Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/Z-99bBhSzjJ0Kg9aGobemtBeDJw.roa
File: Z-99bBhSzjJ0Kg9aGobemtBeDJw.roa (raw, json)
Hash identifier: pvxDBRck2bWfMsW7dovzPou9uNU8Gr9hr6lVhmhkx9Y=
Subject key identifier: 67:EF:7D:6C:18:52:CE:32:74:2A:0F:5A:1A:86:DE:9A:D0:5E:0C:9C
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 019CBFDF9679C1083E3F04CC27977E61E022
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/Z-99bBhSzjJ0Kg9aGobemtBeDJw.roa
Signing time: Thu 05 Mar 2026 21:20:27 +0000
ROA not before: Thu 05 Mar 2026 21:20:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201136
IP address blocks: 31.42.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 16:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bf:df:96:79:c1:08:3e:3f:04:cc:27:97:7e:61:e0:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: Mar 5 21:20:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=67ef7d6c1852ce32742a0f5a1a86de9ad05e0c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f3:02:1f:28:29:a7:76:46:b5:d5:59:16:6a:
14:72:82:90:72:ee:c1:06:ef:73:6c:f8:78:ca:f0:
94:46:30:93:4b:1e:93:46:27:84:30:f4:78:6f:c3:
cd:f6:94:de:eb:e5:e4:a9:e5:46:d6:61:97:69:3c:
6a:fd:ae:9c:84:f1:e4:13:b8:fa:32:fa:8a:b3:d8:
9a:6e:81:ab:a0:ce:90:9d:4d:3f:a2:3b:48:07:f3:
31:a5:14:e8:cc:94:72:1f:24:c6:8e:57:94:e4:52:
03:3b:71:c9:26:c7:dc:69:fb:dc:0b:29:36:33:a3:
ec:f4:9f:5f:50:9a:11:c0:38:c8:81:97:92:59:4e:
0a:98:38:70:48:3f:a8:f3:ed:7f:9e:1d:e7:c8:bd:
d8:d7:2b:5f:a9:47:e7:d7:39:43:cc:3d:76:22:b7:
4e:e2:16:6a:ec:ee:ff:75:4a:1e:cc:ce:fa:7f:c3:
45:67:d7:f9:a3:d0:43:3a:8d:7f:49:29:36:1b:7e:
fe:b5:8e:16:9d:5d:5c:65:f5:e2:3c:45:6f:32:c0:
eb:d6:82:87:cf:f6:24:fb:13:6c:eb:5c:92:37:96:
27:86:a4:1c:a9:6b:4b:26:ca:0b:c9:40:cb:be:70:
df:f8:cc:28:6c:c3:64:2d:94:3f:1b:9f:8a:c1:5a:
e1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:EF:7D:6C:18:52:CE:32:74:2A:0F:5A:1A:86:DE:9A:D0:5E:0C:9C
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/Z-99bBhSzjJ0Kg9aGobemtBeDJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.120.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:47:bf:67:31:c9:a7:ca:d5:b1:7c:06:ce:05:bb:e6:48:39:
35:70:f8:7a:77:ad:50:bc:f9:0c:4a:19:2e:70:71:d5:19:35:
be:c4:a9:c1:c1:1f:dd:8d:ef:f4:9e:b6:5c:6f:7a:2d:19:ef:
82:c9:55:8b:2c:64:d8:dc:da:d0:67:9e:6c:ec:3f:69:df:05:
4d:7f:06:34:d1:ea:aa:56:00:db:12:57:9a:2b:f2:81:fa:24:
f1:4e:ab:10:f0:f8:b9:3b:d0:fe:23:63:a5:6c:a8:5d:01:2d:
61:0d:e4:93:29:bd:6e:74:5d:9c:68:46:61:a8:be:61:80:62:
9a:16:e0:16:1a:b7:49:17:9a:9d:5b:22:1e:ea:0a:21:a7:79:
67:35:79:1a:bf:fc:77:fd:dd:10:d8:06:26:4e:d4:7a:40:de:
f5:27:d7:93:4a:62:43:48:47:5a:70:39:ea:cc:4e:f4:b6:66:
ad:06:8f:96:95:50:78:03:09:30:00:fd:fc:5f:3c:82:de:7e:
71:76:63:86:d9:64:a8:16:58:92:7c:05:57:92:61:ba:41:d7:
2d:c0:23:0b:6a:45:ac:e1:c5:e3:bb:7a:0e:38:00:3c:68:b7:
c3:72:0d:f3:bc:90:36:07:aa:dd:fa:4f:ed:92:10:6d:4f:e8:
e3:f0:ea:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 02:02:30 2026 by rpki-client