Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/RzhXZNN80rbDceIr7GWMP1BL2T4.roa
File: RzhXZNN80rbDceIr7GWMP1BL2T4.roa (raw, json)
Hash identifier: XrAtOSS0kHYUbkxivUkP6A6DFY2BAUY1cH3y1xyfGzs=
Subject key identifier: 47:38:57:64:D3:7C:D2:B6:C3:71:E2:2B:EC:65:8C:3F:50:4B:D9:3E
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 019FAE973A836AAAECF22017B62068CAE83A
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/RzhXZNN80rbDceIr7GWMP1BL2T4.roa
Signing time: Wed 29 Jul 2026 15:56:14 +0000
ROA not before: Wed 29 Jul 2026 15:56:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25831
IP address blocks: 9.237.32.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:97:3a:83:6a:aa:ec:f2:20:17:b6:20:68:ca:e8:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Jul 29 15:56:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=47385764d37cd2b6c371e22bec658c3f504bd93e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0a:69:cb:71:a8:bc:a3:51:49:5f:68:6d:8b:
27:09:58:67:42:08:6b:15:ba:db:1e:c9:3f:99:40:
d5:d1:1e:48:0d:6e:9d:7a:58:25:6b:bc:6a:19:a3:
6b:a6:ec:cd:7a:d7:b5:46:ff:ab:c7:b0:d6:8c:b0:
d8:1e:c9:79:c4:43:d7:6d:9b:10:75:29:25:a1:fc:
2e:9f:ab:af:c4:0c:14:f9:d4:7f:1c:ab:8b:ae:7c:
f9:d0:1a:9b:7d:4e:ed:ab:a4:6a:ab:56:dd:bb:f5:
fa:9c:65:7b:18:04:6d:bb:51:f9:46:f6:f8:66:35:
3c:ad:82:da:8a:75:16:06:90:c4:97:bf:55:2f:c6:
ed:e0:46:9d:44:66:98:f1:e3:b1:87:de:87:01:0d:
fb:27:ab:db:a6:a3:fb:4c:43:46:f2:13:14:44:bb:
90:d8:ce:e3:a4:f3:12:ae:34:b4:bf:13:90:7d:6a:
d4:ec:9c:2c:6f:f5:0b:4d:13:12:22:7a:6b:60:8a:
c4:1c:9a:0b:12:a8:42:72:36:53:58:20:7d:cd:b7:
79:2f:13:f1:ec:c3:bb:cc:b8:02:54:c5:16:94:0e:
68:9d:1d:1b:0f:ee:83:c2:9f:b7:20:05:43:71:d2:
ac:5d:e7:bd:eb:97:eb:88:c5:b9:51:35:d3:db:91:
06:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:38:57:64:D3:7C:D2:B6:C3:71:E2:2B:EC:65:8C:3F:50:4B:D9:3E
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/RzhXZNN80rbDceIr7GWMP1BL2T4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.237.32.0/20
Signature Algorithm: sha256WithRSAEncryption
50:2f:2c:2f:ab:52:16:91:14:10:00:ab:7f:48:cf:18:94:8e:
5f:31:b0:0f:68:29:6f:00:51:51:6a:93:4a:b3:ad:a2:40:c7:
bc:ac:c5:9d:4b:18:1b:b3:e4:a4:7c:ee:48:cf:6b:b2:fe:ac:
fe:95:79:ef:fc:b5:c2:d6:ab:f4:c5:da:b3:45:e4:a2:24:9a:
96:6c:e6:26:f1:18:66:82:04:0a:75:be:8a:86:55:2f:a2:28:
b4:a3:e5:ce:3d:7a:9a:24:1c:9f:f9:d0:ba:4b:bc:0c:59:f4:
8d:2d:7d:9d:8f:26:0d:d0:dd:23:e8:4a:af:61:3a:70:3a:1f:
0d:87:d2:f2:f0:63:60:bc:8b:5e:4b:a7:80:49:c8:af:c1:81:
d5:d8:ef:cf:63:b8:42:32:e6:87:f6:8b:83:65:c0:40:94:06:
21:4b:94:ff:8e:bb:fe:87:14:9d:75:34:c7:d4:3d:15:b5:b2:
cf:b8:ba:03:7c:28:5b:fe:71:ac:3a:ac:a5:78:9a:9d:3f:59:
06:d3:03:b8:b6:04:d5:e6:9e:40:ed:fb:48:56:43:85:06:6a:
7a:21:1c:f4:fb:9e:86:2b:ff:eb:72:e0:26:60:bc:1c:fe:5d:
bf:da:9d:4e:de:bb:f6:a6:e7:35:db:e4:11:b8:f6:61:34:24:
1a:58:5d:22
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+ulzqDaqrs8iAXtiBoyug6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0M2U0NDdlZGI4YTVlMGUxYjFkN2Y1Y2RjMjg3YzM2NGE1
ZmIwYjUwHhcNMjYwNzI5MTU1NjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzM4NTc2NGQzN2NkMmI2YzM3MWUyMmJlYzY1OGMzZjUwNGJkOTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowppy3GovKNRSV9obYsnCVhnQghr
FbrbHsk/mUDV0R5IDW6delgla7xqGaNrpuzNete1Rv+rx7DWjLDYHsl5xEPXbZsQ
dSklofwun6uvxAwU+dR/HKuLrnz50BqbfU7tq6Rqq1bdu/X6nGV7GARtu1H5Rvb4
ZjU8rYLainUWBpDEl79VL8bt4EadRGaY8eOxh96HAQ37J6vbpqP7TENG8hMURLuQ
2M7jpPMSrjS0vxOQfWrU7Jwsb/ULTRMSInprYIrEHJoLEqhCcjZTWCB9zbd5LxPx
7MO7zLgCVMUWlA5onR0bD+6Dwp+3IAVDcdKsXee965friMW5UTXT25EGCQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEc4V2TTfNK2w3HiK+xljD9QS9k+MB8GA1UdIwQY
MBaAFHQ+RH7bil4OGx1/XNwofDZKX7C1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDct
NWUwZjRhYjgwOWJiLzEvUnpoWFpOTjgwcmJEY2VJcjdHV01QMUJMMlQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDctNWUwZjRhYjgwOWJi
LzEvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQECe0gMA0G
CSqGSIb3DQEBCwUAA4IBAQBQLywvq1IWkRQQAKt/SM8YlI5fMbAPaClvAFFRapNK
s62iQMe8rMWdSxgbs+SkfO5Iz2uy/qz+lXnv/LXC1qv0xdqzReSiJJqWbOYm8Rhm
ggQKdb6KhlUvoii0o+XOPXqaJByf+dC6S7wMWfSNLX2djyYN0N0j6EqvYTpwOh8N
h9Ly8GNgvIteS6eAScivwYHV2O/PY7hCMuaH9ouDZcBAlAYhS5T/jrv+hxSddTTH
1D0VtbLPuLoDfChb/nGsOqyleJqdP1kG0wO4tgTV5p5A7ftIVkOFBmp6IRz0+56G
K//rcuAmYLwc/l2/2p1O3rv2puc12+QRuPZhNCQaWF0i
-----END CERTIFICATE-----
Generated at Thu Jul 30 08:09:18 2026 by rpki-client