Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/ZnI6rIDKY61q_EdxQ0Ps2-7c8pk.roa
File: ZnI6rIDKY61q_EdxQ0Ps2-7c8pk.roa (raw, json)
Hash identifier: VEhHI2145rcv2aABo2fKpby1T8tUIgwn198oDws8z+4=
Subject key identifier: 66:72:3A:AC:80:CA:63:AD:6A:FC:47:71:43:43:EC:DB:EE:DC:F2:99
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 019FF9CC6BBB117AE753E7ED5B6C4C5266A9
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/ZnI6rIDKY61q_EdxQ0Ps2-7c8pk.roa
Signing time: Thu 13 Aug 2026 06:25:51 +0000
ROA not before: Thu 13 Aug 2026 06:25:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 109.66.18.0/24 maxlen: 24
109.66.68.0/22 maxlen: 24
109.66.84.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:cc:6b:bb:11:7a:e7:53:e7:ed:5b:6c:4c:52:66:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Aug 13 06:25:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=66723aac80ca63ad6afc47714343ecdbeedcf299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7b:6a:30:d1:0c:53:71:86:fc:41:27:d0:82:
2a:c4:63:7d:6c:be:20:2f:88:2e:bd:69:41:25:58:
38:20:b3:e7:90:aa:72:eb:d6:dc:f9:f2:18:f7:41:
b9:a3:51:82:dc:46:0c:48:1a:be:89:5d:d9:70:f5:
04:c6:e6:3f:b9:ad:0f:d3:4b:b1:13:58:66:ab:f2:
2d:3d:1c:1a:b2:56:a6:5b:65:40:99:2a:82:e5:aa:
72:16:17:be:26:61:be:06:55:ae:b3:c1:a1:a1:d6:
66:e3:95:ae:4b:b5:6c:d8:a7:9d:38:a0:9c:15:7d:
c3:d7:49:9f:03:32:e2:c8:01:8d:60:5f:06:6d:76:
a5:b6:1a:83:cd:e6:eb:e5:df:43:b0:a1:ca:f9:5e:
c2:71:74:68:bc:ad:73:2d:5a:f5:00:50:ce:be:25:
2a:ea:23:c2:6b:5b:5f:08:5a:e2:01:63:48:28:4d:
0b:ff:6a:03:46:b3:cd:53:b8:b9:71:b5:f5:7f:05:
59:77:40:82:30:93:c4:7c:63:4c:51:04:2d:1f:e2:
22:16:6f:30:a1:e7:d2:7f:d3:6c:15:95:a9:e5:f9:
4a:66:7b:8d:88:08:e4:2a:d7:ef:4b:54:81:41:52:
ac:5a:61:47:2c:68:19:d3:b9:2e:1c:dc:0d:ae:07:
ba:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:72:3A:AC:80:CA:63:AD:6A:FC:47:71:43:43:EC:DB:EE:DC:F2:99
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/ZnI6rIDKY61q_EdxQ0Ps2-7c8pk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.18.0/24
109.66.68.0/22
109.66.84.0/22
Signature Algorithm: sha256WithRSAEncryption
91:3c:3f:b6:cc:18:29:4e:8f:22:a6:83:f0:f3:e8:b3:e0:cc:
ec:8c:6d:e6:69:a9:e7:6d:09:b5:fc:38:75:23:29:2b:07:d4:
2e:9e:2d:5b:fe:36:3c:92:c0:23:cc:d4:ed:74:c0:9a:62:61:
ea:11:ca:5e:43:eb:c3:ec:3f:60:0e:0f:9f:47:f7:98:d4:76:
4a:ea:92:df:90:f0:00:27:3b:18:02:3c:ac:32:75:2f:2f:26:
4f:d3:22:4b:93:90:b4:9d:31:ef:1d:98:83:e1:ed:ae:f4:16:
06:26:a5:29:91:00:68:ea:fd:25:1f:74:f8:a1:bf:84:36:16:
fb:2a:36:e6:f0:e2:76:78:71:0a:bf:ab:38:03:2d:65:35:d5:
05:0a:82:75:90:62:a2:df:cf:0e:12:98:8d:31:d1:af:35:bb:
ea:9e:65:f5:7f:80:23:7b:31:7d:3c:1a:16:48:99:a4:af:b4:
3e:5c:4e:2e:2a:12:5b:69:71:ad:8f:98:8c:fc:c9:4e:a4:9c:
4d:c9:18:2e:51:0f:96:de:9c:68:9e:20:50:0a:e3:b0:d6:43:
f9:5f:1a:bf:2c:7e:f8:18:8e:77:d7:d3:24:57:db:92:1e:13:
64:0f:a8:30:b7:21:d6:d1:44:06:50:d7:46:37:da:74:f8:05:
44:29:00:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:53:08 2026 by rpki-client