Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZZ02luCNXlifZw1es2CBvtJ0zJ8.roa
File: ZZ02luCNXlifZw1es2CBvtJ0zJ8.roa (raw, json)
Hash identifier: Db3gqk2aOl1WMrw279KvDEFefqyBqd9rtNQDOQisJPw=
Subject key identifier: 65:9D:36:96:E0:8D:5E:58:9F:67:0D:5E:B3:60:81:BE:D2:74:CC:9F
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019D4E559E2DBBA37461ED00335815EE35A9
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZZ02luCNXlifZw1es2CBvtJ0zJ8.roa
Signing time: Thu 02 Apr 2026 13:15:27 +0000
ROA not before: Thu 02 Apr 2026 13:15:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199428
IP address blocks: 87.121.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 Apr 2026 22:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:4e:55:9e:2d:bb:a3:74:61:ed:00:33:58:15:ee:35:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 2 13:15:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=659d3696e08d5e589f670d5eb36081bed274cc9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:45:a1:29:38:11:66:0c:c3:21:14:81:42:e3:
c2:8a:f8:d3:be:a9:e8:b5:42:c5:c6:e6:41:1d:1e:
b9:99:83:49:27:2a:d2:ae:95:68:a6:bd:1c:75:a5:
a6:e0:31:d4:05:b9:80:2c:6e:f1:5c:12:d6:87:14:
ad:88:dc:d2:92:6c:ac:3d:e1:79:e8:9f:d0:2b:64:
75:56:26:65:33:dd:ca:a7:cc:b0:23:74:c0:a5:17:
54:04:fa:7b:48:7e:51:56:87:e9:1a:aa:fd:b6:03:
13:fe:fe:32:3b:81:ce:22:ef:20:a8:46:da:b1:85:
1a:0a:06:62:16:7c:25:a1:8b:98:e9:77:2e:11:da:
37:a6:86:cc:08:00:39:db:8c:b7:c6:94:33:56:be:
34:b8:ab:9c:4f:ca:3c:b0:61:96:f0:5e:7b:59:c5:
c2:a7:19:39:84:3a:d7:af:59:4e:9b:fc:dc:96:fe:
0c:1f:90:fc:fd:92:80:5a:36:f4:a3:12:25:72:71:
4c:f1:c0:1c:e3:a1:57:eb:3c:7e:07:7f:c7:79:c7:
73:9d:85:0b:04:8f:9c:3e:02:e2:7b:fa:95:ea:2a:
25:40:70:10:cc:93:9d:38:38:58:05:03:2f:f0:4c:
53:91:16:51:d4:37:43:82:7c:55:67:be:c5:df:7f:
5c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:9D:36:96:E0:8D:5E:58:9F:67:0D:5E:B3:60:81:BE:D2:74:CC:9F
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZZ02luCNXlifZw1es2CBvtJ0zJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.79.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:8d:2b:bd:d1:4c:99:0a:bc:33:f5:8d:87:61:9b:42:d5:08:
bc:3f:ae:6e:99:e5:df:0c:06:61:14:fb:f6:84:db:c3:db:59:
9b:cf:3b:bb:bb:83:f3:5d:1f:c2:66:4b:ea:53:b0:17:cf:3f:
fe:3f:55:aa:c6:96:b2:76:3f:d8:b0:90:43:ac:d6:19:26:7d:
0b:93:aa:5b:84:35:cf:fc:7a:52:44:71:19:13:8a:c1:2c:91:
97:64:cb:a8:d9:cc:67:a1:a4:31:1c:5c:f6:cc:95:fc:59:70:
b3:49:b1:57:b8:32:ed:16:12:45:ca:ac:95:fa:b2:9b:a2:1a:
48:ba:fd:72:75:15:19:30:a2:7f:fa:41:6e:7f:79:c6:2d:32:
af:07:fc:3c:40:df:79:44:c6:ea:d2:d8:cc:66:d8:ea:13:b5:
27:37:c6:06:05:0f:6f:c1:28:57:f5:c3:6a:86:2c:ac:74:6d:
ab:0b:6c:65:27:d3:db:78:d5:63:e9:e5:de:a1:9b:df:dd:11:
4d:3d:92:08:be:dc:fb:c3:e4:f2:db:0e:e6:2f:01:d9:89:67:
a6:f9:a2:8a:bb:b1:d2:6e:ef:64:55:26:df:5c:66:54:32:26:
0d:f2:1d:1b:7d:18:6e:ee:6f:23:92:82:41:aa:52:21:9a:e8:
45:bd:81:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 3 04:07:36 2026 by rpki-client