Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/1d49c4-4111-4136-88c3-9a3954e0667d/1/zf1amWZL0cYfq5OOLtTUd15GvWM.roa
File: zf1amWZL0cYfq5OOLtTUd15GvWM.roa (raw, json)
Hash identifier: 7dLn8t0rA8E+ONSoVaPUp6Xkm/L/m2vJVtWRafaGu5U=
Subject key identifier: CD:FD:5A:99:66:4B:D1:C6:1F:AB:93:8E:2E:D4:D4:77:5E:46:BD:63
Certificate issuer: /CN=4b921e33ffba39c6a181dd42ee3c0afa0c2220d0
Certificate serial: 01A09FA4B73DD2CBC29B4EE101AD75F5D1C7
Authority key identifier: 4B:92:1E:33:FF:BA:39:C6:A1:81:DD:42:EE:3C:0A:FA:0C:22:20:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5IeM_-6Ocahgd1C7jwK-gwiINA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/1d49c4-4111-4136-88c3-9a3954e0667d/1/zf1amWZL0cYfq5OOLtTUd15GvWM.roa
Signing time: Mon 14 Sep 2026 11:19:27 +0000
ROA not before: Mon 14 Sep 2026 11:19:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210734
IP address blocks: 111.88.74.0/24 maxlen: 24
153.56.171.0/24 maxlen: 24
159.200.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/1d49c4-4111-4136-88c3-9a3954e0667d/1/S5IeM_-6Ocahgd1C7jwK-gwiINA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/1d49c4-4111-4136-88c3-9a3954e0667d/1/S5IeM_-6Ocahgd1C7jwK-gwiINA.mft
rsync://rpki.ripe.net/repository/DEFAULT/S5IeM_-6Ocahgd1C7jwK-gwiINA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9f:a4:b7:3d:d2:cb:c2:9b:4e:e1:01:ad:75:f5:d1:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b921e33ffba39c6a181dd42ee3c0afa0c2220d0
Validity
Not Before: Sep 14 11:19:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cdfd5a99664bd1c61fab938e2ed4d4775e46bd63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:64:db:15:05:7a:cf:cf:7b:ca:50:60:5c:20:
40:3b:8d:23:c0:87:c0:1b:f5:5a:f2:f1:81:ad:0d:
f5:31:c9:20:b5:1a:a0:1a:be:6b:43:54:d0:9e:49:
a5:d5:47:87:2c:63:58:90:9b:37:02:ae:5c:45:a2:
81:a9:cb:e9:35:7e:77:8f:a9:a8:c0:b1:eb:ca:b0:
6f:4d:92:1c:2d:49:0b:5e:b8:18:c6:41:ad:85:4a:
b4:29:fc:93:7c:42:1a:de:5c:57:34:d8:3e:1b:4a:
b2:43:1a:19:db:8d:e5:75:9c:ae:92:94:ac:ed:74:
a2:47:49:b6:08:be:d5:08:eb:ad:09:37:76:4b:9c:
55:94:1b:87:a8:eb:09:ce:b3:fd:02:0b:3a:61:71:
0c:9d:a6:7f:a2:f0:41:d3:04:44:e6:10:bd:35:cb:
99:20:5e:8b:aa:26:3e:fb:30:53:47:9b:d1:80:2d:
f7:09:e8:b0:e5:e9:87:7e:b1:91:db:82:1b:1d:57:
63:a4:97:07:cc:50:3f:75:ac:8f:76:b1:5d:8f:0d:
51:04:39:3d:24:45:dc:9b:20:5f:b0:1a:fa:32:0c:
1d:ab:56:1b:ab:99:8c:f0:ea:d2:8c:ea:dc:44:88:
25:f6:aa:6a:9f:2c:6c:90:63:ce:b8:80:6d:17:b1:
b1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:FD:5A:99:66:4B:D1:C6:1F:AB:93:8E:2E:D4:D4:77:5E:46:BD:63
X509v3 Authority Key Identifier:
keyid:4B:92:1E:33:FF:BA:39:C6:A1:81:DD:42:EE:3C:0A:FA:0C:22:20:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5IeM_-6Ocahgd1C7jwK-gwiINA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1d49c4-4111-4136-88c3-9a3954e0667d/1/zf1amWZL0cYfq5OOLtTUd15GvWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1d49c4-4111-4136-88c3-9a3954e0667d/1/S5IeM_-6Ocahgd1C7jwK-gwiINA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
111.88.74.0/24
153.56.171.0/24
159.200.238.0/24
Signature Algorithm: sha256WithRSAEncryption
47:af:9e:47:a0:e0:84:8f:e2:47:23:3b:de:3e:43:fc:5e:05:
62:5f:c3:b7:a8:2b:f9:93:cf:29:4d:0d:ad:03:8e:e9:14:65:
35:00:00:5e:ae:99:93:64:57:07:f6:f4:c3:44:60:d9:2f:65:
87:98:73:80:63:b3:37:82:d8:79:f1:dd:0d:ce:1a:f6:e2:17:
ab:cf:25:e3:c9:2c:ee:60:ba:d2:30:ce:67:a2:f6:64:96:86:
fb:08:51:1e:9c:36:7d:12:a2:38:92:63:1f:6d:db:2b:c1:c1:
71:fc:d5:ac:34:8e:19:20:da:54:40:42:13:2b:d9:96:cd:bf:
9a:e9:8a:f9:24:48:3c:05:72:cb:75:88:e7:31:3e:34:9b:be:
c7:04:73:2e:44:5c:3a:c4:e7:8e:f9:de:6b:a1:53:dc:c4:7f:
fe:c5:af:56:df:d1:9d:15:bc:1f:04:00:2f:45:32:89:96:35:
53:00:cb:d4:43:e8:91:61:14:36:07:9b:10:69:3b:31:e7:89:
28:aa:f6:e9:2d:74:e4:e8:dd:a6:90:bb:24:ff:ed:ec:a4:10:
03:d2:3b:ab:79:ed:94:21:af:bb:78:3d:21:8a:0a:1b:3d:27:
93:e7:55:74:5d:51:7b:f1:ab:ae:58:89:56:c0:0e:a0:c6:4a:
1a:6c:66:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:59:46 2026 by rpki-client