Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/z3dfCKY-XzYavmfFllpELqg3CVU.roa
File: z3dfCKY-XzYavmfFllpELqg3CVU.roa (raw, json)
Hash identifier: MftupAXNsvL9dReFS9DSAE/DEUhtlr4ljGLiCkzWkHo=
Subject key identifier: CF:77:5F:08:A6:3E:5F:36:1A:BE:67:C5:96:5A:44:2E:A8:37:09:55
Certificate issuer: /CN=1fe65f2b616c0bdb6606db0a02f3903d8a20d9bd
Certificate serial: 019F23693618FD42F35A81C8A4BC7DF146EF
Authority key identifier: 1F:E6:5F:2B:61:6C:0B:DB:66:06:DB:0A:02:F3:90:3D:8A:20:D9:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-ZfK2FsC9tmBtsKAvOQPYog2b0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/z3dfCKY-XzYavmfFllpELqg3CVU.roa
Signing time: Thu 02 Jul 2026 15:18:45 +0000
ROA not before: Thu 02 Jul 2026 15:18:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 128.139.4.0/24 maxlen: 24
128.139.6.0/24 maxlen: 24
128.139.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.mft
rsync://rpki.ripe.net/repository/DEFAULT/H-ZfK2FsC9tmBtsKAvOQPYog2b0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:36:18:fd:42:f3:5a:81:c8:a4:bc:7d:f1:46:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe65f2b616c0bdb6606db0a02f3903d8a20d9bd
Validity
Not Before: Jul 2 15:18:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf775f08a63e5f361abe67c5965a442ea8370955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:77:2e:ed:71:eb:6e:33:dc:65:5c:ad:a1:8e:
e7:80:77:bb:d4:62:a9:39:5e:b7:9d:95:48:6a:74:
a9:b2:d8:a0:9a:94:33:92:9e:61:94:9d:b2:9d:a1:
f4:8a:e8:78:e1:9a:7f:bb:c0:77:f2:fe:57:7e:7f:
84:ba:e1:c4:89:db:86:b6:53:a8:a4:95:29:7b:9d:
b0:d9:fd:e1:a7:ba:de:a9:94:c1:88:bf:51:10:43:
64:8c:f1:8b:a4:6c:63:75:cf:dc:21:5c:c3:a2:84:
16:97:cc:ec:21:b3:10:f5:dc:d3:5f:3e:91:2f:a6:
ec:0c:e4:eb:06:d6:48:51:d2:45:ba:b8:b2:a2:cc:
f7:95:b1:c4:e9:9b:ab:28:b3:50:72:f8:5f:fd:50:
65:97:de:88:55:41:b2:fe:3e:f6:20:3d:86:89:16:
70:cf:c1:71:bd:41:18:04:db:d9:94:b2:1a:80:ba:
59:13:85:79:7a:0a:84:58:39:93:40:b3:5a:36:2a:
f3:bc:dd:1a:82:b9:8b:63:33:55:d0:69:17:82:31:
d0:e4:65:7c:eb:fe:bb:a4:5e:8a:aa:88:8b:e9:cb:
2a:d3:ad:0d:16:fa:88:12:39:6c:ed:b2:64:3c:25:
0b:3f:71:00:74:db:b1:bb:be:05:c5:ac:75:2d:48:
4c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:77:5F:08:A6:3E:5F:36:1A:BE:67:C5:96:5A:44:2E:A8:37:09:55
X509v3 Authority Key Identifier:
keyid:1F:E6:5F:2B:61:6C:0B:DB:66:06:DB:0A:02:F3:90:3D:8A:20:D9:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-ZfK2FsC9tmBtsKAvOQPYog2b0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/z3dfCKY-XzYavmfFllpELqg3CVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.139.4.0/24
128.139.6.0/23
Signature Algorithm: sha256WithRSAEncryption
46:f6:54:06:a1:43:aa:90:c4:9b:66:5b:f9:fb:8b:3e:f4:fc:
86:e4:df:d3:b2:88:38:eb:cf:06:95:2a:d0:f6:e6:6b:58:b2:
b0:39:51:34:65:b9:c3:a0:2e:0d:1d:9c:91:57:50:b9:27:9a:
00:b2:24:c7:29:e5:82:89:fd:71:03:3e:38:d0:10:c0:84:63:
3d:ce:a6:f9:70:a2:bc:2a:80:50:d0:24:74:ee:7a:4a:e1:73:
ab:61:84:74:f9:17:88:e6:81:3f:f8:6a:48:73:3f:20:f2:b6:
4d:f1:dc:5f:f4:97:05:e7:19:a6:d6:8a:3f:64:1f:18:3d:cf:
05:4a:ad:56:f6:09:0d:cc:f1:31:33:54:ca:75:78:77:59:5c:
f3:73:09:73:34:50:f9:22:50:ab:c7:7a:c6:b9:cd:5d:a1:04:
42:48:b0:ac:0f:b8:2f:37:9f:64:10:fa:5a:e4:e5:76:52:3d:
b5:fe:92:47:23:b0:86:bf:b1:1b:c5:38:cf:e7:ea:b9:89:70:
68:73:c5:11:23:74:2b:fc:b4:17:9f:0f:1b:47:f8:6f:27:c3:
81:f3:ee:6e:bb:02:cf:5f:77:e8:32:d8:5e:b7:87:81:e1:b1:
5a:84:f2:af:03:b4:23:03:28:b9:95:bc:70:4f:df:05:b7:00:
c1:6c:e0:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:57:27 2026 by rpki-client