Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/zQSdeObX9i7OS1eAgVlUu1k6izE.roa
File: zQSdeObX9i7OS1eAgVlUu1k6izE.roa (raw, json)
Hash identifier: fz5kqxfesb7Vy8VFR5dTlm8GMN9rTXkTLsQbrA4g9G8=
Subject key identifier: CD:04:9D:78:E6:D7:F6:2E:CE:4B:57:80:81:59:54:BB:59:3A:8B:31
Certificate issuer: /CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
Certificate serial: 01A0B102424DF2D7A9ADE93C371E3086A0DD
Authority key identifier: 44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/zQSdeObX9i7OS1eAgVlUu1k6izE.roa
Signing time: Thu 17 Sep 2026 20:15:10 +0000
ROA not before: Thu 17 Sep 2026 20:15:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6205
IP address blocks: 185.70.97.0/24 maxlen: 24
2a03:35e0:9700::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b1:02:42:4d:f2:d7:a9:ad:e9:3c:37:1e:30:86:a0:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
Validity
Not Before: Sep 17 20:15:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cd049d78e6d7f62ece4b5780815954bb593a8b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fe:83:80:ce:03:e9:b9:87:96:54:dc:a4:81:
41:10:d6:3a:c5:5f:97:54:63:e3:57:82:95:d8:8f:
64:c0:f6:a6:35:5e:73:f9:31:d8:74:96:26:26:5a:
84:f4:9b:8a:02:1f:d0:67:27:b2:ca:91:0c:bb:93:
56:b1:d7:da:f9:96:6a:4a:e5:dd:04:fd:a0:cc:5b:
d8:52:f9:94:1e:ac:4b:57:39:5d:f2:c0:a6:bb:c0:
78:fc:53:b6:05:d7:28:7e:3b:36:f3:e3:ac:b2:0b:
e4:68:04:d1:9b:55:11:c5:0c:d9:b1:cb:75:80:45:
56:c0:39:dc:2b:95:b7:93:14:93:cf:6e:62:6f:11:
ce:30:17:f0:6f:d8:e8:9f:b5:5f:2e:84:db:fe:df:
b5:71:ac:28:68:d4:85:ef:8c:15:4c:39:4e:dc:ac:
4a:8f:ef:a5:86:5c:45:8d:42:aa:dd:20:1a:29:14:
a5:1b:43:03:df:e4:d7:dd:8f:64:c3:29:dd:ec:bf:
84:ea:8a:13:f5:9c:4b:c9:89:47:4b:37:af:21:f0:
fc:6d:26:d8:ca:aa:5d:1a:7d:f8:a8:ae:9b:dc:d7:
0a:81:3a:a5:a0:09:ac:53:df:58:1c:2f:c9:6b:2b:
fc:89:14:3b:c1:e1:ff:78:65:a3:a6:6a:ee:74:cd:
90:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:04:9D:78:E6:D7:F6:2E:CE:4B:57:80:81:59:54:BB:59:3A:8B:31
X509v3 Authority Key Identifier:
keyid:44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/zQSdeObX9i7OS1eAgVlUu1k6izE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.70.97.0/24
IPv6:
2a03:35e0:9700::/48
Signature Algorithm: sha256WithRSAEncryption
a9:73:b6:c1:ec:53:76:d1:95:d5:19:21:ae:ed:38:ef:3e:5c:
9e:fe:34:06:70:95:db:ab:39:0e:fa:6d:19:82:5b:08:83:93:
a9:47:b8:2d:85:33:b8:26:0e:2c:cd:53:85:6e:cc:3f:71:7b:
f0:9a:8f:ac:cf:8b:4d:fb:61:16:f8:f1:2e:6c:a1:de:6e:50:
2c:b6:8e:39:91:d8:21:39:01:8d:31:e9:66:26:16:78:77:e3:
1d:eb:f3:28:bb:78:ab:78:59:0a:77:b4:7d:c1:4f:46:8a:ff:
0f:22:79:27:2e:4d:8f:49:6b:cb:11:a6:53:b0:6a:d6:71:13:
7b:d2:ea:b5:82:44:14:48:7b:af:a6:54:4b:da:38:bb:3a:af:
f5:25:9d:f0:9a:ab:c3:ec:9e:78:66:a2:9e:e7:12:9a:cf:bc:
25:32:a5:c3:01:e1:05:a9:96:59:89:6a:69:6e:db:6c:96:82:
ad:fa:a4:ef:88:5f:cc:17:07:b7:ed:d8:b7:60:0e:68:9f:27:
1e:59:db:0d:f6:54:f4:3a:ee:34:41:1d:e5:c7:cf:cb:c2:ce:
57:8e:bb:c3:53:cd:4b:27:bd:af:61:a9:22:b8:7d:70:d2:eb:
b4:30:c5:6b:54:fd:7a:89:1c:c5:6b:51:8e:b7:48:68:77:77:
9c:94:46:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:12:57 2026 by rpki-client