Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/PXzU5_88zZGqB5MYPuoWItDUegk.roa
File: PXzU5_88zZGqB5MYPuoWItDUegk.roa (raw, json)
Hash identifier: t6l0rd2bl2rTzqA130md4mKx4L2apFlJ7CDxl5Cyq8o=
Subject key identifier: 3D:7C:D4:E7:FF:3C:CD:91:AA:07:93:18:3E:EA:16:22:D0:D4:7A:09
Certificate issuer: /CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Certificate serial: 019FC80491BD9F1143893B1515CE45065244
Authority key identifier: CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/PXzU5_88zZGqB5MYPuoWItDUegk.roa
Signing time: Mon 03 Aug 2026 14:26:10 +0000
ROA not before: Mon 03 Aug 2026 14:26:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 17650
IP address blocks: 57.68.248.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 20:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c8:04:91:bd:9f:11:43:89:3b:15:15:ce:45:06:52:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Validity
Not Before: Aug 3 14:26:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d7cd4e7ff3ccd91aa0793183eea1622d0d47a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0e:a6:57:c2:52:31:8d:60:ff:19:c2:d3:03:
2d:b4:7f:b3:9c:07:17:33:1a:6e:37:17:e6:81:ea:
f4:26:0c:60:7d:c5:48:22:84:03:64:24:5f:80:63:
8b:4f:d4:c3:a1:21:99:cd:04:4c:47:3b:39:43:ae:
8c:f9:df:16:5a:a8:c6:36:d2:20:26:b1:21:10:bb:
0e:81:06:8d:d2:f8:62:f4:0e:4c:9d:4e:50:47:b2:
80:d3:52:f4:d9:45:04:a2:e6:af:c3:09:c1:50:e4:
7c:7b:ca:76:d3:7a:a5:68:e5:29:37:70:ea:3d:83:
f3:17:10:c5:1d:37:bb:c2:58:72:c9:af:32:a6:38:
9b:f2:a9:ab:e7:3d:64:46:87:9a:9a:ec:54:d3:0b:
f0:8c:83:7a:a0:4d:60:cc:b6:3f:31:25:81:98:e8:
1d:34:db:29:ca:e0:0c:a2:fe:ee:29:0b:e6:ed:b9:
96:c2:2a:94:ce:f3:4b:6c:77:7d:c7:13:97:cd:b1:
67:92:a3:a7:14:e1:58:0f:d2:e8:05:e1:8c:60:41:
6d:35:90:52:4e:1d:da:61:c3:7d:e5:18:82:f7:f9:
1f:33:49:3d:e6:c3:57:82:e3:fc:b6:e6:51:cc:92:
15:45:83:42:7c:c2:b9:0c:0f:cc:f5:13:ff:a9:b9:
17:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:7C:D4:E7:FF:3C:CD:91:AA:07:93:18:3E:EA:16:22:D0:D4:7A:09
X509v3 Authority Key Identifier:
keyid:CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/PXzU5_88zZGqB5MYPuoWItDUegk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.68.248.0/21
Signature Algorithm: sha256WithRSAEncryption
0c:4d:80:18:12:8e:82:f2:ea:81:3f:e8:fa:6c:d8:80:02:70:
42:fe:51:9c:e9:e0:d3:c1:77:d9:9a:d8:d6:48:7b:68:59:c4:
63:6a:29:40:2f:22:86:46:6c:7b:a6:22:97:0c:4d:cd:5c:1e:
44:fe:83:a9:7d:6b:06:3e:b4:ef:0b:eb:17:0a:89:19:9d:92:
13:b1:e3:16:7a:cb:03:ad:5c:fd:88:cc:20:43:b3:e6:34:95:
d7:fb:b9:9c:46:a8:af:1b:bd:2d:c5:8d:64:b7:ae:be:95:96:
13:19:a6:a7:e7:b2:59:43:3c:01:eb:70:28:71:f5:3c:54:17:
5b:d3:8b:a9:bf:86:3a:1b:07:d9:c0:70:90:93:d9:63:de:dc:
d5:24:c1:de:d0:68:f7:df:f9:e9:3c:c5:bc:af:f0:d4:92:71:
4f:a0:cf:3d:d7:a2:67:19:16:80:72:be:87:c8:0a:96:98:e5:
3a:e9:f6:fd:14:fa:ef:7e:1b:c4:cf:f2:b6:48:cf:24:68:0c:
d0:e1:bb:3a:b2:9f:66:0b:21:23:31:84:28:42:3a:03:11:65:
bf:c5:2b:90:64:39:2a:cb:4b:33:48:44:dc:b2:86:9b:7e:4b:
ae:8c:56:9c:bc:9e:a2:2f:65:8a:86:b8:2f:87:e5:fc:a3:32:
2b:16:ea:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:30:07 2026 by rpki-client