Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/Z3R0EQtwJ794BTmAMNg0p5SAS3Q.roa
File: Z3R0EQtwJ794BTmAMNg0p5SAS3Q.roa (raw, json)
Hash identifier: rsyFG4zSMDanCniCWjGQKtysSRfWfwv2oqvo0sGOb8Q=
Subject key identifier: 67:74:74:11:0B:70:27:BF:78:05:39:80:30:D8:34:A7:94:80:4B:74
Certificate issuer: /CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
Certificate serial: 01A0B10242A98835FBE9A56453F45138C0A1
Authority key identifier: 44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/Z3R0EQtwJ794BTmAMNg0p5SAS3Q.roa
Signing time: Thu 17 Sep 2026 20:15:10 +0000
ROA not before: Thu 17 Sep 2026 20:15:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42910
IP address blocks: 185.70.96.0/24 maxlen: 24
185.70.99.0/24 maxlen: 24
2a03:35e0:9600::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b1:02:42:a9:88:35:fb:e9:a5:64:53:f4:51:38:c0:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
Validity
Not Before: Sep 17 20:15:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=677474110b7027bf7805398030d834a794804b74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e4:36:bd:85:30:6a:93:20:b3:ec:1d:85:21:
61:ff:85:9a:45:90:c1:ad:5e:ae:43:db:06:92:90:
71:b1:0e:2f:a8:e1:c1:35:d1:67:c9:85:98:17:45:
98:07:ca:a6:eb:33:a5:10:6e:2f:84:2f:1e:d1:e0:
be:03:08:0e:96:98:bd:5d:ea:30:5e:51:ae:03:0e:
0e:ca:42:2e:35:66:7d:d0:95:e0:eb:24:82:b3:17:
29:ed:ae:9a:08:bd:39:fb:3e:9e:ab:12:37:ab:d5:
28:d0:14:12:28:cf:94:e6:07:92:05:68:e6:36:84:
e6:28:73:94:38:27:b6:94:19:9a:54:e2:a7:cc:f6:
61:01:1a:5f:bb:0f:99:79:f1:6c:49:95:48:5d:5b:
b1:37:61:f8:52:72:8b:4f:ea:49:05:b4:86:4e:da:
df:d9:49:bc:44:b7:b0:ab:7b:20:6f:cc:92:31:c9:
87:bd:87:41:ae:82:d5:97:83:63:c0:97:8e:05:c6:
21:e2:db:30:d3:bc:17:76:66:e8:bf:c2:7d:05:72:
67:68:e5:78:6d:5c:b5:36:fc:93:35:56:59:b5:2e:
17:92:5f:de:ca:77:f1:6a:78:26:f8:92:11:5f:f9:
65:88:c3:e0:85:5e:6b:a3:71:8c:fd:c3:89:0f:b7:
a7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:74:74:11:0B:70:27:BF:78:05:39:80:30:D8:34:A7:94:80:4B:74
X509v3 Authority Key Identifier:
keyid:44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/Z3R0EQtwJ794BTmAMNg0p5SAS3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.70.96.0/24
185.70.99.0/24
IPv6:
2a03:35e0:9600::/48
Signature Algorithm: sha256WithRSAEncryption
aa:85:33:d8:0a:59:68:a4:80:e8:a7:3b:5a:7b:d2:16:60:0d:
87:8d:2d:0d:f4:0b:eb:83:55:b2:fa:ed:dc:5a:9e:11:2a:0f:
78:90:f5:ce:c7:94:43:b0:30:a4:db:87:f1:33:69:d5:19:bd:
7f:be:a7:5f:16:d8:7e:54:39:dd:ab:76:a1:a7:33:eb:b2:ef:
44:6a:df:06:8a:27:97:67:af:d8:e8:c3:40:31:ee:06:f8:60:
e3:99:04:32:61:e1:fc:f9:65:b0:84:cc:f4:76:7c:53:63:f1:
dc:d7:f1:a4:5a:21:49:6d:43:2a:8b:87:45:7f:d6:46:e1:5b:
b6:c5:e0:cb:6a:23:53:f4:6a:4d:ad:f7:ff:42:1c:c6:85:c2:
6d:93:9f:39:4c:a9:eb:f8:53:83:e8:9d:cd:4c:1a:08:10:35:
e0:c0:25:37:3e:e8:2f:c1:77:37:6e:fe:85:9a:1d:2b:29:33:
96:40:7b:ca:2a:2b:86:2f:c8:61:28:99:93:eb:d3:21:2d:12:
e6:95:a3:01:e9:bf:f5:46:44:0f:f8:7e:1d:3d:d7:1b:0e:bf:
5d:e1:3d:b9:d2:f2:cd:49:42:99:dd:e4:fe:ed:7f:8a:21:db:
ea:12:47:42:85:14:bf:91:06:12:92:04:be:50:86:c5:bd:09:
45:90:85:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:02:56 2026 by rpki-client