Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/zJGcoCrLQSthi3L8e5XtHzN0SoQ.roa
File: zJGcoCrLQSthi3L8e5XtHzN0SoQ.roa (raw, json)
Hash identifier: hJXcwgL64tCaIHfaSt8f+ThD0JMQA7Qmi1BADBvOlLQ=
Subject key identifier: CC:91:9C:A0:2A:CB:41:2B:61:8B:72:FC:7B:95:ED:1F:33:74:4A:84
Certificate issuer: /CN=940a74ddb75c69a845d7cc569aeda2667f141b46
Certificate serial: 019F23686D84C379ABC5B3488EF029608318
Authority key identifier: 94:0A:74:DD:B7:5C:69:A8:45:D7:CC:56:9A:ED:A2:66:7F:14:1B:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAp03bdcaahF18xWmu2iZn8UG0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/zJGcoCrLQSthi3L8e5XtHzN0SoQ.roa
Signing time: Thu 02 Jul 2026 15:17:54 +0000
ROA not before: Thu 02 Jul 2026 15:17:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213702
IP address blocks: 217.9.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/lAp03bdcaahF18xWmu2iZn8UG0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:6d:84:c3:79:ab:c5:b3:48:8e:f0:29:60:83:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940a74ddb75c69a845d7cc569aeda2667f141b46
Validity
Not Before: Jul 2 15:17:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cc919ca02acb412b618b72fc7b95ed1f33744a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:28:1b:97:75:66:48:38:02:a0:dd:e7:0d:05:
4a:f8:25:86:4e:f7:bd:67:6a:8d:d7:f1:20:03:a6:
29:22:70:5b:ca:b5:87:76:23:44:89:61:88:fd:b3:
d7:8c:ba:66:43:0a:55:89:01:01:51:49:85:9a:17:
53:a7:18:e5:69:4f:f0:64:a2:82:a8:85:5b:be:7b:
09:c7:c0:76:d3:e3:49:3b:ce:65:0e:9e:a6:25:7d:
80:0a:02:5f:4a:13:45:3d:07:d1:99:4b:ef:4e:80:
52:bf:c6:7a:74:79:24:a9:2f:90:fe:d9:1f:df:f5:
98:1d:aa:dd:ed:82:bb:26:39:fb:46:c3:12:b2:b1:
6b:cb:f5:00:68:44:de:90:7c:dd:83:0b:53:64:1b:
60:22:2b:a4:99:e1:55:4f:4f:2b:3c:1a:1a:cb:52:
66:7b:90:86:4a:24:cb:f9:fc:db:bd:40:ab:70:d3:
fb:56:a8:86:5f:7a:9e:60:56:28:c9:cd:29:f5:d6:
80:4e:40:5e:c1:94:3e:d5:04:24:81:21:a1:7b:4a:
14:c8:3f:db:e5:00:2b:50:db:92:63:95:82:3d:41:
41:09:6e:c9:94:19:b1:5d:c0:73:ca:d2:e8:0a:2d:
db:67:5a:da:80:b6:42:d1:a5:25:21:2e:91:e9:47:
a1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:91:9C:A0:2A:CB:41:2B:61:8B:72:FC:7B:95:ED:1F:33:74:4A:84
X509v3 Authority Key Identifier:
keyid:94:0A:74:DD:B7:5C:69:A8:45:D7:CC:56:9A:ED:A2:66:7F:14:1B:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAp03bdcaahF18xWmu2iZn8UG0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/zJGcoCrLQSthi3L8e5XtHzN0SoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.9.12.0/24
Signature Algorithm: sha256WithRSAEncryption
