Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/ZoXcuKtk8D9r1V9wsujA-5oWeJw.roa
File: ZoXcuKtk8D9r1V9wsujA-5oWeJw.roa (raw, json)
Hash identifier: Rrsyk9Fefh0NezHcPQDgtP9YoavQmeOYidAReYCDFz0=
Subject key identifier: 66:85:DC:B8:AB:64:F0:3F:6B:D5:5F:70:B2:E8:C0:FB:9A:16:78:9C
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 01A0EBD9306F8BA245D45EA879775167073A
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/ZoXcuKtk8D9r1V9wsujA-5oWeJw.roa
Signing time: Tue 29 Sep 2026 06:27:54 +0000
ROA not before: Tue 29 Sep 2026 06:27:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 132.243.64.0/24 maxlen: 24
212.87.188.0/24 maxlen: 24
212.87.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:d9:30:6f:8b:a2:45:d4:5e:a8:79:77:51:67:07:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Sep 29 06:27:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6685dcb8ab64f03f6bd55f70b2e8c0fb9a16789c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:23:d8:82:d1:e1:f3:54:c9:91:4d:ee:db:fa:
3e:b6:e2:d7:9a:57:ba:a7:f6:08:27:9c:83:0c:51:
89:be:c4:96:97:0a:2e:34:5d:20:55:ff:a1:de:45:
36:70:8b:7d:09:6b:1b:b3:3b:bb:09:4d:fc:ff:8f:
14:43:0b:32:48:f4:65:e1:77:c5:50:17:7c:c4:71:
49:53:05:2d:d9:4b:19:0d:41:54:17:ec:ab:ce:62:
3e:c0:36:16:63:b3:dc:08:bf:7b:6f:b3:d4:b9:d9:
62:0e:2d:9c:42:4c:17:36:df:86:c0:4d:3b:41:ce:
ff:eb:3c:20:e2:b2:dc:2a:bd:83:5f:ef:d6:31:7f:
ee:5a:b9:dc:03:9e:8f:73:c6:1c:ef:99:ce:17:2a:
5c:b9:37:23:c3:b7:3c:59:41:aa:5b:c3:ac:52:ab:
e3:28:b1:b0:44:bf:c2:15:d9:3a:01:d7:a4:2b:54:
39:4d:e3:f1:59:d9:2d:1e:56:85:bc:56:f1:1e:62:
95:43:bb:60:61:66:e9:1d:58:a1:8d:3e:5f:4c:a6:
ae:4d:65:ae:55:56:4d:eb:97:e0:99:b7:6d:6b:db:
54:da:49:9f:50:b2:35:60:34:32:c7:25:5e:a5:59:
37:00:4a:29:f8:67:2b:a4:e0:75:8a:52:00:ae:f4:
50:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:85:DC:B8:AB:64:F0:3F:6B:D5:5F:70:B2:E8:C0:FB:9A:16:78:9C
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/ZoXcuKtk8D9r1V9wsujA-5oWeJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.243.64.0/24
212.87.188.0/23
Signature Algorithm: sha256WithRSAEncryption
96:82:9f:0c:9b:09:1d:bf:f9:4c:e8:f8:33:20:17:31:36:50:
29:66:12:06:4d:0e:d3:22:d5:c7:4c:c8:78:82:66:b3:86:62:
6a:57:27:8b:04:74:ff:b7:58:16:80:22:9f:d0:58:61:3f:cb:
49:b8:8e:15:81:b8:41:9f:df:6d:fc:69:ca:a2:64:47:9b:1d:
bc:1e:b5:92:93:7d:db:49:e4:7c:21:a0:1d:8a:40:4b:7a:ab:
67:dd:91:af:23:86:0c:b0:e0:6d:e1:ca:87:71:3a:83:77:83:
a6:c7:eb:10:73:7b:15:b3:c4:89:c5:b2:9a:14:2b:cc:f3:58:
76:44:36:ab:9c:a6:6b:38:ef:fb:5f:c8:58:6e:0c:8e:8d:20:
fc:47:4f:5a:bc:59:e3:e3:5a:58:c8:1b:f3:10:8c:5e:98:45:
41:4f:3f:44:ac:e5:6b:2e:9a:7c:ba:ad:5d:05:66:b5:27:4c:
92:a1:0c:31:bc:f8:02:9d:a8:1b:28:ec:7e:91:b1:cb:d2:64:
01:65:26:69:bc:f5:81:87:00:65:16:f0:64:74:de:cf:cd:fc:
6d:0a:57:f9:dd:6f:f4:2e:37:72:cb:ed:38:d3:ed:88:e6:3e:
22:7f:7e:15:af:74:f9:2f:c3:7a:7e:79:69:ca:c1:b4:d3:80:
ec:5e:c2:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:58:45 2026 by rpki-client