Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/zXmiAgXk_Ydyr1HYZF7kkg2QTLU.roa
File: zXmiAgXk_Ydyr1HYZF7kkg2QTLU.roa (raw, json)
Hash identifier: tvsSGehiuAYLuz61AA5ClCzxAIXkzHVKNA25tNTKOdw=
Subject key identifier: CD:79:A2:02:05:E4:FD:87:72:AF:51:D8:64:5E:E4:92:0D:90:4C:B5
Certificate issuer: /CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e
Certificate serial: 019FCBD7F4817FB42F430FAF20F3CE1DFA44
Authority key identifier: BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/zXmiAgXk_Ydyr1HYZF7kkg2QTLU.roa
Signing time: Tue 04 Aug 2026 08:15:55 +0000
ROA not before: Tue 04 Aug 2026 08:15:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48806
IP address blocks: 45.141.212.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cb:d7:f4:81:7f:b4:2f:43:0f:af:20:f3:ce:1d:fa:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e
Validity
Not Before: Aug 4 08:15:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cd79a20205e4fd8772af51d8645ee4920d904cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:fa:e6:42:ea:c5:e0:75:ce:a3:8d:6a:a9:42:
8e:73:b3:12:75:20:65:4d:7b:c7:03:91:17:cf:2a:
41:8b:99:bf:43:9a:49:c3:4f:55:31:19:3a:fe:4d:
8a:68:89:a2:02:95:41:b0:1c:c8:33:0b:b4:78:9b:
f6:89:2c:fd:0d:1c:e3:5a:1b:2f:06:79:af:31:71:
2c:80:c7:9d:03:f8:74:c1:4f:fc:e1:bf:d8:d8:91:
c0:e6:3e:01:a4:28:2a:58:ce:02:02:31:bd:9c:eb:
b6:3e:b8:7a:3c:9d:f1:ee:6d:e9:9b:3c:9f:d9:a7:
e5:22:31:e0:64:fb:50:7c:47:2e:5d:56:a5:be:65:
c7:88:dd:12:44:07:81:24:4a:e9:ea:a5:f0:0b:ba:
dc:8e:b3:eb:97:c6:41:0b:7e:ea:2a:df:a0:ec:cf:
c7:c1:3a:4f:01:27:fb:a7:92:57:6e:59:c1:7b:40:
50:e0:28:12:bb:46:1a:6b:3f:0f:16:18:e4:2b:ae:
9d:ab:fc:b3:95:22:5d:a9:28:17:f6:c8:18:28:ef:
cc:5b:2f:af:db:15:cf:58:99:9c:88:fe:f2:dd:22:
64:0e:d3:91:fa:cb:89:00:96:c8:03:63:45:18:f3:
fa:2c:a3:72:19:b4:e9:ed:70:7b:0b:4b:c8:fd:27:
5e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:79:A2:02:05:E4:FD:87:72:AF:51:D8:64:5E:E4:92:0D:90:4C:B5
X509v3 Authority Key Identifier:
keyid:BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/zXmiAgXk_Ydyr1HYZF7kkg2QTLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.212.0/23
Signature Algorithm: sha256WithRSAEncryption
df:df:37:ad:25:c6:c9:a5:c1:8b:7d:79:22:30:d6:41:9b:a5:
4f:d3:64:2d:e0:0b:0d:51:9b:9d:6e:02:e8:93:51:38:d3:ef:
fa:8e:6b:7a:25:59:5d:c0:09:bf:11:69:cb:10:90:db:3e:14:
a3:d3:8b:93:af:41:a9:39:00:20:38:1e:58:a8:27:5c:99:c8:
2f:bd:7b:8f:f3:b2:91:f8:ea:8c:03:a7:75:f3:c0:7a:34:d2:
18:27:0f:8f:2e:b2:1d:9b:16:d2:7e:ad:92:b7:f1:ee:a7:f9:
73:d7:15:10:13:af:20:01:d7:8e:72:51:2f:67:39:85:09:73:
02:9a:2e:87:76:a0:3a:eb:27:ab:c0:07:60:26:02:4d:50:b7:
81:ab:a5:b2:ac:a7:2f:c8:8e:ed:1a:fe:0d:75:dc:f2:6f:19:
db:64:66:94:22:fa:d5:3c:3f:ca:3f:75:60:58:91:d4:bf:8b:
b2:23:2e:12:f8:5d:64:2b:9e:5d:79:3c:da:a7:ff:dc:73:c7:
a1:62:dc:9c:f1:4e:f2:96:11:96:aa:aa:b4:ea:96:01:d4:cd:
b1:46:99:63:b4:d8:6c:04:4d:2b:b6:23:81:12:d7:2f:6b:e8:
0f:00:a3:d6:b4:93:ea:67:ea:58:57:42:6f:3b:9b:77:96:87:
f7:a5:8c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:36:07 2026 by rpki-client