69:18:a6:9c:48:50:96:d9:80:b9:52:4f:35:68:87:6f:c5:9c:
85:ff:50:40:4b:56:c4:c9:2b:56:25:cf:c4:33:66:f0:05:08:
63:88:8b:d1:72:ce:0d:15:28:5e:7f:6d:dc:5d:e6:80:5a:83:
36:47:48:7b:44:8e:3a:ea:bd:b7:50:00:90:11:20:1b:ce:ca:
bd:f7:b8:bd:09:4c:06:1e:d9:48:38:80:8e:62:bc:df:6f:54:
f7:aa:77:71:e2:24:2c:f2:fc:61:7e:3f:88:3a:84:31:25:36:
6a:84:30:2f:e6:65:0d:60:65:16:15:20:6d:61:17:04:bb:0f:
c7:4b:97:23:05:5e:e1:72:08:b3:77:7c:57:56:e0:15:e3:d6:
26:8c:73:44:2e:ab:36:2e:9d:1e:28:fe:a8:5f:d8:41:27:c7:
65:50:ec:2d:ae:03:d3:8d:e0:fb:b0:1f:33:6b:6a:a8:95:3e:
06:ad:db:77:76:b3:4e:3f:c3:bd:78:c1:19:05:28:25:01:d1:
0e:c2:e1:f6:72:94:c8:d8:73:c2:c2:30:98:2e:88:95:5a:5e:
49:f9:97:e7:d4:a5:06:27:e0:c4:ec:c4:ef:68:99:b0:85:4b:
a7:64:2d:61:46:36:fe:80:f2:ad:92:f4:79:91:bd:ea:e6:27:
a1:90:f4:96
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaG2Ew3mrxbNIjvApYIMYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MGE3NGRkYjc1YzY5YTg0NWQ3Y2M1NjlhZWRhMjY2N2Yx
NDFiNDYwHhcNMjYwNzAyMTUxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzkxOWNhMDJhY2I0MTJiNjE4YjcyZmM3Yjk1ZWQxZjMzNzQ0YTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSgbl3VmSDgCoN3nDQVK+CWGTve9
Z2qN1/EgA6YpInBbyrWHdiNEiWGI/bPXjLpmQwpViQEBUUmFmhdTpxjlaU/wZKKC
qIVbvnsJx8B20+NJO85lDp6mJX2ACgJfShNFPQfRmUvvToBSv8Z6dHkkqS+Q/tkf
3/WYHard7YK7Jjn7RsMSsrFry/UAaETekHzdgwtTZBtgIiukmeFVT08rPBoay1Jm
e5CGSiTL+fzbvUCrcNP7VqiGX3qeYFYoyc0p9daATkBewZQ+1QQkgSGhe0oUyD/b
5QArUNuSY5WCPUFBCW7JlBmxXcBzytLoCi3bZ1ragLZC0aUlIS6R6UehxwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMyRnKAqy0ErYYty/HuV7R8zdEqEMB8GA1UdIwQY
MBaAFJQKdN23XGmoRdfMVprtomZ/FBtGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEFwMDNiZGNhYWhGMTh4V211MmlabjhVRzBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9kYWI0MjAtMGRlMy00MzIxLTljMDkt
NmI1ZjY4NTIyYTdkLzEvekpHY29DckxRU3RoaTNMOGU1WHRIek4wU29RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9kYWI0MjAtMGRlMy00MzIxLTljMDktNmI1ZjY4NTIyYTdk
LzEvbEFwMDNiZGNhYWhGMTh4V211MmlabjhVRzBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2QkMMA0G
CSqGSIb3DQEBCwUAA4IBAQBpGKacSFCW2YC5Uk81aIdvxZyF/1BAS1bEyStWJc/E
M2bwBQhjiIvRcs4NFShef23cXeaAWoM2R0h7RI466r23UACQESAbzsq997i9CUwG
HtlIOICOYrzfb1T3qndx4iQs8vxhfj+IOoQxJTZqhDAv5mUNYGUWFSBtYRcEuw/H
S5cjBV7hcgizd3xXVuAV49YmjHNELqs2Lp0eKP6oX9hBJ8dlUOwtrgPTjeD7sB8z
a2qolT4Grdt3drNOP8O9eMEZBSglAdEOwuH2cpTI2HPCwjCYLoiVWl5J+Zfn1KUG
J+DE7MTvaJmwhUunZC1hRjb+gPKtkvR5kb3q5iehkPSW
-----END CERTIFICATE-----
Generated at Sat Jul 18 03:25:08 2026 by rpki-client