Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/f561ca-acc7-417d-a31c-8573c9daff68/1/Zu-L_GJVw-o5KZrO-kgim9vemuY.roa
File: Zu-L_GJVw-o5KZrO-kgim9vemuY.roa (raw, json)
Hash identifier: kYg9o7w+e9dEEtU7zm/z730qJtEYPdVvBGkKjhCtxWg=
Subject key identifier: 66:EF:8B:FC:62:55:C3:EA:39:29:9A:CE:FA:48:22:9B:DB:DE:9A:E6
Certificate issuer: /CN=0912213a5daa95a8c83bc781d8315d6b47e392d4
Certificate serial: 019FD1DA0A2CB5E864EB06F51DAC893E38A4
Authority key identifier: 09:12:21:3A:5D:AA:95:A8:C8:3B:C7:81:D8:31:5D:6B:47:E3:92:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRIhOl2qlajIO8eB2DFda0fjktQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/f561ca-acc7-417d-a31c-8573c9daff68/1/Zu-L_GJVw-o5KZrO-kgim9vemuY.roa
Signing time: Wed 05 Aug 2026 12:15:55 +0000
ROA not before: Wed 05 Aug 2026 12:15:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203059
IP address blocks: 64.254.160.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/f561ca-acc7-417d-a31c-8573c9daff68/1/CRIhOl2qlajIO8eB2DFda0fjktQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/f561ca-acc7-417d-a31c-8573c9daff68/1/CRIhOl2qlajIO8eB2DFda0fjktQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CRIhOl2qlajIO8eB2DFda0fjktQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 15:15:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d1:da:0a:2c:b5:e8:64:eb:06:f5:1d:ac:89:3e:38:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0912213a5daa95a8c83bc781d8315d6b47e392d4
Validity
Not Before: Aug 5 12:15:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=66ef8bfc6255c3ea39299acefa48229bdbde9ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3c:0b:0f:ff:af:ae:a6:fc:93:0a:df:05:9a:
15:2b:9b:8b:b1:4b:ba:9a:4c:07:19:05:25:0d:c0:
7b:1d:83:d4:e8:85:52:66:88:a0:cc:b3:50:bc:e9:
7e:a3:37:49:6d:17:85:2b:b8:b9:89:a5:13:70:9b:
2d:20:b0:8f:c7:33:99:ed:ea:5f:ef:ff:8e:ce:22:
79:3a:c4:eb:6a:2f:b4:b8:82:1f:88:41:bb:cf:1a:
ea:ec:92:05:23:19:8a:45:19:c7:7d:7a:01:94:2d:
dc:ae:a1:1a:77:eb:d9:5b:49:a0:dc:bd:ff:22:8f:
82:ae:66:1c:2e:26:db:4c:cc:2d:1e:af:c3:3c:90:
3e:6c:f4:bf:b0:51:62:70:18:c1:00:53:66:60:fa:
ca:42:43:b7:46:03:14:6c:9e:35:e8:fd:1d:89:fd:
8d:43:65:3b:f7:69:f3:f6:d8:89:64:44:aa:85:f0:
6c:5c:26:b5:63:20:3c:81:a5:57:d4:93:e3:45:29:
3f:87:04:f0:83:29:43:9e:6e:41:a6:14:70:bd:13:
8e:5b:af:11:36:d1:4f:f1:0c:c2:fa:04:f5:43:f5:
89:ea:e4:55:7f:4c:b6:f5:2e:66:d9:6b:aa:09:cc:
be:7f:4a:82:e6:fc:08:bc:c7:e7:bb:b7:52:26:46:
55:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:EF:8B:FC:62:55:C3:EA:39:29:9A:CE:FA:48:22:9B:DB:DE:9A:E6
X509v3 Authority Key Identifier:
keyid:09:12:21:3A:5D:AA:95:A8:C8:3B:C7:81:D8:31:5D:6B:47:E3:92:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRIhOl2qlajIO8eB2DFda0fjktQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f561ca-acc7-417d-a31c-8573c9daff68/1/Zu-L_GJVw-o5KZrO-kgim9vemuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f561ca-acc7-417d-a31c-8573c9daff68/1/CRIhOl2qlajIO8eB2DFda0fjktQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.254.160.0/20
Signature Algorithm: sha256WithRSAEncryption
b6:5d:a4:38:1e:13:0a:b9:d5:27:78:ed:9a:05:ae:16:28:13:
ad:20:42:83:35:2a:cd:7c:14:1d:bb:55:62:25:8c:1f:da:bb:
7d:7a:f3:58:e1:25:f6:4e:1e:4e:33:c3:17:84:a0:bd:66:a8:
3d:3d:44:d6:ba:93:b4:2b:b7:3e:5d:39:18:72:29:c3:78:19:
13:ee:e6:43:ba:c6:4a:2f:84:a7:80:0c:ed:ca:9b:72:b1:09:
87:56:eb:90:71:a7:79:bc:4b:4d:d3:90:85:5e:4c:5c:3e:5a:
0a:af:61:a8:b3:3a:9b:69:07:a8:fc:c0:61:8b:e3:05:b8:df:
b2:a3:d9:fa:c0:96:c0:ff:78:b6:7e:a9:94:c2:70:d0:37:17:
08:bd:7d:0d:ff:45:73:a5:94:d8:ce:d1:52:21:a5:79:67:a2:
02:4b:dd:55:0f:68:d0:3b:7f:78:6e:8e:33:2f:ef:06:33:1a:
60:a2:d5:1d:b7:94:14:d5:fe:70:33:71:7e:23:96:a4:49:72:
5b:ae:9d:ec:f4:bf:5c:db:eb:a2:78:56:1b:ad:b3:20:f7:e7:
d7:c9:f9:9f:a1:88:a3:8e:b6:ea:f3:0e:40:23:9b:c3:40:7a:
dc:37:df:db:d0:9f:e9:f6:cf:bc:cc:5c:6b:a7:35:ab:91:d8:
3e:b0:89:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 02:07:45 2026 by rpki-client