Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/zY3KvxwohtRbKxNVO_JTZ3v35l0.roa
File: zY3KvxwohtRbKxNVO_JTZ3v35l0.roa (raw, json)
Hash identifier: hLW7FBvbTvnEtpVSnXQJwLji/1xB6qtwQUDa8NeFyfE=
Subject key identifier: CD:8D:CA:BF:1C:28:86:D4:5B:2B:13:55:3B:F2:53:67:7B:F7:E6:5D
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 019D6881572E73D969D75288C3BFDC93FB7A
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/zY3KvxwohtRbKxNVO_JTZ3v35l0.roa
Signing time: Tue 07 Apr 2026 15:13:20 +0000
ROA not before: Tue 07 Apr 2026 15:13:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60542
IP address blocks: 87.232.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Apr 2026 20:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:68:81:57:2e:73:d9:69:d7:52:88:c3:bf:dc:93:fb:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Apr 7 15:13:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cd8dcabf1c2886d45b2b13553bf253677bf7e65d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8a:d1:0e:e7:08:7d:d4:db:d1:59:21:ac:8c:
50:ab:8c:07:90:68:b4:38:a1:e2:18:6e:c0:48:1e:
90:61:e8:ab:25:d6:ce:42:af:91:72:bd:b4:d8:5d:
46:30:c3:fd:ae:3b:d8:cc:7a:c1:94:7b:c0:83:7b:
0e:a2:d3:ab:63:8d:c4:a3:c4:a4:8a:03:98:4e:82:
1c:1c:8b:e7:78:15:06:d8:b2:1b:f6:64:87:79:9d:
5e:01:c8:09:dc:25:a5:7b:75:ef:8b:15:78:2e:d0:
84:1d:2b:6f:94:b4:ff:7c:59:12:ec:d0:8e:fe:ae:
57:5a:29:df:d3:63:16:cd:dc:e2:0a:28:4e:81:c9:
a7:e2:c5:b4:a1:ca:2d:b4:d3:2f:d8:1d:39:27:e5:
ed:5b:37:75:b5:20:41:41:74:68:79:32:f9:06:77:
39:86:c8:9b:20:74:d9:32:53:9e:a9:3e:fd:c0:a7:
96:9d:0a:2c:57:34:27:42:34:25:71:e8:6f:58:23:
03:b3:fc:cb:68:25:29:8d:0d:e7:37:d8:27:63:63:
b7:3a:dd:e5:47:9c:2b:7a:07:bb:c8:50:b5:36:11:
e7:cc:86:b3:78:9f:fe:70:55:5a:a8:fd:85:08:48:
de:0a:c2:1a:94:e8:de:53:ec:e7:9b:1b:65:dd:a0:
61:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:8D:CA:BF:1C:28:86:D4:5B:2B:13:55:3B:F2:53:67:7B:F7:E6:5D
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/zY3KvxwohtRbKxNVO_JTZ3v35l0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.120.0/24
Signature Algorithm: sha256WithRSAEncryption
39:61:9b:00:dc:e3:cb:4e:10:19:0d:0d:03:ce:89:c5:ae:32:
f5:cc:7e:13:a0:5b:6b:62:78:14:d4:c5:08:fb:09:fe:da:ff:
97:67:e6:ef:f9:60:7d:b8:bd:fa:e7:87:f0:70:1e:3d:f0:11:
a6:32:33:15:46:64:32:20:96:23:74:fe:1f:8e:52:d7:a5:ec:
6b:e7:99:62:36:0c:c8:a4:44:e3:9a:68:ee:30:64:95:9b:d8:
77:bf:c1:8a:59:11:af:55:f9:2b:3c:25:e4:db:4c:a3:dc:b0:
3a:dc:f0:6b:2a:18:02:72:90:61:83:f7:41:64:84:1e:4c:98:
bd:e8:6c:ad:c0:35:97:85:51:b3:4c:21:4f:9b:ed:a3:4a:50:
e8:88:22:db:46:3d:b4:45:06:f2:d9:a2:c9:6a:50:aa:90:a8:
8b:e2:45:b7:28:c0:3c:3a:cd:72:e4:82:6f:cf:b0:60:ab:95:
da:7f:ce:09:f8:e4:4a:fe:28:69:ab:26:b3:67:72:fb:74:07:
a4:d4:7f:60:5b:ca:01:79:53:2b:dd:e8:c3:93:e4:77:77:3c:
f5:87:73:f8:33:91:7b:fc:a4:bc:f3:60:e2:05:c0:b5:8d:1e:
4f:50:d1:35:10:37:13:cb:f5:72:13:57:a9:a7:a8:00:9d:7e:
d2:95:d6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 03:37:19 2026 by rpki-client