Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/fuEaSuaZZwj27F0xF5X2wdAUpoQ.roa
File: fuEaSuaZZwj27F0xF5X2wdAUpoQ.roa (raw, json)
Hash identifier: YJVv+UJ0lNsjvEC6w/06kpWtvXqjhidpu4HakQMisOA=
Subject key identifier: 7E:E1:1A:4A:E6:99:67:08:F6:EC:5D:31:17:95:F6:C1:D0:14:A6:84
Certificate issuer: /CN=6689c3995e2461d5a52fd4f1000782f99a4d4822
Certificate serial: 01A060B526FF6C6CA25C28B5A2444BE8B3CC
Authority key identifier: 66:89:C3:99:5E:24:61:D5:A5:2F:D4:F1:00:07:82:F9:9A:4D:48:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/fuEaSuaZZwj27F0xF5X2wdAUpoQ.roa
Signing time: Wed 02 Sep 2026 06:01:19 +0000
ROA not before: Wed 02 Sep 2026 06:01:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24577
IP address blocks: 91.187.224.0/19 maxlen: 19
185.108.68.0/22 maxlen: 22
194.145.204.0/23 maxlen: 23
2a06:48c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:60:b5:26:ff:6c:6c:a2:5c:28:b5:a2:44:4b:e8:b3:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6689c3995e2461d5a52fd4f1000782f99a4d4822
Validity
Not Before: Sep 2 06:01:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7ee11a4ae6996708f6ec5d311795f6c1d014a684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:87:4e:10:34:66:61:a9:b6:78:98:6a:03:1b:
2d:af:d3:4f:a5:52:f8:fd:b3:09:fc:f3:63:18:6a:
d5:11:a6:99:34:95:7f:fa:9d:8f:99:81:7b:39:a4:
cc:3b:98:6c:af:16:f6:1e:40:c8:2e:01:b0:c4:bc:
c0:08:dc:05:c2:36:6a:67:68:85:d1:02:2c:55:ba:
f0:e1:dd:6d:ac:5d:40:a8:0b:6b:c0:eb:cc:ea:9b:
9c:f6:dd:36:70:fd:45:e4:a3:46:6f:cd:aa:92:80:
e7:d6:f2:f4:a4:27:ba:32:cc:bb:1d:74:a9:eb:99:
4a:77:e6:7a:4e:bc:54:b2:78:cd:c6:00:76:23:95:
cd:16:67:9f:63:61:10:86:30:a1:e0:56:49:96:4e:
85:c4:0c:fe:41:d8:24:e1:6c:45:3e:03:ff:bc:f0:
f6:ba:66:4d:ac:35:b7:1f:89:1e:a3:c9:0f:8e:31:
d9:ea:f4:77:35:b8:67:bd:50:fd:f0:5a:cc:5b:2b:
3c:cd:0e:2c:54:af:d4:11:96:f9:15:17:7a:1f:ad:
1c:80:4c:63:aa:cd:a9:80:4c:4d:44:1a:e4:28:85:
08:2b:12:09:ac:c6:5c:96:4d:34:ee:2a:6c:5d:93:
3c:a2:e7:25:05:39:64:74:31:1d:0b:b1:a0:5b:54:
ab:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E1:1A:4A:E6:99:67:08:F6:EC:5D:31:17:95:F6:C1:D0:14:A6:84
X509v3 Authority Key Identifier:
keyid:66:89:C3:99:5E:24:61:D5:A5:2F:D4:F1:00:07:82:F9:9A:4D:48:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/fuEaSuaZZwj27F0xF5X2wdAUpoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.187.224.0/19
185.108.68.0/22
194.145.204.0/23
IPv6:
2a06:48c0::/29
Signature Algorithm: sha256WithRSAEncryption
0d:df:d6:00:ee:e9:cc:38:76:f5:c7:de:7d:f2:c3:0c:4e:fb:
65:c5:6d:15:d9:27:68:ca:a3:70:a8:5d:fb:55:25:66:df:d5:
91:1b:ad:d9:b6:04:dc:14:d2:7e:56:b8:72:8b:65:79:8c:07:
28:01:47:49:87:fe:c3:24:54:e2:21:0a:5d:3d:d5:6b:d1:1b:
d0:d0:06:c7:aa:25:a4:29:af:1e:10:74:43:03:29:a4:66:9e:
cb:51:df:df:76:dd:4f:fd:38:10:d1:0b:90:80:30:00:0e:63:
43:b1:59:f1:31:44:48:96:b4:c7:10:26:b8:1c:52:12:b5:e4:
53:51:5d:59:7b:c8:d2:fc:89:d1:91:84:e0:1c:5a:0f:01:b4:
ef:ba:79:99:f3:d3:d5:fc:be:a6:52:58:50:ab:83:86:8b:3c:
b3:98:76:a8:35:3c:77:29:c2:57:00:0e:44:77:b5:d9:38:91:
a2:27:d4:45:63:13:18:9a:8b:db:24:eb:6c:62:bc:d2:e6:62:
e8:4e:f4:a5:34:9f:d8:da:b5:dd:56:55:5c:59:a4:42:d5:85:
f4:e4:1e:84:74:48:a7:db:fe:31:dd:d3:a4:6d:02:59:f0:41:
3c:ac:17:67:f9:b8:0f:35:61:ce:9c:83:81:c9:7e:bc:ff:80:
aa:9e:fb:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:29:44 2026 by rpki-client