Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ZFU5Pcb3Ad8iu680MpeIXZ9gKdE.roa
File: ZFU5Pcb3Ad8iu680MpeIXZ9gKdE.roa (raw, json)
Hash identifier: a1d43FLhVivH3ngc0lyDn8ajYHloteK48R1dp77V81k=
Subject key identifier: 64:55:39:3D:C6:F7:01:DF:22:BB:AF:34:32:97:88:5D:9F:60:29:D1
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01A05D1EFF0BAD86F0B697EE20B28875B7F2
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ZFU5Pcb3Ad8iu680MpeIXZ9gKdE.roa
Signing time: Tue 01 Sep 2026 13:18:27 +0000
ROA not before: Tue 01 Sep 2026 13:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218885
IP address blocks: 93.186.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 10:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5d:1e:ff:0b:ad:86:f0:b6:97:ee:20:b2:88:75:b7:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Sep 1 13:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6455393dc6f701df22bbaf343297885d9f6029d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:39:9a:ea:44:9b:d3:52:b5:75:6b:79:5a:1e:
d4:0f:f4:90:3a:49:51:6c:17:f9:98:41:7e:a0:7c:
ed:d9:5a:da:0d:f8:5a:32:03:d4:60:db:41:ba:13:
3c:ef:68:0c:a1:a0:eb:a3:1c:7d:3d:f5:7e:cd:98:
c6:d1:a2:da:72:7c:02:25:ec:43:c1:79:5c:c4:8a:
0a:22:89:29:95:bd:74:0d:86:b5:65:dd:fb:e4:2c:
82:b4:d8:fc:6a:72:fa:0a:32:85:4c:65:67:f2:72:
12:30:fc:c6:ca:87:ae:d3:68:3b:10:57:27:b8:7a:
05:8c:32:21:3b:ca:3a:31:fc:82:70:09:69:a2:1e:
05:55:2a:ce:94:39:6f:b5:dd:e1:6b:d1:1a:46:c0:
33:85:1d:ea:8f:46:55:ac:0c:af:b9:03:d9:51:6f:
71:6c:ad:96:96:c0:b7:fe:70:d5:01:73:24:5c:60:
47:65:41:ce:01:33:b6:75:66:72:78:c8:b5:dc:61:
83:01:c2:ae:ba:3a:6d:4d:64:18:22:c5:c1:08:58:
fd:49:51:59:a7:c5:09:74:3a:5e:e0:c6:68:b2:fe:
57:db:b3:50:c7:2b:19:50:f6:b8:e6:6b:42:02:ee:
7b:a7:df:c0:5f:09:62:6a:9f:9d:a1:b0:34:87:01:
b4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:55:39:3D:C6:F7:01:DF:22:BB:AF:34:32:97:88:5D:9F:60:29:D1
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ZFU5Pcb3Ad8iu680MpeIXZ9gKdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.186.71.0/24
Signature Algorithm: sha256WithRSAEncryption
75:30:4f:7c:38:c6:ae:cf:d7:01:18:bb:4d:5a:b6:19:a3:2c:
08:f1:ab:11:a6:b9:ff:af:a7:54:af:dd:b4:ab:01:79:e1:70:
b3:cb:22:5f:b1:2a:bf:56:30:8a:af:90:a0:67:b6:b3:50:3c:
ac:30:f6:db:55:d1:3b:e6:d9:1e:df:20:c4:37:13:29:25:08:
b5:95:b9:5f:26:9d:c7:7a:d9:3e:d9:5c:5a:a8:97:4b:c2:96:
3b:9a:fd:93:33:c6:8c:ff:7e:aa:e5:ac:50:ce:d7:f0:77:7d:
cb:16:5f:f4:4c:f0:27:e7:56:41:6e:41:1a:09:89:ca:dd:1d:
87:87:c0:04:3f:2a:59:25:96:5c:6e:b6:62:16:13:fd:f5:f3:
68:37:7f:98:30:5a:e5:13:cd:16:8d:01:37:45:0d:22:9b:5f:
b7:fe:85:b9:14:d1:7f:bd:b4:d7:45:d6:38:4e:7c:c4:a8:60:
c2:4b:37:fb:60:2a:3c:48:ca:ce:6c:13:b5:65:f1:30:ce:16:
4b:f5:29:10:87:1e:aa:d9:0b:56:1a:6d:81:e5:12:3e:08:73:
68:4e:8a:0e:05:26:1f:4a:e1:c0:9c:d1:af:90:0b:c4:01:59:
15:39:77:80:f2:92:b8:e4:ae:9c:30:0d:5e:d4:62:42:d8:e4:
ef:37:54:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:41:49 2026 by rpki-client