Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/ZTl4Zk7cce3PpwYo1VMIjiLUFEI.roa
File: ZTl4Zk7cce3PpwYo1VMIjiLUFEI.roa (raw, json)
Hash identifier: afB6AkuPwpkXIf5jkkcicrF1yBAdioEzpkz55cn4RIY=
Subject key identifier: 65:39:78:66:4E:DC:71:ED:CF:A7:06:28:D5:53:08:8E:22:D4:14:42
Certificate issuer: /CN=be550b8eff90cccee9f8d3134b6438996b7d27cd
Certificate serial: 01A043DA37B66D0E9C03EDF05D8C18C40328
Authority key identifier: BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/ZTl4Zk7cce3PpwYo1VMIjiLUFEI.roa
Signing time: Thu 27 Aug 2026 15:32:49 +0000
ROA not before: Thu 27 Aug 2026 15:32:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214982
IP address blocks: 5.102.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 06:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:43:da:37:b6:6d:0e:9c:03:ed:f0:5d:8c:18:c4:03:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be550b8eff90cccee9f8d3134b6438996b7d27cd
Validity
Not Before: Aug 27 15:32:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=653978664edc71edcfa70628d553088e22d41442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5f:4a:2c:56:4e:bf:ef:fc:1f:d8:76:64:c5:
0e:3b:27:2c:c5:24:5c:c5:7a:9c:2d:79:d7:61:a0:
6d:9c:03:d6:e9:a3:f9:26:e8:a6:2e:52:b5:b1:dd:
04:d3:43:21:00:d7:a7:44:c5:fc:6f:fc:9b:a1:76:
32:e4:26:2b:75:0d:ed:dd:3e:39:00:2c:a6:6e:9b:
67:4f:54:f9:81:ae:34:42:2d:d2:b1:89:5a:ae:d0:
0f:5e:f1:0e:40:86:4a:44:5e:e7:3d:ec:7b:a2:ba:
27:3c:f8:54:bb:5b:77:98:1c:35:3b:5d:9a:48:9f:
c0:8d:42:15:3b:01:6f:e4:a5:1d:6a:a5:f1:14:31:
3c:19:69:e5:cf:42:06:68:17:77:01:a9:4d:a2:55:
8a:87:bc:75:a0:2d:d7:c7:a3:18:d7:11:f8:5b:88:
ca:73:ba:98:46:09:30:66:b1:b1:00:51:77:dd:11:
4b:1c:92:27:85:12:cf:23:88:0b:74:66:ae:7d:8f:
9a:a2:da:41:4d:32:15:bc:29:b2:00:4b:c7:98:79:
d6:23:f0:63:ba:19:2f:e6:e2:e6:cb:f2:f8:d4:40:
e7:a7:7b:2b:ce:ce:24:cf:13:c3:19:ca:e2:d6:11:
28:65:04:fb:c5:c3:2d:03:46:bb:79:45:3e:0b:de:
18:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:39:78:66:4E:DC:71:ED:CF:A7:06:28:D5:53:08:8E:22:D4:14:42
X509v3 Authority Key Identifier:
keyid:BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/ZTl4Zk7cce3PpwYo1VMIjiLUFEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.177.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:24:0d:10:3e:ec:92:ea:a1:19:fa:c0:39:40:19:37:0c:2d:
e0:84:4e:43:da:14:61:3f:47:21:b4:f3:f9:15:e3:a2:5e:aa:
00:bf:12:1a:85:cb:ef:de:b6:d0:d1:71:ad:b0:bc:3e:98:88:
ea:32:9c:7c:25:59:64:8f:c9:c6:77:1f:37:27:10:e9:27:21:
ad:3a:e4:51:c8:6b:5c:05:dc:d0:bc:98:2a:72:a9:2f:6e:b6:
f7:a1:57:95:90:69:fe:60:57:4e:c4:78:a2:ae:59:40:25:c2:
f8:ff:97:6a:03:26:83:18:57:7b:a1:a2:ef:8d:e6:23:e9:30:
29:c4:77:6b:20:9c:88:49:54:60:25:f8:5a:dd:7c:0c:c6:f6:
cc:3a:61:7c:89:78:6a:f0:0d:6e:e5:08:6f:93:43:a9:a9:75:
40:f7:ee:fc:50:b5:33:35:f1:15:3e:cf:17:47:b4:84:8d:1f:
5d:00:6b:8f:df:24:54:31:03:b8:67:89:40:92:01:bf:39:23:
eb:b3:a8:2f:22:98:53:47:29:28:0f:19:f0:59:53:ea:26:6d:
66:fd:05:2d:c6:47:45:62:91:30:5c:47:09:d9:fc:4d:b0:48:
36:e5:13:06:08:74:8e:a4:00:56:32:e5:12:2d:02:57:b6:4a:
b8:43:c2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 16:25:20 2026 by rpki-client