Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/Z9pkGBfIq0CqIUBOJKEGhRH4JA4.roa
File: Z9pkGBfIq0CqIUBOJKEGhRH4JA4.roa (raw, json)
Hash identifier: XDu++kDADUCGxfVwjhBuKaC+2gosxJl1lq6IYp2iki4=
Subject key identifier: 67:DA:64:18:17:C8:AB:40:AA:21:40:4E:24:A1:06:85:11:F8:24:0E
Certificate issuer: /CN=4fd642102ebdd7f2268c14c27e3ebbf26b4cafeb
Certificate serial: 01A0682A56EA30141208AE68C89FD65BA0B2
Authority key identifier: 4F:D6:42:10:2E:BD:D7:F2:26:8C:14:C2:7E:3E:BB:F2:6B:4C:AF:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/Z9pkGBfIq0CqIUBOJKEGhRH4JA4.roa
Signing time: Thu 03 Sep 2026 16:46:40 +0000
ROA not before: Thu 03 Sep 2026 16:46:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218799
IP address blocks: 178.214.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:68:2a:56:ea:30:14:12:08:ae:68:c8:9f:d6:5b:a0:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd642102ebdd7f2268c14c27e3ebbf26b4cafeb
Validity
Not Before: Sep 3 16:46:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=67da641817c8ab40aa21404e24a1068511f8240e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:13:d8:8c:b3:e8:4f:7d:7a:19:26:de:00:9d:
99:25:1f:80:df:df:a1:b1:19:55:7a:b1:16:93:46:
3c:91:68:f4:c4:a1:ac:ee:a6:fc:9e:52:29:0d:19:
7b:19:d0:99:88:e5:38:c0:96:e3:1f:67:5e:3b:1d:
36:43:17:e8:da:fb:06:05:1d:32:be:f5:92:88:fc:
6f:a4:45:ff:4d:35:40:bf:1b:9e:4e:1f:f0:34:95:
84:73:1c:ff:da:45:1b:3b:b6:a3:6a:61:de:dd:fd:
85:5e:e4:11:9f:b4:c4:c6:c4:7f:1e:55:09:d3:11:
06:1e:d9:94:fa:6e:f7:06:79:dc:d1:9f:40:0c:bb:
2e:1c:71:e4:42:92:3b:2b:e1:67:1a:6f:64:d0:c9:
77:63:a5:3a:dd:60:ef:4d:9f:7e:56:48:6f:73:c3:
7a:16:84:01:ac:d5:0a:99:2e:33:17:33:2a:d3:80:
2b:e3:75:ee:7a:7e:17:3b:5e:96:09:33:e7:40:ef:
91:77:96:ba:67:cc:7d:52:f6:a6:b1:26:6b:6d:00:
51:15:c0:d8:36:48:c7:b5:fe:9e:57:7a:e0:84:ee:
86:db:51:56:26:1f:e3:48:88:ef:4c:9b:37:7e:ef:
7f:dc:e9:b7:b1:af:71:19:80:ec:fd:6c:4c:09:75:
ca:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:DA:64:18:17:C8:AB:40:AA:21:40:4E:24:A1:06:85:11:F8:24:0E
X509v3 Authority Key Identifier:
keyid:4F:D6:42:10:2E:BD:D7:F2:26:8C:14:C2:7E:3E:BB:F2:6B:4C:AF:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/Z9pkGBfIq0CqIUBOJKEGhRH4JA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.214.108.0/24
Signature Algorithm: sha256WithRSAEncryption
54:a9:17:59:a5:a8:29:1f:27:51:f2:f3:25:04:d4:cb:83:e1:
cd:19:81:26:e6:4a:97:98:61:58:a7:9d:4d:b8:52:d6:3e:d6:
38:51:7f:69:b3:94:a4:5d:33:3c:02:03:5b:2c:10:1b:a8:d0:
63:af:67:32:e1:e4:81:57:43:45:96:ff:9a:2a:89:8d:10:23:
7d:91:68:41:76:8b:69:b6:5c:50:71:21:d9:2c:dd:8d:96:3e:
7b:40:17:72:d1:85:72:af:2c:12:a7:24:4d:e2:d6:fd:31:1d:
7b:d0:2c:96:9a:cd:56:df:92:1f:38:1a:d1:6b:7c:be:df:46:
bb:27:45:d7:af:40:78:11:7f:a1:7c:80:d7:a8:b4:2f:5b:42:
23:1d:10:ee:d0:db:f6:2d:55:9d:8a:27:32:6f:37:94:ee:be:
6a:62:ae:55:6e:be:f5:18:68:78:41:50:88:0c:a0:fb:23:0a:
89:ef:0c:13:bc:2b:47:af:97:40:f8:86:64:c9:c5:27:e1:11:
f0:92:13:14:40:9c:81:32:03:5c:ab:24:e5:08:83:57:04:01:
26:b2:9f:29:12:24:08:4c:5d:ce:1a:e7:71:07:ea:89:58:0e:
25:2c:36:23:40:07:a0:cd:63:2d:d6:33:d3:99:73:78:a2:a7:
4a:ef:23:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 05:11:24 2026 by rpki-client