Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/zs43YQqiiPZ8TmoCSliAVP-SQ8s.roa
File: zs43YQqiiPZ8TmoCSliAVP-SQ8s.roa (raw, json)
Hash identifier: XkERpkzvvp3ZUfUrmD6tuaOdFuxSir5qOnofobd2DAo=
Subject key identifier: CE:CE:37:61:0A:A2:88:F6:7C:4E:6A:02:4A:58:80:54:FF:92:43:CB
Certificate issuer: /CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Certificate serial: 019F23694BE7C18B523A8486F24CA6A09FE4
Authority key identifier: 29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/zs43YQqiiPZ8TmoCSliAVP-SQ8s.roa
Signing time: Thu 02 Jul 2026 15:18:51 +0000
ROA not before: Thu 02 Jul 2026 15:18:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205655
IP address blocks: 31.135.6.0/24 maxlen: 24
91.224.40.0/24 maxlen: 24
176.103.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Jul 2026 06:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:4b:e7:c1:8b:52:3a:84:86:f2:4c:a6:a0:9f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Validity
Not Before: Jul 2 15:18:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cece37610aa288f67c4e6a024a588054ff9243cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c2:34:7c:e6:c9:07:17:54:a0:b8:af:72:e4:
50:86:a6:fd:05:9b:0e:e8:6f:72:ab:09:72:9d:26:
0c:6b:52:fb:a5:3d:e8:84:a9:c5:84:7e:9b:75:eb:
29:29:92:c8:ca:6c:60:84:b2:0b:68:30:8b:dc:83:
16:20:bd:9e:9c:24:4c:bd:d3:a7:d5:67:8a:36:ed:
ff:7a:ef:6d:37:af:14:92:bb:4c:d1:27:7b:cb:fd:
56:b8:07:fd:1d:c0:51:f4:13:8e:e9:b6:9d:e7:cd:
0d:39:b1:2c:ec:6b:a8:88:20:95:2b:0c:48:0d:51:
e7:7b:f4:1f:e5:b5:01:a3:db:61:ed:61:ab:99:f5:
f8:b7:fd:fd:7b:fa:85:ff:5e:ca:e1:28:95:18:3c:
26:32:b0:fc:e4:d3:ab:f1:e3:7c:55:1b:08:19:b0:
b3:41:ed:dc:0d:39:84:ff:ce:06:20:0b:f0:a1:64:
2e:60:39:10:2a:4e:7b:e9:ae:cf:1a:8d:74:90:e6:
82:5e:ef:8b:22:66:f3:aa:ac:c0:c9:6d:af:38:86:
1d:05:a7:2c:0e:c3:84:1a:b5:58:e3:d7:bb:94:fb:
01:57:8a:ba:0e:e6:4d:8e:8d:3d:6b:b3:7b:3c:86:
cf:f6:c5:e3:b0:f1:be:b7:6b:ad:87:51:84:32:b8:
f8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:CE:37:61:0A:A2:88:F6:7C:4E:6A:02:4A:58:80:54:FF:92:43:CB
X509v3 Authority Key Identifier:
keyid:29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/zs43YQqiiPZ8TmoCSliAVP-SQ8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.135.6.0/24
91.224.40.0/24
176.103.120.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:bd:f7:9b:73:34:34:f2:4b:6a:57:65:de:5b:e4:0d:e0:2b:
7e:13:6a:ee:93:69:9b:5f:62:01:59:ff:dc:a2:5e:93:1c:9a:
7d:16:e4:b7:fb:56:84:83:62:e8:e3:0c:21:57:a4:6f:66:9b:
35:43:12:a9:4e:d3:fd:ea:4f:04:57:eb:5a:a3:36:2d:27:2d:
7a:eb:61:72:7c:76:b4:83:19:08:0e:ca:54:5a:50:aa:d2:d4:
49:5e:28:58:94:bb:9c:99:ee:33:e9:51:b2:03:f0:87:9a:af:
b1:dc:7e:ae:78:b2:c5:b3:dc:61:1b:af:95:c4:6e:48:41:b6:
4a:dc:6f:0d:1c:b0:bc:c2:8b:db:e1:fa:55:7b:e7:42:6e:eb:
a5:3e:cf:8d:3f:72:40:66:bc:e5:43:a0:34:f4:7d:28:a2:61:
ab:7c:b6:e4:70:8b:38:5a:78:ca:c0:8a:27:5d:6d:26:7f:01:
48:75:41:91:22:a4:a9:d5:5c:0f:02:bf:bf:f0:6b:22:c4:be:
c2:36:07:76:3d:b9:3d:88:0c:55:70:16:8c:40:ea:d7:cb:b9:
51:87:b1:4e:b9:25:19:f8:d4:9e:df:76:e6:f1:75:77:e1:3e:
e0:9f:80:1e:c1:1a:07:5e:4f:e2:75:00:95:58:de:09:29:40:
08:2e:72:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 15:22:45 2026 by rpki-client