Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/n2-pzWESMnbCDPKB69CI8_baqHM.roa
File: n2-pzWESMnbCDPKB69CI8_baqHM.roa (raw, json)
Hash identifier: Bzls95QGU3Xgt5y9uwQf9mlOrFCcwbExQ5LzXDXTULQ=
Subject key identifier: 9F:6F:A9:CD:61:12:32:76:C2:0C:F2:81:EB:D0:88:F3:F6:DA:A8:73
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A05256751F1BD9F826710DF1B45548CCD1
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/n2-pzWESMnbCDPKB69CI8_baqHM.roa
Signing time: Sun 30 Aug 2026 11:03:12 +0000
ROA not before: Sun 30 Aug 2026 11:03:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 139874
IP address blocks: 109.66.22.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:52:56:75:1f:1b:d9:f8:26:71:0d:f1:b4:55:48:cc:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Aug 30 11:03:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f6fa9cd61123276c20cf281ebd088f3f6daa873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:34:30:49:eb:1d:55:51:ab:8d:30:c7:28:44:
53:3a:2c:b2:32:77:f0:54:41:f3:f7:9b:fa:ee:80:
37:59:de:34:23:e1:8b:19:2a:ba:8d:cf:63:95:7a:
ed:97:2b:e8:07:16:b4:c5:ca:c7:ea:ab:8e:33:a9:
7a:fe:82:69:df:d6:53:e2:ca:26:ca:a7:59:08:f9:
20:99:34:42:16:86:2d:47:69:e9:0f:6d:94:91:fe:
f1:4e:84:4f:6f:b8:23:57:bb:34:16:2f:c5:05:3c:
6b:39:b1:ec:0b:dc:a3:42:2a:01:9f:42:53:38:87:
c7:71:21:0a:99:4b:d6:3b:da:ed:7a:cb:d0:59:86:
5b:13:e5:07:19:67:d0:90:3f:33:94:66:e3:b8:d9:
17:d5:59:5b:32:40:3d:f1:f1:9f:ed:23:7b:8e:c6:
62:37:9e:f8:0c:de:b4:2e:8a:d7:07:86:73:8c:93:
6b:2c:8a:98:6c:80:36:d7:72:9c:bb:e3:9c:5f:7d:
3b:ea:93:30:78:ad:25:bf:3e:a7:82:6c:fe:ff:c2:
c6:c8:ec:c7:86:ed:88:60:9b:64:ff:14:4b:70:77:
51:01:74:1f:d9:8f:2c:81:16:5f:c4:4b:7e:3e:1f:
83:18:65:6a:34:e8:c9:1c:95:1c:a9:08:a4:f6:d8:
ba:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:6F:A9:CD:61:12:32:76:C2:0C:F2:81:EB:D0:88:F3:F6:DA:A8:73
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/n2-pzWESMnbCDPKB69CI8_baqHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.22.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:06:0a:3a:81:9f:55:a4:78:22:1b:53:47:97:d0:a2:cf:2b:
dc:ba:7b:d6:38:8e:e4:c1:55:e8:cd:ad:54:6f:fd:a1:99:37:
28:41:6a:72:64:1d:4d:21:71:e2:0b:1a:05:04:6c:2d:ec:51:
a5:58:7a:60:a4:38:51:9c:75:8b:92:9c:ef:71:fc:48:ec:3b:
7b:87:4e:2f:19:ab:df:85:47:36:6d:1d:a7:c0:b2:06:0e:f4:
85:0d:e6:12:13:6c:ed:dd:5f:dc:d9:72:0c:43:e6:97:b2:a4:
ef:78:8a:68:10:d5:d4:69:ac:56:6b:08:40:2c:ae:b7:20:8b:
2d:35:0b:37:9b:06:54:cb:81:d7:d2:08:0d:fd:07:d5:c7:d5:
3c:55:99:2d:0e:a6:5b:50:34:c5:9f:6d:85:58:02:7a:dd:a1:
65:97:3a:47:a9:14:94:55:7d:e2:e0:1e:ef:30:c2:d9:f3:ec:
85:46:18:ef:d0:78:65:ca:ac:f7:c1:ea:a3:9f:f3:62:16:73:
52:ff:b8:c5:96:e3:7b:31:66:76:cb:f9:dc:d2:ee:be:b7:06:
fa:83:ee:cd:f7:ea:31:64:e8:72:f0:8b:49:20:62:4f:c0:73:
e3:a9:0f:90:46:51:c2:da:fc:75:6a:e8:ab:65:25:a3:23:25:
12:f1:f9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 09:31:21 2026 by rpki-client