Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/439cb7-4a36-425e-a084-dcf8ae924993/1/zKunQbH1Pi1kuPKcXi66B2kK2GE.roa
File: zKunQbH1Pi1kuPKcXi66B2kK2GE.roa (raw, json)
Hash identifier: IW2iL6xlGt6vOJU5K2L4rfi0KiuOBllyiIH+ctseSa0=
Subject key identifier: CC:AB:A7:41:B1:F5:3E:2D:64:B8:F2:9C:5E:2E:BA:07:69:0A:D8:61
Certificate issuer: /CN=d191557a20d3299613c702e9993e9d59c39b4708
Certificate serial: 019F379C149FBA97463ED1B9198084E61277
Authority key identifier: D1:91:55:7A:20:D3:29:96:13:C7:02:E9:99:3E:9D:59:C3:9B:47:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZFVeiDTKZYTxwLpmT6dWcObRwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/439cb7-4a36-425e-a084-dcf8ae924993/1/zKunQbH1Pi1kuPKcXi66B2kK2GE.roa
Signing time: Mon 06 Jul 2026 13:26:43 +0000
ROA not before: Mon 06 Jul 2026 13:26:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16347
IP address blocks: 91.220.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/439cb7-4a36-425e-a084-dcf8ae924993/1/0ZFVeiDTKZYTxwLpmT6dWcObRwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/439cb7-4a36-425e-a084-dcf8ae924993/1/0ZFVeiDTKZYTxwLpmT6dWcObRwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ZFVeiDTKZYTxwLpmT6dWcObRwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:37:9c:14:9f:ba:97:46:3e:d1:b9:19:80:84:e6:12:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d191557a20d3299613c702e9993e9d59c39b4708
Validity
Not Before: Jul 6 13:26:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ccaba741b1f53e2d64b8f29c5e2eba07690ad861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:79:b7:bf:19:8f:84:75:ce:24:4b:d1:12:55:
d3:8f:a9:5b:4f:63:6f:a2:a5:91:32:9b:b9:34:29:
1e:a6:bc:e9:25:a5:38:18:7f:5a:98:51:89:58:0b:
cd:56:09:92:3b:94:e3:9a:5a:45:90:ba:db:0f:ad:
cd:d2:36:87:e4:bc:04:8c:23:1c:e6:12:01:94:68:
fb:f4:8e:f7:e5:ef:f4:c7:11:bf:60:54:aa:07:69:
6d:4e:fa:38:a5:73:6f:a1:b4:32:42:d3:50:36:75:
c9:e6:25:03:1a:76:71:f0:56:2f:eb:0b:70:08:24:
30:81:b1:d5:c4:33:5e:3e:6e:48:cc:8a:68:32:a0:
12:62:d2:d5:a3:c9:bb:57:56:95:a2:37:4a:56:3d:
69:85:bc:13:e1:a1:2f:d4:97:35:94:4a:55:a4:7e:
aa:30:3b:ff:6c:8a:d5:7c:10:17:e3:50:1a:1a:11:
65:24:a3:8e:53:47:c0:f7:01:b5:21:89:58:a3:06:
4c:96:cf:24:63:a9:bc:7e:10:7a:8a:b4:07:09:2c:
9b:cf:50:e2:a8:9f:b9:d1:4b:0b:cc:0b:30:fd:cb:
e5:32:9b:4f:97:d3:36:cd:6b:ae:61:b7:9b:0c:e4:
cd:1d:ed:5b:12:09:b8:36:58:58:3d:ec:7a:28:39:
a6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:AB:A7:41:B1:F5:3E:2D:64:B8:F2:9C:5E:2E:BA:07:69:0A:D8:61
X509v3 Authority Key Identifier:
keyid:D1:91:55:7A:20:D3:29:96:13:C7:02:E9:99:3E:9D:59:C3:9B:47:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZFVeiDTKZYTxwLpmT6dWcObRwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/439cb7-4a36-425e-a084-dcf8ae924993/1/zKunQbH1Pi1kuPKcXi66B2kK2GE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/439cb7-4a36-425e-a084-dcf8ae924993/1/0ZFVeiDTKZYTxwLpmT6dWcObRwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.200.0/24
Signature Algorithm: sha256WithRSAEncryption
39:e7:d2:a1:bb:16:12:98:cc:b2:c8:b5:26:d9:67:56:13:e0:
1b:37:ee:4a:9b:b2:9a:1e:fe:dd:16:87:17:e8:a3:fd:70:1a:
b7:8c:d7:c3:37:ee:41:9a:92:b6:34:9a:66:50:ee:09:50:47:
ec:0a:88:75:21:6c:be:40:e7:70:be:f4:bb:73:b0:95:d0:b1:
b2:eb:28:48:40:30:f2:10:78:ff:b5:77:ef:ca:72:52:30:e7:
93:b8:53:35:b3:b5:7c:47:5c:d3:72:a1:42:11:68:f7:45:5b:
14:8d:37:35:43:dd:ad:86:aa:6e:4d:fe:14:6c:53:a3:ff:9e:
bd:8d:a9:06:51:8c:a6:70:c3:62:c1:ab:da:5c:28:c6:65:44:
fa:ba:c8:ae:e0:2e:d6:db:bf:c0:9e:69:19:e9:52:86:92:18:
23:e7:c2:e2:89:21:06:cc:31:ca:f3:92:88:c2:cf:4a:f0:8f:
f1:a5:ff:e3:c1:3e:20:7a:91:f5:58:05:11:60:8f:38:30:89:
31:bd:b2:32:7f:ed:13:38:32:fb:b3:3e:10:b8:34:32:e9:68:
91:e8:55:4f:0f:ee:b6:8b:9e:f0:38:d6:63:17:c0:8e:61:80:
66:9a:83:d0:dd:ef:58:07:11:e4:5e:36:39:6e:06:cc:98:39:
60:84:8f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:24:42 2026 by rpki-client