Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/ZHmVRYMixuE63pM1yr6NYsj7c_o.roa
File: ZHmVRYMixuE63pM1yr6NYsj7c_o.roa (raw, json)
Hash identifier: ECWLwgwsUl1kRJa2elFpotrc13sMtMcg9jik4C7yvdw=
Subject key identifier: 64:79:95:45:83:22:C6:E1:3A:DE:93:35:CA:BE:8D:62:C8:FB:73:FA
Certificate issuer: /CN=9baf3f9805072b62a65fbebbe8ff9c7f3dc4c648
Certificate serial: 019F23688F823C50AF0906C852B3FA662A04
Authority key identifier: 9B:AF:3F:98:05:07:2B:62:A6:5F:BE:BB:E8:FF:9C:7F:3D:C4:C6:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/ZHmVRYMixuE63pM1yr6NYsj7c_o.roa
Signing time: Thu 02 Jul 2026 15:18:02 +0000
ROA not before: Thu 02 Jul 2026 15:18:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50053
IP address blocks: 91.205.220.0/24 maxlen: 24
193.56.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 23:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:8f:82:3c:50:af:09:06:c8:52:b3:fa:66:2a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9baf3f9805072b62a65fbebbe8ff9c7f3dc4c648
Validity
Not Before: Jul 2 15:18:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=647995458322c6e13ade9335cabe8d62c8fb73fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7b:6c:5c:ed:33:2b:40:4b:a6:5a:57:c6:e2:
86:6e:b5:59:fc:b8:73:0c:4d:a0:e9:d2:7c:2a:15:
de:d1:8b:c6:1a:c9:83:c7:75:ac:6b:38:23:7b:fe:
97:75:17:f5:71:38:1f:80:4a:f8:80:5c:5d:b4:7e:
1b:15:ed:67:28:da:e0:40:4c:ca:83:e8:67:71:b7:
1d:03:2c:a1:e3:56:6b:fc:03:28:65:90:17:a3:46:
31:51:0f:cd:7a:e3:95:ac:c4:ab:6d:5e:6d:65:f9:
bd:f2:6d:37:34:ed:4e:ba:fa:ba:71:68:69:55:0c:
a6:0b:8c:7d:c3:d3:4e:1d:cf:32:f9:06:11:53:9c:
bc:d0:9a:59:2e:ff:bc:9b:4d:7e:ae:34:18:d4:3a:
cb:09:06:84:2c:4f:7b:1e:82:6a:3b:f7:57:d8:79:
73:6d:53:05:1d:12:5a:a3:48:ef:09:d2:80:eb:b6:
b8:d3:14:49:59:72:6f:b1:90:19:2c:c4:b9:c7:27:
49:79:48:35:ff:f5:93:50:0e:f2:38:87:07:85:87:
53:a4:3c:ea:38:95:40:15:12:4d:68:ce:b8:13:57:
2b:df:3d:2b:e1:54:00:50:e8:de:df:ca:9b:31:19:
4e:8b:c8:72:b0:97:6e:4e:5a:ce:08:e2:4e:d4:e7:
6f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:79:95:45:83:22:C6:E1:3A:DE:93:35:CA:BE:8D:62:C8:FB:73:FA
X509v3 Authority Key Identifier:
keyid:9B:AF:3F:98:05:07:2B:62:A6:5F:BE:BB:E8:FF:9C:7F:3D:C4:C6:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/ZHmVRYMixuE63pM1yr6NYsj7c_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.220.0/24
193.56.3.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:99:32:9c:e4:f0:19:a7:95:d9:3e:9f:cf:d3:33:32:4b:67:
71:4e:e9:72:1b:65:74:7e:46:26:a5:01:57:7d:e0:78:44:cd:
dd:44:e8:65:d5:07:59:95:64:c6:50:84:b0:6e:d5:f8:c4:fe:
a5:e3:6a:96:22:29:1c:92:62:a3:26:59:21:ba:8b:85:70:44:
33:3c:00:49:1d:52:1f:3e:cc:fc:41:f2:a1:d8:2c:c6:13:0c:
77:ef:aa:a0:37:32:4b:f9:72:fc:ed:4d:77:25:50:e9:c2:9b:
a7:9f:8b:91:2e:4d:9a:dc:5b:93:e9:73:07:50:1f:90:fc:68:
3d:cc:cd:4c:b1:6a:3f:d9:f9:3a:5f:e7:b2:6f:24:e5:db:a5:
08:aa:5b:ba:7b:f5:75:d7:03:29:d5:c8:33:cb:25:95:c9:ac:
96:01:11:9d:ab:33:72:f0:39:fd:f1:56:f0:33:58:6a:01:10:
ba:33:d5:ff:f9:25:ae:78:4e:87:83:96:0b:3b:68:b2:10:d3:
16:f1:ce:46:e3:04:a6:6d:d2:7a:eb:aa:d0:e2:b5:14:d2:70:
b2:5e:80:e7:b5:80:f7:fe:5d:b7:bc:78:1d:db:dc:2b:22:ef:
9b:0a:30:4a:fb:1f:c9:73:a7:89:3d:dd:3a:7d:31:50:ec:3d:
8e:a9:16:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 06:54:34 2026 by rpki-client