Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/dZHf2iv05pM1Ai9ZjfS07lKZDts.roa
File: dZHf2iv05pM1Ai9ZjfS07lKZDts.roa (raw, json)
Hash identifier: JTU5yNETth/ASXwQ5ks41TuKzhbLmsaZI7F7bPnX1jA=
Subject key identifier: 75:91:DF:DA:2B:F4:E6:93:35:02:2F:59:8D:F4:B4:EE:52:99:0E:DB
Certificate issuer: /CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
Certificate serial: 01A032FF016CC9E59D540622E8100857300A
Authority key identifier: C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/dZHf2iv05pM1Ai9ZjfS07lKZDts.roa
Signing time: Mon 24 Aug 2026 08:59:27 +0000
ROA not before: Mon 24 Aug 2026 08:59:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397688
IP address blocks: 2.58.8.0/24 maxlen: 24
2.58.9.0/24 maxlen: 24
2.58.10.0/24 maxlen: 24
2.58.11.0/24 maxlen: 24
31.222.50.0/24 maxlen: 24
31.222.51.0/24 maxlen: 24
31.222.58.0/24 maxlen: 24
147.189.164.0/24 maxlen: 24
147.189.165.0/24 maxlen: 24
147.189.166.0/24 maxlen: 24
147.189.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:32:ff:01:6c:c9:e5:9d:54:06:22:e8:10:08:57:30:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
Validity
Not Before: Aug 24 08:59:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7591dfda2bf4e69335022f598df4b4ee52990edb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:94:8f:8a:bd:8c:08:fa:8d:44:ac:13:7b:1c:
0c:ba:18:1d:2e:94:c8:f5:63:a3:bd:89:d9:93:d8:
e2:21:85:f4:a1:f5:66:07:62:17:0b:cb:2e:be:89:
d8:e8:94:87:03:40:5a:41:30:88:24:d3:2d:11:67:
bb:8e:2d:73:7a:28:d2:f6:63:1d:58:52:77:5b:9e:
82:55:8b:ce:40:5f:65:1e:28:58:f5:2a:54:39:f0:
c4:f2:1e:5e:e1:c2:6e:e6:38:70:ed:e4:d8:64:a8:
77:b6:48:08:ac:18:28:da:f1:ae:1f:a3:3b:c2:01:
04:d9:a6:33:3b:dc:b6:49:5f:39:c8:ff:c1:53:fc:
57:34:0d:e4:b3:57:65:7b:58:41:fa:36:30:0f:c4:
4e:f6:24:52:8d:17:7e:c6:b9:40:0f:df:b8:d8:ed:
5a:a3:f7:83:07:df:ff:10:d1:8d:b1:61:b5:87:e2:
a5:b6:5c:90:6d:ce:69:b6:91:cc:0b:c3:e0:d8:15:
21:62:1f:62:11:4e:99:a9:8f:79:b5:a2:5e:d7:8c:
c0:fc:62:cc:de:70:ff:1c:a2:d7:dc:f8:f0:c9:2a:
86:b2:92:9c:8b:28:46:79:1f:ac:ae:80:ed:af:ae:
4a:f7:70:bb:4d:9f:e8:39:2e:b7:25:22:f6:55:5d:
30:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:91:DF:DA:2B:F4:E6:93:35:02:2F:59:8D:F4:B4:EE:52:99:0E:DB
X509v3 Authority Key Identifier:
keyid:C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/dZHf2iv05pM1Ai9ZjfS07lKZDts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.8.0/22
31.222.50.0/23
31.222.58.0/24
147.189.164.0/22
Signature Algorithm: sha256WithRSAEncryption
18:93:31:b2:00:00:38:c9:87:ab:9b:0e:fd:16:d8:da:35:35:
83:43:5a:1b:3c:39:5a:a7:ea:a8:d3:40:b1:ce:19:74:23:9b:
a2:c2:96:91:e3:e2:b7:39:28:ad:05:da:4b:8a:5d:0a:0a:dd:
7d:c5:a5:3a:8d:3a:73:a4:c5:27:8f:55:f3:cc:64:9b:d4:b0:
e1:55:89:ef:40:9d:42:5f:2e:ab:69:5c:8a:ea:99:50:a0:99:
f9:1c:3a:a8:fb:71:35:4f:52:6f:61:c8:70:2f:bd:f9:5a:41:
cc:af:b0:6e:64:f5:e5:a9:04:f1:88:e2:b0:b9:e0:49:95:4b:
06:03:da:c9:56:2d:8f:d3:7a:06:4a:1a:1a:65:05:89:3b:e6:
44:32:b3:ab:24:43:20:07:ae:08:d5:88:91:42:04:4a:2e:23:
1e:58:71:76:65:70:34:af:b2:28:8f:12:be:bd:b0:6f:15:f0:
55:93:99:77:30:66:60:c5:0e:70:45:9e:d3:47:01:a1:9c:1c:
ed:2d:15:16:36:23:f2:d5:bd:bd:28:d4:41:d8:00:93:c8:bf:
9a:1d:3e:3f:1f:aa:ca:bd:b2:c2:91:6b:66:53:42:06:62:29:
2b:fc:d6:73:65:10:e0:2d:e6:7e:f1:7a:9b:0d:6a:fc:cc:f4:
18:d1:2d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:08:47 2026 by rpki-client