Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/z4hVox_1YMjCdj0pv1ovoZhsMIM.roa
File: z4hVox_1YMjCdj0pv1ovoZhsMIM.roa (raw, json)
Hash identifier: 3WvqYw5JMN4YjvZ1NiX0P+kYI8s3F0qbFTABgvWybUo=
Subject key identifier: CF:88:55:A3:1F:F5:60:C8:C2:76:3D:29:BF:5A:2F:A1:98:6C:30:83
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 019E99FB6B4416B81E792DD8EB279C9770CE
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/z4hVox_1YMjCdj0pv1ovoZhsMIM.roa
Signing time: Fri 05 Jun 2026 22:50:51 +0000
ROA not before: Fri 05 Jun 2026 22:50:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 9.151.32.0/20 maxlen: 20
9.151.224.0/21 maxlen: 21
9.232.64.0/21 maxlen: 21
9.237.80.0/20 maxlen: 20
9.249.48.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:99:fb:6b:44:16:b8:1e:79:2d:d8:eb:27:9c:97:70:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Jun 5 22:50:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf8855a31ff560c8c2763d29bf5a2fa1986c3083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:98:3c:c9:88:6e:a8:4b:25:a1:d8:81:f2:18:
fd:ba:95:ff:12:d1:7f:43:8b:1a:a3:27:5d:2b:0c:
aa:2c:81:c1:ff:7d:35:e8:5d:14:ac:e5:c4:30:10:
d6:39:7d:7c:25:d3:b4:59:95:22:37:40:de:51:ce:
61:3d:a9:2a:e5:ec:be:7b:1d:80:f5:45:d0:08:59:
dc:39:98:83:c4:3b:6b:a5:a5:15:b7:1c:95:c3:31:
11:60:34:79:b0:4c:2b:da:d6:53:c8:41:c0:0e:79:
a9:71:c9:02:95:21:cb:74:8a:a2:e9:87:20:91:24:
1e:75:fa:27:90:d9:49:b2:45:eb:69:77:44:1a:95:
b6:f3:9e:8c:59:c0:b0:06:b2:bf:8f:b2:39:c5:2b:
0c:a3:5f:66:33:5d:ad:7d:b1:3a:8e:7e:13:97:6d:
a1:6d:6c:3c:53:be:69:89:e9:8c:9c:e5:54:b4:90:
de:aa:02:ab:63:32:ef:a6:97:1a:93:b0:16:41:51:
91:d0:06:2a:ed:34:e2:0d:25:44:18:60:d5:9f:cc:
a0:e1:d9:f5:d0:e3:91:ff:b7:63:69:7e:ec:8a:56:
58:31:bf:00:04:6e:19:b4:60:53:5a:95:d6:c7:25:
ed:a6:82:4e:d6:f4:22:0a:91:09:0a:54:47:8a:fb:
4d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:88:55:A3:1F:F5:60:C8:C2:76:3D:29:BF:5A:2F:A1:98:6C:30:83
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/z4hVox_1YMjCdj0pv1ovoZhsMIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.151.32.0/20
9.151.224.0/21
9.232.64.0/21
9.237.80.0/20
9.249.48.0/20
Signature Algorithm: sha256WithRSAEncryption
53:73:23:2e:6b:90:df:07:f8:81:83:93:bd:8c:8d:aa:7a:b5:
73:ff:a4:5c:48:d4:6e:2c:17:7e:1b:19:38:ad:d6:f7:fe:e7:
d3:ad:06:f3:0e:79:3c:77:ea:df:dc:23:59:48:34:58:6f:c1:
6a:ae:d2:89:01:df:64:47:df:8f:b0:39:d7:08:92:c7:bc:64:
b9:ef:b5:f8:09:df:e1:3d:b4:80:1f:b6:ae:d6:59:24:cd:6e:
6d:38:e1:bf:06:20:5e:3e:62:ae:7d:14:12:7e:6f:ab:7f:80:
6e:5c:0f:67:e6:71:56:62:50:46:42:71:38:5d:4a:5b:cf:c8:
83:9b:51:b5:d6:92:73:7f:29:31:fd:12:2b:e1:d5:75:19:e9:
aa:28:4d:b2:1b:c4:34:00:48:6e:11:a1:97:8a:ad:12:a5:f4:
43:71:6d:07:10:19:e1:e5:74:04:99:09:2c:68:4f:af:b4:07:
14:7e:a3:04:3b:1f:d6:b6:1e:ea:d6:c4:88:ec:b3:c7:35:e7:
11:6a:7e:f0:42:17:d0:2b:bd:36:ca:b0:ea:d0:c7:d4:e8:a1:
34:bf:ca:5c:c1:a4:53:94:03:7b:38:93:c0:96:42:48:91:dd:
8e:ac:12:c8:15:94:e8:7b:06:0f:b3:68:43:ae:44:9e:07:74:
eb:0d:df:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:17:08 2026 by rpki-client