Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/Zvz4ZZe8TirGDr5YK1DXs7yV6ko.roa
File: Zvz4ZZe8TirGDr5YK1DXs7yV6ko.roa (raw, json)
Hash identifier: IZffctFNRu2D4ovNLuJ8QUvA9BXb4VzlfLdGt6txidc=
Subject key identifier: 66:FC:F8:65:97:BC:4E:2A:C6:0E:BE:58:2B:50:D7:B3:BC:95:EA:4A
Certificate issuer: /CN=834544e1a3e228c4d3647f62a9d8c96ace9e2c31
Certificate serial: 019EA611445BB79E2A380FDB3ACE3E94AA3D
Authority key identifier: 83:45:44:E1:A3:E2:28:C4:D3:64:7F:62:A9:D8:C9:6A:CE:9E:2C:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0VE4aPiKMTTZH9iqdjJas6eLDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/Zvz4ZZe8TirGDr5YK1DXs7yV6ko.roa
Signing time: Mon 08 Jun 2026 07:10:09 +0000
ROA not before: Mon 08 Jun 2026 07:10:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205431
IP address blocks: 91.207.74.0/23 maxlen: 23
199.189.248.0/21 maxlen: 21
206.223.240.0/20 maxlen: 20
2a0a:6a40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0VE4aPiKMTTZH9iqdjJas6eLDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a6:11:44:5b:b7:9e:2a:38:0f:db:3a:ce:3e:94:aa:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=834544e1a3e228c4d3647f62a9d8c96ace9e2c31
Validity
Not Before: Jun 8 07:10:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=66fcf86597bc4e2ac60ebe582b50d7b3bc95ea4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:25:fc:a5:bc:ad:9d:5f:2a:ee:2e:66:d8:45:
ee:0d:6f:ff:7d:d5:0f:5c:69:be:11:8d:77:1b:bf:
46:bf:6f:71:f0:a7:1c:0b:2b:75:f3:df:17:32:62:
fe:dc:20:7b:89:08:30:d7:9c:d1:1c:3d:e0:81:98:
dc:67:1b:db:5b:4c:db:ba:11:fe:f3:35:a3:16:ce:
0d:71:d6:07:fc:ca:76:a0:57:44:6a:80:77:84:ee:
46:7c:07:0b:bd:e9:10:4d:5c:94:b0:1e:30:1e:de:
bc:3f:4d:de:e8:42:18:05:fa:ab:ae:a1:e0:5c:45:
a4:a6:f7:44:e3:ba:4d:1c:b0:fe:1b:c9:63:79:d6:
51:cb:23:17:e5:63:1f:a4:79:eb:95:06:48:75:50:
13:35:8f:56:70:46:f8:30:82:6a:f1:32:a3:a8:5b:
ff:12:ed:00:89:b1:40:21:49:77:ab:f9:78:40:d8:
65:c1:4b:67:f5:4b:96:61:7d:5a:9a:76:8f:f2:f9:
b1:dc:01:0d:be:65:f5:ed:ab:77:b3:ed:e4:00:97:
4c:f8:a2:3e:97:ab:d0:11:87:73:f8:3f:53:cf:39:
b7:5b:b5:8c:2e:ac:c5:6b:df:c6:c6:87:ff:c8:49:
58:cb:01:78:ff:ac:39:60:e4:98:96:82:aa:5c:a5:
1a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:FC:F8:65:97:BC:4E:2A:C6:0E:BE:58:2B:50:D7:B3:BC:95:EA:4A
X509v3 Authority Key Identifier:
keyid:83:45:44:E1:A3:E2:28:C4:D3:64:7F:62:A9:D8:C9:6A:CE:9E:2C:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0VE4aPiKMTTZH9iqdjJas6eLDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/Zvz4ZZe8TirGDr5YK1DXs7yV6ko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.74.0/23
199.189.248.0/21
206.223.240.0/20
IPv6:
2a0a:6a40::/32
Signature Algorithm: sha256WithRSAEncryption
45:f1:31:c4:5f:92:f4:1c:63:f8:84:ba:ae:02:5a:8c:d1:12:
06:c3:df:26:0a:26:fc:48:0c:61:3f:ac:62:cc:b1:ae:73:eb:
a2:06:ee:a1:be:a3:8f:65:cb:6c:a7:d7:73:77:b3:ee:57:85:
44:a9:67:4f:a0:2e:a7:27:63:f0:b5:f3:22:6a:4b:6a:fd:db:
56:8c:f2:35:81:3e:08:15:cc:0b:fa:f4:ca:cc:8b:27:53:d0:
cd:87:01:87:0e:70:54:57:a2:43:98:f8:76:47:35:0d:d8:fd:
dc:57:51:46:01:5b:40:d6:29:f9:5d:96:3a:44:1e:42:45:59:
22:63:2e:2c:a5:f7:c6:9c:78:18:40:0d:9b:a2:70:c7:5f:42:
c0:10:e3:11:d8:bc:83:28:04:3e:2a:23:9a:5e:c3:1c:12:0b:
5b:96:b2:a7:6e:6c:56:05:fe:c3:83:f3:14:0c:e9:c2:79:8d:
5c:53:e0:5d:e6:38:64:1e:77:e7:9e:cf:5a:fc:86:a6:4c:76:
b1:64:e6:7b:90:3f:a3:2d:6e:d0:bd:58:09:8b:b2:8e:8e:de:
b3:3b:58:ec:6a:56:05:6d:cc:f5:ad:d0:34:d8:1b:7d:7c:fc:
1c:45:83:c5:9a:6a:79:57:66:64:7c:59:80:06:d1:c3:9b:4b:
53:40:cd:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:39:17 2026 by rpki-client