Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/ZPNFN2SHGEuug7dR3f_5NaqBcYE.roa
File: ZPNFN2SHGEuug7dR3f_5NaqBcYE.roa (raw, json)
Hash identifier: 5bnWerfmM11w3yKXSNQNnqjZF9M1e+6+t1oBrlPcPjs=
Subject key identifier: 64:F3:45:37:64:87:18:4B:AE:83:B7:51:DD:FF:F9:35:AA:81:71:81
Certificate issuer: /CN=3ee0214c609c6cd67803ac7c736ef8da517ca59d
Certificate serial: 019F0359E3E458F6B32A85FD5606CF2F7F32
Authority key identifier: 3E:E0:21:4C:60:9C:6C:D6:78:03:AC:7C:73:6E:F8:DA:51:7C:A5:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PuAhTGCcbNZ4A6x8c2742lF8pZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/ZPNFN2SHGEuug7dR3f_5NaqBcYE.roa
Signing time: Fri 26 Jun 2026 09:54:10 +0000
ROA not before: Fri 26 Jun 2026 09:54:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210536
IP address blocks: 109.71.185.0/24 maxlen: 24
217.22.10.0/24 maxlen: 24
2a14:c180::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PuAhTGCcbNZ4A6x8c2742lF8pZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Jul 2026 02:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:03:59:e3:e4:58:f6:b3:2a:85:fd:56:06:cf:2f:7f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee0214c609c6cd67803ac7c736ef8da517ca59d
Validity
Not Before: Jun 26 09:54:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=64f345376487184bae83b751ddfff935aa817181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d2:74:cd:75:d8:9d:6e:ce:89:a7:ce:a3:6d:
e7:bf:45:8d:53:a9:a9:13:3a:29:93:60:95:4b:0c:
08:cb:a9:9d:d6:c4:5c:de:78:f2:c9:d5:fb:ab:5b:
a2:4e:1b:f7:1a:61:d3:47:b2:f8:aa:6d:7e:9b:9c:
ab:17:03:6d:48:b6:af:6f:1c:a0:0a:ce:0e:09:10:
31:b1:8b:f8:ee:ee:d1:81:51:1c:78:f5:9d:88:5c:
48:f7:fa:c3:aa:41:86:9b:3f:0a:70:9d:be:20:42:
27:7b:f8:7e:81:a6:6e:be:52:df:67:4b:f1:63:97:
f7:57:1c:91:ac:c8:1e:40:1c:7d:6a:b5:b6:a6:fb:
4e:5e:02:1e:2f:15:31:06:d1:c9:dd:8b:fc:c0:85:
ad:22:60:0c:1d:b6:ad:9e:d6:35:d8:0b:53:f9:ce:
12:ee:7f:e5:ca:4f:09:74:16:69:ac:b4:67:51:60:
f9:dd:38:d0:32:ab:91:0b:1c:5d:13:15:e4:6b:78:
02:2a:99:8a:2f:0a:d8:7d:27:b5:30:ab:70:22:ac:
8a:db:75:00:df:55:ce:f8:ed:4b:d7:86:50:bd:98:
a7:8f:c4:f9:96:83:f7:7a:22:1d:03:13:2b:78:1f:
0b:30:c7:05:9a:ba:91:86:06:49:df:35:10:1f:cd:
af:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F3:45:37:64:87:18:4B:AE:83:B7:51:DD:FF:F9:35:AA:81:71:81
X509v3 Authority Key Identifier:
keyid:3E:E0:21:4C:60:9C:6C:D6:78:03:AC:7C:73:6E:F8:DA:51:7C:A5:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PuAhTGCcbNZ4A6x8c2742lF8pZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/ZPNFN2SHGEuug7dR3f_5NaqBcYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.71.185.0/24
217.22.10.0/24
IPv6:
2a14:c180::/29
Signature Algorithm: sha256WithRSAEncryption
53:89:07:4d:14:30:60:a1:08:b2:88:15:b9:6a:df:ed:78:42:
04:4d:9b:cd:ea:26:80:c1:f6:d3:7b:0d:50:75:ba:9c:f7:5b:
7a:31:f7:66:b1:10:df:14:04:8f:7e:b3:bf:7f:33:51:9d:74:
1a:41:c4:4c:72:ec:e8:8e:55:0b:89:53:cb:7e:00:c0:a0:7b:
d5:cc:63:9c:91:2f:67:9f:a4:23:7c:9d:7b:3d:66:19:d6:3c:
db:35:14:d4:ad:cc:e3:06:26:d5:4f:c8:d0:9d:a1:4f:9d:9e:
76:84:30:cd:f5:7b:70:da:4a:06:7d:7f:e1:a9:90:41:e4:e1:
07:64:41:00:cf:bf:26:66:c5:de:85:77:1e:b8:c2:26:93:8f:
eb:16:1d:6c:6f:4f:5e:9a:0c:b6:87:35:a9:fd:4e:50:8a:b6:
29:3e:81:e4:0f:33:f8:d6:82:ff:99:f8:90:9e:66:26:f0:ad:
fa:eb:e1:d1:77:67:2d:64:60:f4:7f:11:43:22:b3:ef:7b:57:
50:a4:8a:20:64:66:46:d9:d0:17:78:23:cf:d9:c4:de:5d:dd:
84:a2:ac:92:fd:55:79:3d:87:fc:f2:ef:8e:11:b4:88:0b:eb:
64:ca:52:c4:32:b3:04:d1:61:ef:4d:26:da:c8:95:d5:21:18:
59:22:b5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 06:08:42 2026 by rpki-client