Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/404b6b-f2f6-49f5-8d08-a910bbb66fa9/1/1Z4JzCvnteCIKQszXHQFc967ne8.roa
File: 1Z4JzCvnteCIKQszXHQFc967ne8.roa (raw, json)
Hash identifier: Z72/1v0tdbPVk5wGh68TOmDWGusOqq/srlhRedp+nCA=
Subject key identifier: D5:9E:09:CC:2B:E7:B5:E0:88:29:0B:33:5C:74:05:73:DE:BB:9D:EF
Certificate issuer: /CN=f5311193b215575146548ef27ecd695fb99cf0bc
Certificate serial: 01A0116B1EED03B9A40390039A4B5AD1DF9F
Authority key identifier: F5:31:11:93:B2:15:57:51:46:54:8E:F2:7E:CD:69:5F:B9:9C:F0:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TERk7IVV1FGVI7yfs1pX7mc8Lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/404b6b-f2f6-49f5-8d08-a910bbb66fa9/1/1Z4JzCvnteCIKQszXHQFc967ne8.roa
Signing time: Mon 17 Aug 2026 20:30:27 +0000
ROA not before: Mon 17 Aug 2026 20:30:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 398343
IP address blocks: 168.113.216.0/24 maxlen: 24
168.113.217.0/24 maxlen: 24
168.113.218.0/24 maxlen: 24
168.113.219.0/24 maxlen: 24
168.113.220.0/24 maxlen: 24
168.113.221.0/24 maxlen: 24
168.113.222.0/24 maxlen: 24
168.113.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/404b6b-f2f6-49f5-8d08-a910bbb66fa9/1/9TERk7IVV1FGVI7yfs1pX7mc8Lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/404b6b-f2f6-49f5-8d08-a910bbb66fa9/1/9TERk7IVV1FGVI7yfs1pX7mc8Lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9TERk7IVV1FGVI7yfs1pX7mc8Lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:11:6b:1e:ed:03:b9:a4:03:90:03:9a:4b:5a:d1:df:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5311193b215575146548ef27ecd695fb99cf0bc
Validity
Not Before: Aug 17 20:30:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d59e09cc2be7b5e088290b335c740573debb9def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d0:df:fe:2d:f8:af:1e:40:44:c4:a2:e3:fb:
d1:24:9f:24:28:c3:7a:7c:c9:75:b1:7b:39:41:2f:
fe:d3:72:9f:24:f5:bc:7e:1e:41:28:d4:9d:15:17:
a5:65:b3:2e:48:0c:0e:30:3f:4d:ce:ca:ee:72:7e:
cc:de:5a:ae:b1:23:3b:12:f2:03:4b:ea:3b:9b:4a:
5a:b5:61:6c:53:73:d1:ce:6b:92:2f:8c:2f:a9:f7:
19:74:bf:d9:fc:0a:5f:7d:ea:92:62:5a:58:66:a1:
63:53:ca:8b:16:72:5a:56:0a:14:a0:0c:6a:5a:97:
17:8f:39:06:91:be:53:c7:2e:56:97:1f:f6:49:c3:
e9:24:0b:65:84:a3:fa:79:42:51:d1:7f:f7:8e:39:
94:fb:41:9d:83:68:72:9f:f7:5c:f3:af:2e:e6:e8:
1b:18:94:2c:e8:a9:b6:6d:79:2e:62:c5:e6:fa:e7:
85:88:d6:25:28:06:7d:ca:f8:3d:ae:02:5f:b1:f7:
87:55:54:82:9e:e2:54:a6:d4:03:b6:cb:e6:46:03:
87:99:de:0d:90:3b:ff:e2:80:ff:41:0e:60:92:9b:
02:62:14:c2:2b:9c:e8:88:ed:06:98:dc:53:85:f7:
7c:03:24:d8:89:51:a8:a3:5b:af:b2:92:12:07:54:
3e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9E:09:CC:2B:E7:B5:E0:88:29:0B:33:5C:74:05:73:DE:BB:9D:EF
X509v3 Authority Key Identifier:
keyid:F5:31:11:93:B2:15:57:51:46:54:8E:F2:7E:CD:69:5F:B9:9C:F0:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TERk7IVV1FGVI7yfs1pX7mc8Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/404b6b-f2f6-49f5-8d08-a910bbb66fa9/1/1Z4JzCvnteCIKQszXHQFc967ne8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/404b6b-f2f6-49f5-8d08-a910bbb66fa9/1/9TERk7IVV1FGVI7yfs1pX7mc8Lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.113.216.0/21
Signature Algorithm: sha256WithRSAEncryption
7c:ed:d4:e3:1b:fa:87:b0:90:7f:56:de:a2:8b:1c:c8:43:3e:
19:60:90:b1:de:09:cc:38:60:81:f0:59:bd:86:5a:e5:bb:61:
73:cf:1e:de:9f:1a:a1:a4:fd:69:0d:b1:29:35:5e:b2:1e:d4:
34:2c:10:0f:88:e5:f7:07:67:3b:8d:58:50:ca:bc:eb:d1:e2:
8e:ef:fc:18:07:37:4e:9c:8f:f5:7f:53:fa:5b:be:f2:e0:85:
7f:f9:f5:51:70:7b:e9:40:50:fa:52:b6:ea:44:10:1b:77:02:
60:d8:8b:85:2b:1d:89:3c:6e:d5:5f:b8:f5:63:0f:5b:2e:94:
c5:65:42:fe:71:4c:8c:63:d2:de:b3:e2:07:b4:71:2c:c2:9a:
39:2a:08:35:a9:1c:af:d2:05:78:e3:af:92:71:7e:87:b1:a4:
0a:86:66:17:53:e4:91:c7:d9:78:7f:8c:9e:d2:c8:85:c9:f5:
d1:c3:13:82:33:94:45:53:76:84:04:ee:22:c8:c4:05:27:a0:
ad:fe:f6:7d:95:0c:1d:fe:7b:ca:bf:0e:c8:ea:a7:de:0b:a1:
70:86:0d:fb:e3:ee:48:3e:75:0f:58:ee:1f:ae:44:74:cf:18:
d9:81:79:73:e4:9a:05:0a:df:2f:6a:ce:b8:22:93:ad:7f:35:
3a:d9:e5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:59 2026 by rpki-client