Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Z7iBL2hP4RkycjLgcnAtj-xqTHA.roa
File: Z7iBL2hP4RkycjLgcnAtj-xqTHA.roa (raw, json)
Hash identifier: zCCUooM/OuETq5kr8SXR0icWfPL7BfAtaLGOH398bhE=
Subject key identifier: 67:B8:81:2F:68:4F:E1:19:32:72:32:E0:72:70:2D:8F:EC:6A:4C:70
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 019F94DE46328CDCFDD026C53D8CC2EF8C6C
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Z7iBL2hP4RkycjLgcnAtj-xqTHA.roa
Signing time: Fri 24 Jul 2026 16:03:42 +0000
ROA not before: Fri 24 Jul 2026 16:03:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43109
IP address blocks: 45.81.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:de:46:32:8c:dc:fd:d0:26:c5:3d:8c:c2:ef:8c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jul 24 16:03:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=67b8812f684fe119327232e072702d8fec6a4c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d3:1a:64:55:8a:e6:47:db:98:b9:13:f2:a3:
e2:c6:d3:64:2d:a7:20:a1:b8:8c:6a:6d:14:fb:bb:
0e:5b:87:4c:d0:c8:0d:ae:16:c2:0f:73:37:fe:fe:
6e:af:00:16:0c:5f:c4:10:ab:13:44:d3:a9:2d:db:
c4:fa:23:cb:b0:24:b2:b7:8e:21:1d:14:a9:19:43:
b3:66:da:6f:6d:f4:53:c1:b6:7d:6d:c8:d8:b3:8f:
e0:92:03:6b:df:e1:9c:59:19:51:81:ae:ce:52:d5:
90:dd:5d:51:fc:4f:53:e5:a1:e9:46:6b:a2:b9:fa:
31:f0:59:29:29:7d:71:90:c9:96:d4:65:e3:88:ea:
ab:eb:d3:cb:31:44:0f:af:fe:b8:6d:92:de:f4:39:
29:81:89:52:40:22:a8:55:26:ff:5d:9a:e4:7c:d2:
e3:54:5d:56:42:45:50:9d:98:8f:48:f5:5b:de:2e:
55:f9:54:7e:c6:cf:e7:7c:9e:bb:82:40:41:ae:ba:
41:c5:bc:ce:da:7f:1c:44:3a:0a:19:45:40:ce:5f:
54:7d:9d:c3:42:5a:32:6d:30:e4:eb:04:6e:1c:97:
87:e0:2e:d7:ca:ee:59:f1:92:c3:04:eb:51:21:ef:
47:27:0a:48:c5:27:93:9e:70:36:05:7b:0b:2d:12:
fa:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B8:81:2F:68:4F:E1:19:32:72:32:E0:72:70:2D:8F:EC:6A:4C:70
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Z7iBL2hP4RkycjLgcnAtj-xqTHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.112.0/24
Signature Algorithm: sha256WithRSAEncryption
16:c2:ee:30:3c:d0:e2:89:65:d1:f5:18:8e:9e:23:c0:24:c3:
6d:42:fb:08:02:87:ee:c4:9b:0d:b7:35:15:e5:39:12:aa:8e:
f7:25:f9:c7:7d:c6:62:c9:20:f4:69:8f:31:85:1a:a0:ad:4a:
1d:9d:1b:4d:2c:f9:59:e6:04:1d:5b:2c:3e:83:be:95:45:bc:
7d:24:7e:8e:61:66:c2:77:8e:03:5d:16:c1:3e:ec:4f:8d:60:
8b:4e:5f:70:1f:82:26:c2:48:9a:37:7f:e4:cf:62:40:80:8b:
0e:ce:fe:3f:19:e1:39:2f:90:2c:dc:02:d4:6c:20:d1:b3:1d:
11:27:ea:5d:dd:40:d7:6b:5f:ab:c1:1d:c5:e6:e5:bc:30:db:
63:48:97:35:5b:c1:4c:43:0a:b7:e4:a6:51:1d:d7:f4:41:64:
86:8b:c7:55:92:ec:af:a6:87:dc:90:11:3a:d1:9c:98:d3:08:
4c:cf:15:f9:ff:ed:fb:b0:c8:29:d6:a2:1c:97:89:67:23:6b:
a9:de:8b:4b:60:b6:fb:df:43:e4:7c:81:9c:53:f9:d5:4c:84:
71:0c:12:ee:b6:7b:6f:16:a6:d3:50:a7:44:c4:55:80:7d:17:
78:c0:91:21:46:0d:cf:44:2c:2a:d6:7b:4c:ea:4f:8a:eb:b9:
74:2f:f3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 14:43:19 2026 by rpki-client