Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/ZvZaCcAk1G4g-Goxw_9Mm09U5HQ.roa
File: ZvZaCcAk1G4g-Goxw_9Mm09U5HQ.roa (raw, json)
Hash identifier: 6J65b1+OVj9EmypCFNsDOLXw55bioisW0DUjoT1yQ8c=
Subject key identifier: 66:F6:5A:09:C0:24:D4:6E:20:F8:6A:31:C3:FF:4C:9B:4F:54:E4:74
Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial: 019D628FBA8EEB583A923B1B551D88CA0CDB
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/ZvZaCcAk1G4g-Goxw_9Mm09U5HQ.roa
Signing time: Mon 06 Apr 2026 11:31:19 +0000
ROA not before: Mon 06 Apr 2026 11:31:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206715
IP address blocks: 91.108.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:62:8f:ba:8e:eb:58:3a:92:3b:1b:55:1d:88:ca:0c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Validity
Not Before: Apr 6 11:31:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=66f65a09c024d46e20f86a31c3ff4c9b4f54e474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f9:2f:d5:05:86:85:f6:db:e0:0a:a4:e1:2e:
f5:f5:e0:98:4f:d3:6c:8b:5c:2c:d4:8e:f0:02:ba:
7d:10:93:2a:41:58:db:fd:c8:25:a2:26:e6:35:31:
a9:46:55:ec:38:24:f1:8c:a4:c4:47:59:a9:d4:95:
89:07:35:82:f1:78:55:b8:3a:71:10:fe:21:36:20:
a0:f4:58:e6:bc:20:7a:c5:71:93:0f:20:e9:04:33:
bb:75:8a:c3:2d:a5:0a:e7:a1:d1:e3:1c:fb:7d:9d:
a6:37:15:c9:3b:11:0a:2c:c2:b9:16:a9:5b:98:7d:
67:24:2b:c1:dd:f1:a4:da:49:29:2c:98:1f:1f:42:
be:f3:11:1e:aa:06:a3:75:ec:67:72:e0:5b:e5:5c:
ca:3d:6f:54:42:43:e6:9a:59:b7:53:85:1c:73:1f:
84:83:83:b3:d6:45:e6:99:ca:f0:a8:bf:41:1d:0b:
da:83:db:05:65:ef:0b:a4:23:3b:11:35:8d:6b:85:
5c:bb:96:6c:a8:92:b8:e3:5b:75:e7:d5:c9:39:7e:
48:d2:6e:93:60:4e:2f:cd:2c:82:68:c1:fd:d2:fd:
62:73:79:e9:0e:24:03:56:f8:de:e2:0a:28:95:a6:
1b:1b:6c:44:60:cf:0f:eb:46:a7:87:a2:de:85:a0:
d3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F6:5A:09:C0:24:D4:6E:20:F8:6A:31:C3:FF:4C:9B:4F:54:E4:74
X509v3 Authority Key Identifier:
keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/ZvZaCcAk1G4g-Goxw_9Mm09U5HQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.250.0/24
Signature Algorithm: sha256WithRSAEncryption
63:a2:01:42:f0:5e:c6:5f:76:d8:7d:c7:31:5d:71:6b:92:ed:
06:b8:26:94:b3:f8:2c:ac:bc:34:58:d7:eb:00:4c:8f:41:ad:
62:b7:ea:32:c7:f0:df:1c:24:16:21:fe:12:f8:27:75:ad:f3:
86:c2:e1:ce:c9:1e:77:9e:fb:0a:b0:3e:c2:04:e4:4e:fa:53:
b7:a3:7e:34:e8:a7:31:76:21:4e:b6:76:1e:4e:6c:78:1f:b5:
7c:fc:0a:b4:53:0f:54:35:27:e5:cb:32:e3:c8:ac:bf:70:5d:
43:be:30:35:88:fe:fe:7b:0f:63:69:f0:0a:1e:05:14:3d:2d:
41:17:e0:9e:d1:69:8b:fe:5f:8c:b2:1b:94:67:2f:9c:5f:b1:
08:99:93:59:91:d3:1a:8a:4b:47:90:d5:61:42:39:cf:bf:38:
65:11:b6:d0:2f:b4:c1:2f:4a:74:84:fd:08:d3:5e:98:97:fa:
a8:e6:cd:3c:0a:66:28:85:4e:a5:df:86:27:50:6f:ce:c2:db:
db:49:fb:51:bd:b7:1a:60:b2:43:2c:8f:3b:d8:ed:16:4b:75:
21:47:68:e1:c3:42:e2:e2:dd:56:8d:97:59:29:94:55:f6:de:
18:c9:72:85:66:81:e3:fe:43:5a:91:8f:06:42:82:1f:d6:62:
f0:42:5e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:43:11 2026 by rpki-client