Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/zzlejXCHpXgamH633G_B9GA9p_0.roa
File: zzlejXCHpXgamH633G_B9GA9p_0.roa (raw, json)
Hash identifier: eE86eVMiNcHiwH9DJb7Ms+ClxkfBQ1nOerPmLa6il54=
Subject key identifier: CF:39:5E:8D:70:87:A5:78:1A:98:7E:B7:DC:6F:C1:F4:60:3D:A7:FD
Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Certificate serial: 01A06C3E0A6AD27C6945A80F190397CE8028
Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/zzlejXCHpXgamH633G_B9GA9p_0.roa
Signing time: Fri 04 Sep 2026 11:46:40 +0000
ROA not before: Fri 04 Sep 2026 11:46:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47288
IP address blocks: 153.56.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:3e:0a:6a:d2:7c:69:45:a8:0f:19:03:97:ce:80:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Validity
Not Before: Sep 4 11:46:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf395e8d7087a5781a987eb7dc6fc1f4603da7fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5b:58:e8:3a:ba:60:4f:b1:df:62:49:4c:ff:
67:fd:69:53:71:4f:a5:5e:e8:60:44:1e:64:11:4d:
8a:5e:7d:e1:97:76:ab:89:b6:24:5d:06:a5:34:f5:
02:fe:db:ed:07:3e:a7:31:5d:53:8d:31:6e:d3:4e:
4a:7c:60:5e:e7:f7:b1:50:a5:ad:5c:92:6c:ea:a1:
ef:a7:5b:1d:6a:29:e8:42:56:13:b5:74:36:e3:6c:
b2:a9:cd:2a:7c:6d:ec:0f:88:68:b6:ef:6c:18:e6:
66:a1:e5:17:e4:fe:f9:e1:2f:40:9f:c5:f8:0c:92:
61:33:05:be:fe:c7:6b:1e:da:0a:37:75:52:25:0c:
3a:53:19:02:ba:ef:a7:17:1c:dc:fd:bd:4f:9b:6e:
f0:2c:3c:e0:9b:3e:06:29:01:0d:5c:4f:d7:be:80:
6a:26:04:b0:4d:e9:8a:3a:5c:4a:a1:74:92:d1:aa:
95:ba:b1:de:9f:ff:e4:0a:69:da:db:59:ba:82:4a:
01:2b:ca:82:38:53:24:cb:76:e9:95:18:40:6d:c5:
01:8b:57:a7:d5:e8:53:b5:8e:d5:ee:88:66:80:dc:
2e:32:46:30:a6:17:a4:21:60:c1:e2:33:d1:74:71:
87:09:c7:05:2b:b3:82:f0:49:bc:0d:ec:ab:eb:fc:
99:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:39:5E:8D:70:87:A5:78:1A:98:7E:B7:DC:6F:C1:F4:60:3D:A7:FD
X509v3 Authority Key Identifier:
keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/zzlejXCHpXgamH633G_B9GA9p_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.56.210.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:49:55:6e:b3:a5:98:35:82:65:82:9c:91:78:a3:f8:35:a1:
17:e3:d9:a7:ff:df:6a:ae:d4:9f:53:c9:35:b3:a6:38:9a:b7:
cd:ad:f4:e5:fb:6e:49:3c:3a:a4:78:b4:29:b1:9d:e6:79:39:
9e:2f:8c:fe:a2:b8:c0:a0:74:15:94:62:31:19:30:89:29:f2:
d9:7f:cb:8d:4c:13:62:d9:37:e3:40:da:4f:fd:88:3f:c8:62:
a3:1e:97:ea:a6:f7:77:0e:87:f3:8d:63:6e:41:8c:09:50:38:
79:c6:31:31:a3:86:a0:0b:64:cd:fd:18:48:b3:ee:51:3d:46:
4c:d5:ba:87:bf:c2:8b:06:2e:68:8a:92:d2:00:42:98:e7:c0:
28:7d:16:24:37:6a:67:97:05:64:d5:90:d1:c2:78:1c:9e:22:
07:83:c0:8c:b9:2d:ac:1f:e7:1b:15:9a:6b:45:38:04:3d:82:
b2:6d:5a:3e:e2:12:7a:5f:98:e0:9c:fd:a2:13:06:97:81:6f:
82:08:dc:c8:fe:16:79:fe:08:08:d0:5a:71:30:49:67:66:9e:
36:98:6e:71:5e:0e:1b:9f:cb:9b:9d:d0:a0:8e:6e:7e:5b:45:
ed:5c:06:ee:55:42:09:82:cc:8d:59:38:8a:48:79:1f:6a:ee:
b1:c3:7d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:21:05 2026 by rpki-client