Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/zy744Mm4lOSZsHeaYZAYvHT_6aA.roa
File: zy744Mm4lOSZsHeaYZAYvHT_6aA.roa (raw, json)
Hash identifier: CWvenfABGaSM+odliokk5rqw3EyIzY+5iRg09jsnemE=
Subject key identifier: CF:2E:F8:E0:C9:B8:94:E4:99:B0:77:9A:61:90:18:BC:74:FF:E9:A0
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019F641B15003D9E0D86398ADBAE062C548A
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/zy744Mm4lOSZsHeaYZAYvHT_6aA.roa
Signing time: Wed 15 Jul 2026 04:48:44 +0000
ROA not before: Wed 15 Jul 2026 04:48:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40998
IP address blocks: 81.181.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:64:1b:15:00:3d:9e:0d:86:39:8a:db:ae:06:2c:54:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jul 15 04:48:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf2ef8e0c9b894e499b0779a619018bc74ffe9a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cc:26:d7:e2:bf:81:f9:34:ef:4d:24:62:52:
7d:b7:70:40:6e:f4:1c:26:ad:b0:b4:72:72:14:fe:
99:76:06:4f:c5:49:1e:32:35:f9:10:01:17:9f:45:
e3:c3:57:01:89:84:c9:12:51:75:a9:7a:f3:90:06:
d0:c4:69:61:0d:5f:74:f5:ca:c1:84:c0:e9:66:a3:
2d:8c:d7:6b:23:53:ca:b4:40:c7:66:75:b5:d7:99:
db:b5:c8:c0:22:8d:de:3f:14:93:d1:e1:dc:70:fa:
4b:4e:0e:41:e7:23:2e:ea:f9:f1:84:9a:22:f9:50:
d0:23:b1:25:17:64:06:13:7d:17:d9:85:5a:34:3e:
f6:54:94:11:bb:83:42:9d:b7:e6:86:4b:21:b5:50:
4b:57:8f:dc:ce:24:14:cd:4f:ef:7a:4a:ff:ae:ca:
70:13:eb:24:6a:01:4b:b8:20:1c:06:f7:5a:f2:3c:
dc:c6:e9:ab:26:f3:bc:f5:4f:82:13:57:0a:c0:a7:
72:df:9f:8c:60:30:49:13:8c:88:8d:25:3e:c5:b9:
38:fe:c3:0f:d9:f2:bd:d0:51:b1:4f:3d:16:e8:73:
51:6e:4d:cc:10:ea:e9:7e:b8:81:fc:1c:dc:19:56:
77:fb:f8:f5:e3:3a:42:da:8d:a7:71:a7:ab:99:23:
f0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:2E:F8:E0:C9:B8:94:E4:99:B0:77:9A:61:90:18:BC:74:FF:E9:A0
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/zy744Mm4lOSZsHeaYZAYvHT_6aA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.181.180.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:6c:c5:14:e8:62:48:88:52:f9:82:61:37:03:19:22:16:02:
40:e4:21:84:63:94:df:d5:64:82:ad:88:de:49:50:c6:83:9c:
ab:42:4a:08:ba:aa:93:bd:de:6f:f6:9b:17:91:d2:d6:a2:b5:
3e:0e:a1:a7:d0:6e:ea:37:5a:a6:ea:6e:aa:cf:12:c4:51:dc:
1b:17:3f:47:c7:8b:46:51:c6:72:62:19:b0:44:bb:ec:87:ef:
ee:3f:8e:62:9e:80:ed:ee:50:70:aa:03:4c:a7:12:e5:27:8a:
37:62:5f:c4:fa:df:28:8e:22:df:60:b3:ef:f2:b8:6c:0e:8b:
6d:bf:b8:d6:95:39:46:d7:1e:27:65:2c:63:6b:a9:a3:3a:e7:
4e:6c:45:1f:81:3d:5d:7c:0b:91:ca:49:5f:65:77:15:7f:34:
9f:04:ea:43:a2:e1:37:bd:a9:08:41:19:54:b7:8b:bf:9c:fa:
d0:ab:b2:00:e4:39:6a:6e:fa:83:fa:13:c2:db:70:b2:d0:b4:
b8:ec:f1:0a:8b:84:6d:72:ff:54:8f:62:57:cb:e5:2a:3f:29:
83:c7:3b:d6:57:bc:53:f5:9d:93:9c:8a:f9:8f:8d:2d:e1:47:
6b:95:bd:45:e8:fa:da:23:ca:ad:15:ad:d2:e2:47:00:43:4a:
ff:18:94:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:53:25 2026 by rpki-client