Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/ZuRiJrHEXIEyvdR2BocpMqUSb5U.roa
File: ZuRiJrHEXIEyvdR2BocpMqUSb5U.roa (raw, json)
Hash identifier: 6iowdJnD01GgbZ2pYBxXG0sn8POT0XWOFt/y9TQZ+oY=
Subject key identifier: 66:E4:62:26:B1:C4:5C:81:32:BD:D4:76:06:87:29:32:A5:12:6F:95
Certificate issuer: /CN=2d3c3987e7c34b366aa0f09c40ea4c80bfed0e01
Certificate serial: 019FCC2FD918EC981B51904727E6BAF07744
Authority key identifier: 2D:3C:39:87:E7:C3:4B:36:6A:A0:F0:9C:40:EA:4C:80:BF:ED:0E:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/ZuRiJrHEXIEyvdR2BocpMqUSb5U.roa
Signing time: Tue 04 Aug 2026 09:51:55 +0000
ROA not before: Tue 04 Aug 2026 09:51:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 194.150.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Aug 2026 23:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cc:2f:d9:18:ec:98:1b:51:90:47:27:e6:ba:f0:77:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d3c3987e7c34b366aa0f09c40ea4c80bfed0e01
Validity
Not Before: Aug 4 09:51:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=66e46226b1c45c8132bdd47606872932a5126f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1b:e8:98:dc:6f:55:f2:08:12:c2:13:ad:91:
e0:64:75:f3:94:ce:56:5a:c0:2a:c3:6b:e6:70:60:
cc:80:ab:af:15:77:59:02:48:f8:c2:0d:45:ba:1f:
85:ce:56:a7:45:a5:94:ae:53:c0:08:cf:7b:8e:48:
a6:86:92:7f:1b:b1:68:89:14:0b:cd:af:d8:22:58:
bf:89:10:70:a3:9d:f7:a1:a0:53:18:da:28:ca:48:
b8:fa:71:5e:8e:9e:75:cb:af:a0:21:10:77:15:f7:
79:01:37:be:40:a6:47:32:ba:a8:5d:e0:67:aa:49:
ef:d7:bd:92:5a:c4:8c:9f:ba:8a:ef:e8:c8:3c:2b:
a8:c7:b5:7e:aa:af:0f:ee:ff:e9:fb:e0:7f:f5:29:
4c:d6:50:b0:17:c2:8d:5a:9c:9b:4b:99:63:20:66:
bd:ea:59:79:b1:64:d7:11:72:6e:2e:d3:04:1f:0b:
0a:35:5e:6f:e8:27:e7:d8:ea:fd:f7:f6:62:cd:62:
47:e7:4f:24:5c:aa:a1:07:f4:a9:0a:67:bb:98:b1:
cd:a6:cf:83:da:0f:3f:0f:36:15:57:b0:cd:11:2d:
ec:e0:27:3f:5f:4c:45:0b:48:1c:d2:b8:be:96:aa:
1b:c0:a5:ee:fe:e4:24:3a:cc:4e:d3:2f:83:c5:2e:
7b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E4:62:26:B1:C4:5C:81:32:BD:D4:76:06:87:29:32:A5:12:6F:95
X509v3 Authority Key Identifier:
keyid:2D:3C:39:87:E7:C3:4B:36:6A:A0:F0:9C:40:EA:4C:80:BF:ED:0E:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/ZuRiJrHEXIEyvdR2BocpMqUSb5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.73.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:03:5d:45:be:8f:56:4e:63:5d:c7:86:ac:1d:d3:c3:f6:7b:
9e:44:b7:c1:59:00:89:92:10:cc:21:d3:40:f7:37:a7:74:ee:
bd:94:1d:53:26:4a:e0:12:90:4f:ab:01:e1:8e:1d:9c:d2:b1:
e1:9c:a1:1d:8a:f9:88:e2:9d:32:7f:ac:3f:1e:90:20:8a:6b:
35:f7:4c:8e:76:c8:bb:f9:6b:59:eb:84:c7:e1:38:9e:8d:52:
a2:4a:05:a3:f0:30:b6:08:75:46:f7:40:90:c2:db:51:8d:45:
76:b2:73:fe:92:d9:31:6d:34:10:8f:29:35:9b:47:26:d1:1f:
c5:35:fc:84:22:66:11:55:c7:c1:ad:25:0e:f3:1c:26:02:e5:
e7:4b:22:bf:e2:47:23:39:e9:8f:b2:fa:ee:08:97:0d:d5:b7:
bc:ea:26:6a:19:55:b4:09:87:04:57:4c:c6:87:6b:3b:3d:bf:
c5:3e:6e:65:d3:83:df:af:12:29:d3:c5:90:b7:84:37:51:c8:
82:9c:b2:2b:42:65:be:17:0d:7c:52:1a:e9:fb:7f:86:72:29:
1c:04:2d:66:27:be:cc:d1:5e:c5:c1:ff:29:af:2a:77:c7:0d:
92:e5:42:d8:a0:54:c7:d6:a0:9b:37:92:d0:5a:bb:c5:2c:18:
15:f9:b0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 11 09:26:18 2026 by rpki-client