Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/zILJKV1IsXSC47WdhOc7CpluQLY.roa
File: zILJKV1IsXSC47WdhOc7CpluQLY.roa (raw, json)
Hash identifier: lppo+Yc/xItX+c/90xNzUTb2EgUf6e7EkTuZHJ466W8=
Subject key identifier: CC:82:C9:29:5D:48:B1:74:82:E3:B5:9D:84:E7:3B:0A:99:6E:40:B6
Certificate issuer: /CN=172537601a31697404922d957e74450f5a9cbe73
Certificate serial: 01A0332D335AC5520930ADB2F4D77162A08F
Authority key identifier: 17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/zILJKV1IsXSC47WdhOc7CpluQLY.roa
Signing time: Mon 24 Aug 2026 09:49:55 +0000
ROA not before: Mon 24 Aug 2026 09:49:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 81.17.160.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:33:2d:33:5a:c5:52:09:30:ad:b2:f4:d7:71:62:a0:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=172537601a31697404922d957e74450f5a9cbe73
Validity
Not Before: Aug 24 09:49:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cc82c9295d48b17482e3b59d84e73b0a996e40b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bd:71:34:5c:d9:97:9c:ad:53:31:c7:1f:7f:
52:cf:c6:7b:11:66:14:16:d4:2c:28:7f:e2:c0:79:
0d:3f:06:6d:f5:85:35:be:65:7b:4c:b0:9c:7b:e9:
f6:24:36:df:f2:67:06:08:d9:9c:16:3d:61:e8:3b:
2f:43:ac:96:7e:27:54:16:7f:d4:cc:44:1f:52:8b:
bc:5b:6d:52:04:52:29:0b:e1:c9:4c:1f:5f:6d:ca:
c6:be:2f:b0:4c:c2:3b:71:be:8d:b5:20:d4:c1:40:
0e:62:05:60:7a:71:9c:2a:2b:aa:7d:82:12:1a:26:
16:1e:e7:70:75:6d:91:76:f8:ca:31:d1:4a:92:d5:
ae:0f:21:e5:1f:5a:69:c8:fd:27:c6:0e:28:24:9f:
f1:51:f3:4b:00:f4:7e:77:67:e2:b0:f0:a8:e3:b7:
2f:be:33:f8:f8:a7:8b:13:b7:71:a1:e3:4e:44:9f:
5c:87:ca:18:56:fb:c3:ab:0b:55:46:d1:6c:b9:44:
94:02:d8:c2:ea:39:45:44:44:4c:85:15:0c:af:0f:
9c:c8:5a:da:66:86:a9:79:83:83:8e:c3:4c:fb:3c:
87:4f:62:8c:98:5c:b4:4e:b7:70:1a:69:4f:ca:2d:
05:11:94:bb:47:0b:d3:18:ae:4c:21:37:50:59:f7:
6b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:82:C9:29:5D:48:B1:74:82:E3:B5:9D:84:E7:3B:0A:99:6E:40:B6
X509v3 Authority Key Identifier:
keyid:17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/zILJKV1IsXSC47WdhOc7CpluQLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.17.160.0/21
Signature Algorithm: sha256WithRSAEncryption
6c:c9:8a:4b:c7:8d:90:bc:db:c0:ac:2c:9d:d1:c3:20:0d:77:
d5:ee:2f:fa:42:7e:fd:f1:a7:86:73:99:e2:a7:38:de:d7:29:
ee:77:5c:ce:9e:37:86:08:35:99:d1:0c:23:0e:8a:07:c4:5e:
83:1b:b8:79:d6:28:a6:81:ec:89:0a:d6:b8:9c:4d:9c:85:ca:
47:3f:e1:51:9f:4f:8c:5d:fb:4d:98:4a:7e:02:99:58:0c:c3:
93:fa:95:66:77:31:18:a2:e7:48:04:d8:76:b3:cf:27:3f:81:
7f:b3:55:2b:2e:0b:eb:0a:06:fa:a9:41:24:b1:3e:fc:02:31:
f6:e3:73:38:6d:9f:0d:7c:3a:58:2d:11:24:e0:d5:6e:4c:7d:
d2:e1:e8:b9:5e:d7:77:c3:46:da:4d:49:7b:83:0f:a1:7f:c7:
31:bb:d2:3b:f7:98:3e:7c:f0:3a:10:ee:3a:ec:20:be:8a:00:
c3:33:08:31:d3:3f:7a:8c:4c:90:62:5a:85:1c:6c:b2:84:86:
92:d9:67:16:7f:1b:0e:f2:65:fc:26:58:4d:58:95:c7:47:5b:
45:b5:2d:d8:08:06:91:da:65:1b:8b:3f:e7:03:3d:08:13:ac:
02:bc:26:71:3f:b2:1b:2d:95:81:9c:6d:c0:53:36:ee:73:f3:
a7:d5:63:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:42:30 2026 by rpki-client