Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/zdVWA8x7Os7mCMN0eXBm1ttPtdc.roa
File: zdVWA8x7Os7mCMN0eXBm1ttPtdc.roa (raw, json)
Hash identifier: +6pIktdgc4eoF9sOvoW/ifb/Jig+BT9B1Ye47c39Uds=
Subject key identifier: CD:D5:56:03:CC:7B:3A:CE:E6:08:C3:74:79:70:66:D6:DB:4F:B5:D7
Certificate issuer: /CN=99fc8dc2a7c1b9f32ba1957ff492dc0ba4f260ff
Certificate serial: 01A06C7D364667215ACA5DAE58397EF7F852
Authority key identifier: 99:FC:8D:C2:A7:C1:B9:F3:2B:A1:95:7F:F4:92:DC:0B:A4:F2:60:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/zdVWA8x7Os7mCMN0eXBm1ttPtdc.roa
Signing time: Fri 04 Sep 2026 12:55:40 +0000
ROA not before: Fri 04 Sep 2026 12:55:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42926
IP address blocks: 152.114.207.0/24 maxlen: 24
2a05:66c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:7d:36:46:67:21:5a:ca:5d:ae:58:39:7e:f7:f8:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fc8dc2a7c1b9f32ba1957ff492dc0ba4f260ff
Validity
Not Before: Sep 4 12:55:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cdd55603cc7b3acee608c374797066d6db4fb5d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c4:c5:22:37:dc:ee:26:2f:20:1a:c6:ab:f7:
70:64:63:e3:7f:ae:9a:a3:c9:f3:12:61:b9:cc:34:
3a:39:1e:7c:87:fe:ad:6c:cc:f0:21:ea:88:7f:3f:
b5:45:41:ec:f2:35:f8:08:28:67:6f:1a:72:fb:e9:
ce:0c:a2:43:c9:3b:5f:a6:84:c0:ef:19:20:07:07:
7a:aa:64:38:73:8f:0a:64:62:38:e1:da:96:fb:35:
92:55:bf:6e:7d:12:85:21:2d:94:08:4e:b8:7b:3e:
12:b5:57:98:c8:c3:62:80:a8:d0:33:d4:6e:38:67:
af:d5:32:4c:e3:0d:a9:f0:02:3a:86:fb:be:de:e4:
74:13:b7:b7:46:39:8c:ae:12:63:66:3b:ca:78:e4:
bd:94:fd:f9:f5:2c:4b:f2:fb:8c:a9:a6:1b:ba:be:
52:72:b5:96:7d:ea:4b:08:b8:a3:46:df:69:64:7a:
67:80:2a:8a:6b:8e:ef:b4:97:98:a2:49:d4:f6:d6:
3b:86:fb:70:2b:4f:8d:5d:bf:85:51:c7:1e:12:2c:
4a:aa:69:4e:1a:5e:44:0e:32:b9:03:a4:96:ee:4d:
57:40:fd:75:fe:28:79:0c:ed:e5:69:48:f5:4c:77:
fa:9e:9f:0b:30:4f:79:88:ed:46:3f:cc:8d:e0:a9:
5c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D5:56:03:CC:7B:3A:CE:E6:08:C3:74:79:70:66:D6:DB:4F:B5:D7
X509v3 Authority Key Identifier:
keyid:99:FC:8D:C2:A7:C1:B9:F3:2B:A1:95:7F:F4:92:DC:0B:A4:F2:60:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/zdVWA8x7Os7mCMN0eXBm1ttPtdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.114.207.0/24
IPv6:
2a05:66c0::/29
Signature Algorithm: sha256WithRSAEncryption
8a:48:8f:2e:25:78:87:52:94:e9:c7:70:16:4f:79:84:52:7e:
89:58:1d:01:50:8b:eb:0c:95:38:7a:17:97:de:9d:28:2a:90:
af:56:37:d5:7b:3e:09:30:9c:34:7b:1e:5f:1a:24:11:06:68:
89:43:7f:19:51:d0:cc:7c:8d:5e:0e:7c:56:d6:f8:70:f4:cc:
01:37:cf:9b:1e:ed:68:a0:6d:28:3d:5f:93:55:00:95:66:47:
28:98:19:17:bc:0a:2f:25:69:d5:a4:46:08:a7:c4:38:0a:c1:
4b:8b:95:cd:f7:d2:9f:71:0c:a3:ee:63:90:e5:1e:bb:c4:6d:
4a:66:e6:a4:3d:3c:20:12:2a:9d:fb:a4:10:e7:d5:5f:a9:57:
eb:e8:e9:26:58:7d:38:95:ad:9d:05:65:58:1d:26:94:0d:51:
47:16:18:be:8c:c7:0d:43:7c:9e:d9:c1:35:40:5e:62:b0:b0:
06:77:1a:e4:2a:7e:f7:68:4a:46:f5:34:24:ee:61:6f:6f:4d:
98:9f:28:84:64:6a:ab:79:75:5c:c8:af:2e:72:fb:74:b4:0d:
7e:f4:4f:c0:cc:09:e7:1c:c0:55:87:6e:20:91:06:d5:fe:3a:
7e:bb:6d:e6:71:f7:39:e2:b9:59:57:81:ef:a4:e3:60:71:e5:
01:c3:0d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:13:59 2026 by rpki-client