Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/f0cc41-b3e7-46ff-a976-29df4e2611f1/1/ZaoftZNK70ijBezF-hPekywKJp4.roa
File: ZaoftZNK70ijBezF-hPekywKJp4.roa (raw, json)
Hash identifier: /YydUnIu0lwQr4MU0CkW6JlqBtskYtFFQEmrq4eHBP0=
Subject key identifier: 65:AA:1F:B5:93:4A:EF:48:A3:05:EC:C5:FA:13:DE:93:2C:0A:26:9E
Certificate issuer: /CN=e04ed602bbf65f5f2396fd8095c3d986146741fe
Certificate serial: 019F23693865A3068EE03D8F12847EF6C1C9
Authority key identifier: E0:4E:D6:02:BB:F6:5F:5F:23:96:FD:80:95:C3:D9:86:14:67:41:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4E7WArv2X18jlv2AlcPZhhRnQf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/f0cc41-b3e7-46ff-a976-29df4e2611f1/1/ZaoftZNK70ijBezF-hPekywKJp4.roa
Signing time: Thu 02 Jul 2026 15:18:46 +0000
ROA not before: Thu 02 Jul 2026 15:18:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211143
IP address blocks: 194.164.138.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/f0cc41-b3e7-46ff-a976-29df4e2611f1/1/4E7WArv2X18jlv2AlcPZhhRnQf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/f0cc41-b3e7-46ff-a976-29df4e2611f1/1/4E7WArv2X18jlv2AlcPZhhRnQf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4E7WArv2X18jlv2AlcPZhhRnQf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 09:43:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:38:65:a3:06:8e:e0:3d:8f:12:84:7e:f6:c1:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e04ed602bbf65f5f2396fd8095c3d986146741fe
Validity
Not Before: Jul 2 15:18:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=65aa1fb5934aef48a305ecc5fa13de932c0a269e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6f:b6:58:47:75:5b:70:f5:08:b6:52:6d:9b:
45:a8:36:37:c0:d5:f8:55:50:e9:81:df:e0:b2:53:
68:80:95:90:69:1c:76:89:60:15:11:9d:30:55:02:
84:ae:ab:26:a7:f4:e2:96:8e:79:ca:db:0d:ab:d8:
54:aa:49:d7:a3:1e:1f:04:18:f0:35:17:52:64:07:
d8:57:16:02:c8:8c:59:8d:49:25:73:e5:57:b2:0d:
63:ff:1b:af:3d:c5:d2:ce:20:1b:c3:27:14:fd:3e:
d0:bc:6d:df:a6:c6:88:96:70:1c:ab:53:1c:d8:d0:
3b:c3:c0:e9:bb:75:c3:08:4d:85:3d:35:b5:3f:cc:
10:fe:25:71:22:01:58:46:c5:41:0a:25:71:40:b6:
94:0d:05:27:18:cc:33:2b:4a:14:a9:0d:9e:30:74:
ff:41:3e:0e:4a:b7:11:3d:52:3c:52:52:90:ad:34:
75:30:e8:93:7e:ed:ac:91:84:7f:42:17:7b:a0:82:
31:92:1d:c1:bf:46:74:aa:38:35:28:3b:c7:95:ef:
da:a7:2b:96:a9:6c:7b:79:47:b6:d7:9d:f4:0d:52:
17:28:97:f8:e3:db:28:6c:34:0a:5c:c9:40:67:dd:
2d:ee:21:b2:3f:58:f3:3f:99:fd:47:72:02:8d:fb:
e9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:AA:1F:B5:93:4A:EF:48:A3:05:EC:C5:FA:13:DE:93:2C:0A:26:9E
X509v3 Authority Key Identifier:
keyid:E0:4E:D6:02:BB:F6:5F:5F:23:96:FD:80:95:C3:D9:86:14:67:41:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4E7WArv2X18jlv2AlcPZhhRnQf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f0cc41-b3e7-46ff-a976-29df4e2611f1/1/ZaoftZNK70ijBezF-hPekywKJp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f0cc41-b3e7-46ff-a976-29df4e2611f1/1/4E7WArv2X18jlv2AlcPZhhRnQf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.164.138.0/23
Signature Algorithm: sha256WithRSAEncryption
18:8e:25:d2:37:9f:8e:ec:7e:2f:fa:0e:fa:76:37:53:24:73:
f7:ef:ee:e8:42:ca:5c:72:3f:59:60:e4:7d:c0:4e:7e:f0:a9:
69:92:30:93:35:9f:a2:14:da:3d:56:07:46:5a:b5:12:9c:65:
ac:57:ed:4a:a2:d1:1e:44:8e:56:03:97:f2:8c:00:53:5f:b1:
39:28:41:66:f2:d7:e4:87:c6:81:c1:15:1a:66:de:f4:65:f7:
4d:7b:8d:49:42:77:a1:5d:05:ff:3f:96:a6:d3:f6:ff:a5:51:
72:2a:0e:b2:37:95:6a:71:cd:2f:a4:39:04:1a:44:8f:21:e4:
43:6a:d6:10:53:a7:6d:e0:10:7a:0d:9d:aa:ee:3b:59:3c:9b:
a1:71:75:9a:24:d0:2e:6e:2b:65:e5:96:a5:65:2f:43:d5:69:
3d:e7:9b:13:67:bf:ee:5d:57:aa:bd:8c:25:43:c5:ef:98:86:
65:c0:a3:7e:de:10:20:35:0f:0e:d7:22:80:bf:78:7c:3a:fb:
63:53:b3:0d:49:41:77:8f:fc:70:e7:d4:cb:6d:8d:2c:34:64:
0a:f5:75:48:5f:27:24:ea:ba:57:ca:bf:a6:08:58:92:61:84:
e3:5a:c6:8e:59:d5:2b:62:59:8d:49:63:b4:0b:b7:0c:c1:a7:
21:c2:02:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 18:46:49 2026 by rpki-client