90:3a:29:40:b4:a7:d5:ff:31:88:48:af:c4:
c8:6a:24:eb:d0:2c:7a:a7:3a:03:f2:91:ee:9a:83:
2b:80:da:92:82:77:c7:59:01:8e:e3:a0:c2:2c:1e:
45:b6:65:a8:70:56:e3:c4:16:0a:7a:8a:2e:ba:1e:
9e:87:a0:e2:46:d9:e9:5a:6b:91:d6:5f:0b:1a:f8:
93:1e:d8:6e:22:c3:7b:b1:f4:39:e4:96:1b:f7:aa:
74:2d:0c:2a:77:d7:dd:a6:e3:f6:93:09:da:f7:58:
6a:8d:46:fa:0f:67:f1:0e:bb:a4:d5:f6:36:9c:b6:
cc:5c:ec:49:ba:aa:46:fa:63:8d:73:7e:0b:fa:e8:
fd:a9:33:0f:a1:04:20:74:0d:49:90:b1:c2:a5:43:
25:63:f1:27:e9:55:a3:0e:14:be:df:6c:03:43:0c:
cd:5b:24:78:10:c1:41:bb:14:72:03:2b:d7:3a:b9:
5e:e5:12:09:b7:da:09:fd:cd:2e:99:39:54:dc:a0:
f0:67:3d:b0:f7:1f:cd:6f:ad:78:d6:61:19:32:19:
99:60:dd:c4:e1:cd:05:c9:e0:80:c3:86:aa:40:67:
ea:a8:2c:de:b5:09:ab:1e:36:ab:5a:4f:f4:1e:2c:
3e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:DD:9D:A9:A2:9A:E8:EE:30:CF:D4:F1:27:34:B1:85:B2:9B:B5:E5
X509v3 Authority Key Identifier:
keyid:32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/zd2dqaKa6O4wz9TxJzSxhbKbteU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.55.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:f7:77:b8:3a:e4:3b:1c:0e:7f:c2:b2:04:86:c1:b0:58:f7:
7c:b8:84:af:a4:5c:12:19:c3:08:7e:17:d2:63:16:9b:79:1a:
92:13:87:4f:2f:3f:67:0f:25:88:5d:a9:f5:fb:a4:62:35:48:
2a:5c:b4:0e:eb:67:da:33:39:6c:3e:8f:6c:b4:66:33:68:d3:
0b:be:1d:b2:b7:64:49:41:c2:11:cd:82:ec:82:6e:15:9f:f3:
f1:ce:93:57:3b:23:49:eb:87:23:ec:58:56:d3:15:58:be:01:
96:8a:2a:38:7a:55:72:b1:03:a9:a9:45:c4:59:1f:6c:4b:35:
51:24:36:3b:07:0b:3d:54:8f:af:52:51:bf:81:2e:12:9f:07:
bc:60:cd:e8:2e:dc:28:8b:54:fa:bc:0e:9a:4f:da:35:4d:3e:
c5:8f:ec:64:6a:55:2d:cd:77:fe:c9:5e:00:4f:17:c9:41:4e:
cc:d5:97:2d:e9:bd:ef:57:01:41:c7:d4:7c:9b:8a:e7:ce:0f:
37:7c:f1:54:89:d6:01:c1:c3:07:59:52:40:6f:9e:7b:7b:fb:
de:ff:bf:2c:d0:80:6f:58:90:eb:75:3d:2d:2f:fd:3b:9e:87:
7c:fa:ff:93:f6:fd:c4:6b:b9:74:4f:b9:67:e6:3a:6e:6c:fc:
44:1c:a4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:54:37 2026 by rpki-client