Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/ZO3SDQJ8Tgygw4lm8Ab9Ya2PFI4.roa
File: ZO3SDQJ8Tgygw4lm8Ab9Ya2PFI4.roa (raw, json)
Hash identifier: QdCqVsfYcPHetvPtJZR0l6d2Gvhz4bpPU1rfVRCV7bk=
Subject key identifier: 64:ED:D2:0D:02:7C:4E:0C:A0:C3:89:66:F0:06:FD:61:AD:8F:14:8E
Certificate issuer: /CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Certificate serial: 01A0A5C32FE2EF44FCC5AA489673B098BFAC
Authority key identifier: 4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/ZO3SDQJ8Tgygw4lm8Ab9Ya2PFI4.roa
Signing time: Tue 15 Sep 2026 15:50:27 +0000
ROA not before: Tue 15 Sep 2026 15:50:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219469
IP address blocks: 79.98.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a5:c3:2f:e2:ef:44:fc:c5:aa:48:96:73:b0:98:bf:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Validity
Not Before: Sep 15 15:50:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=64edd20d027c4e0ca0c38966f006fd61ad8f148e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a0:89:5e:23:54:f0:d3:da:b6:70:3a:6d:fe:
2b:fc:88:dc:b9:70:b0:02:bb:50:ed:1e:23:98:85:
37:44:03:a9:60:33:5e:a8:bb:02:ab:05:aa:47:2a:
f0:dd:73:41:40:a0:cd:6c:00:54:cb:47:78:d2:04:
a9:95:c3:cd:d9:ac:e3:70:d8:e6:f9:97:72:6f:ac:
dd:87:3d:78:43:f3:54:77:2d:3f:ab:8c:9c:36:99:
bd:08:ea:bc:e4:a0:67:da:4e:64:17:54:55:e8:86:
d1:c7:f6:53:4d:28:5e:08:21:97:fe:33:5d:d7:6b:
8e:c7:9c:19:e1:0a:9a:63:19:a3:bc:ab:65:2e:30:
2f:b7:34:45:ad:3f:84:2c:dd:64:e0:91:50:1d:38:
05:96:6d:5f:2e:00:a5:aa:55:9c:26:ff:32:03:75:
f8:2f:be:c7:5e:b4:79:f9:09:1d:ef:78:97:1b:6e:
9d:bb:b0:12:8c:54:e0:db:a1:78:48:79:af:89:e7:
bb:9e:15:a3:7d:23:f5:81:25:7a:1a:4f:2e:a2:b8:
ed:ba:5b:7f:cc:aa:9d:75:ff:b7:6f:83:a8:85:50:
85:dc:fb:6c:5e:73:11:fe:b1:03:fe:b7:2a:82:5f:
c8:58:43:59:28:fd:ea:0f:3a:54:f9:1c:c0:b8:fb:
e4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:ED:D2:0D:02:7C:4E:0C:A0:C3:89:66:F0:06:FD:61:AD:8F:14:8E
X509v3 Authority Key Identifier:
keyid:4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/ZO3SDQJ8Tgygw4lm8Ab9Ya2PFI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.35.0/24
Signature Algorithm: sha256WithRSAEncryption
65:c1:32:66:d8:c8:d2:79:36:a6:5f:55:0b:c4:c0:5f:8d:40:
74:df:56:5b:08:43:49:85:47:e1:35:a8:2a:a1:07:49:86:5b:
80:3f:4b:86:ae:b6:24:af:ca:78:da:9c:72:c2:21:52:89:e4:
2f:f5:6b:cb:a2:13:66:e1:d9:c4:5d:d2:48:13:74:a5:f8:41:
3a:21:d8:a4:57:22:d3:c6:f7:22:11:cd:d6:e1:75:b1:ee:1f:
6f:f1:1d:28:b9:77:65:06:e5:06:4f:d2:be:84:df:b2:ca:f9:
cf:86:a4:57:a2:b8:73:a0:81:97:b7:44:68:03:10:2c:3c:3c:
1e:d7:77:31:6b:dd:68:06:68:67:d6:2e:94:13:fb:80:21:63:
f6:39:90:6a:36:3c:fd:10:b1:43:4b:d4:16:38:fb:39:8d:5b:
41:e6:54:a0:a8:f4:6e:f9:77:49:da:7a:7c:12:85:53:ed:68:
0c:7b:2f:cc:17:1f:f7:f1:b6:53:d2:8d:04:9a:20:43:5a:bf:
20:7b:08:fd:77:13:ce:dd:fb:3b:73:f4:99:c9:5b:29:00:cb:
7e:19:8b:f1:0f:87:a1:4f:72:d4:90:4b:0c:57:d5:85:ed:6e:
fb:aa:68:11:e8:3c:5b:19:9d:72:f5:4c:56:94:67:fa:83:d7:
42:00:1e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:29:05 2026 by rpki-client