Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/zX13-oU7cBG6cIg8ROGm1tDQrik.roa
File: zX13-oU7cBG6cIg8ROGm1tDQrik.roa (raw, json)
Hash identifier: iojJpLqSVjV4cIjGJVDdqQHg6vG+JzagzhFK3HWdZsc=
Subject key identifier: CD:7D:77:FA:85:3B:70:11:BA:70:88:3C:44:E1:A6:D6:D0:D0:AE:29
Certificate issuer: /CN=35f1fd69e7196aef5e29ba795680dac3e34868c8
Certificate serial: 019B77C750C817E17B0799915794259FAC26
Authority key identifier: 35:F1:FD:69:E7:19:6A:EF:5E:29:BA:79:56:80:DA:C3:E3:48:68:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NfH9aecZau9eKbp5VoDaw-NIaMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/zX13-oU7cBG6cIg8ROGm1tDQrik.roa
Signing time: Thu 01 Jan 2026 04:18:29 +0000
ROA not before: Thu 01 Jan 2026 04:18:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50862
IP address blocks: 91.229.49.0/24 maxlen: 24
194.29.73.0/24 maxlen: 24
194.29.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NfH9aecZau9eKbp5VoDaw-NIaMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c7:50:c8:17:e1:7b:07:99:91:57:94:25:9f:ac:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35f1fd69e7196aef5e29ba795680dac3e34868c8
Validity
Not Before: Jan 1 04:18:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cd7d77fa853b7011ba70883c44e1a6d6d0d0ae29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:06:f0:cb:8e:58:bd:fe:14:73:7a:a7:b2:ec:
e6:36:b3:ef:b8:62:0f:ef:32:1e:0f:c7:b7:b0:73:
7d:2e:b6:2b:68:19:a0:7c:dc:93:27:23:35:e8:c1:
1c:b0:86:c5:47:a0:d9:19:c0:1c:0e:c6:ae:2c:dd:
7c:fa:8c:5a:7a:cb:19:bf:d2:86:f9:d4:f8:ec:c0:
b2:24:24:10:a0:a3:9e:c5:0d:b4:9a:78:8b:60:d0:
b8:13:aa:a2:9a:5f:5c:91:86:20:10:af:5e:85:07:
93:42:ac:23:b8:88:ac:c9:8a:ad:f0:a9:f2:90:60:
53:42:8c:4e:3b:00:1a:c4:76:53:7b:04:62:26:73:
1b:79:e5:f2:11:8f:08:d1:cb:e7:52:92:ac:ad:1c:
74:09:ce:31:18:24:da:64:6d:c4:c2:bb:d4:a7:a4:
60:55:49:5a:36:d3:70:d1:dd:f1:ef:56:36:46:85:
8d:ff:f2:90:b8:38:ce:9d:b8:78:e9:86:25:c1:de:
15:4b:62:75:1d:ea:6e:15:cd:1c:93:97:76:8e:f5:
94:fb:4f:1b:91:4c:fa:4f:8f:e8:02:01:d2:bf:0b:
05:37:0c:57:72:dc:27:74:75:b3:b6:e9:60:cd:e3:
ae:3d:39:d8:fa:e0:0d:70:33:96:6b:a7:f1:9e:82:
02:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:7D:77:FA:85:3B:70:11:BA:70:88:3C:44:E1:A6:D6:D0:D0:AE:29
X509v3 Authority Key Identifier:
keyid:35:F1:FD:69:E7:19:6A:EF:5E:29:BA:79:56:80:DA:C3:E3:48:68:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NfH9aecZau9eKbp5VoDaw-NIaMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/zX13-oU7cBG6cIg8ROGm1tDQrik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.49.0/24
194.29.73.0/24
194.29.78.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:e2:4c:9c:2f:f1:60:4b:bf:6e:1e:3d:fc:09:4d:91:a3:db:
7d:dc:bf:65:79:d5:e5:2c:aa:6a:cf:5b:32:61:ba:25:21:a9:
89:5b:ce:4f:67:35:58:a4:98:19:63:ed:82:dd:f6:4d:26:4c:
21:d6:4d:28:96:c6:bf:fd:2a:c1:30:d5:20:ab:86:45:da:ca:
2d:b4:52:84:ad:5c:76:c6:8c:54:70:89:91:a5:ea:79:64:af:
b1:58:d7:ca:91:40:23:2c:86:4c:b5:2a:87:ca:64:bc:07:b3:
55:13:f7:c5:09:20:8e:1d:60:40:b0:0f:a7:54:0f:a0:27:15:
be:10:79:60:0e:16:9f:a7:39:73:bc:dd:1c:a1:af:1c:ae:59:
b9:4a:c5:09:4e:84:7a:99:c7:9b:59:71:9f:22:87:a5:42:cf:
96:76:b1:b8:ac:76:45:96:64:6d:56:2a:d8:d8:95:ed:73:fd:
42:7b:58:ec:1c:70:3d:db:03:eb:b6:83:b4:3a:a8:83:fd:a0:
d0:05:3c:ff:b8:67:0d:fc:6c:94:1d:e6:04:28:c8:08:91:37:
22:83:04:70:83:5d:50:50:5d:fc:bf:e4:1a:1f:d1:7f:64:61:
88:f7:40:5f:1c:f6:e5:8e:c6:71:d7:35:5a:39:ec:dd:63:2f:
68:dc:82:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:54:45 2026 by rpki-client