Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZN9ApOQcaHLh1svxcHtYjIia8kE.roa
File: ZN9ApOQcaHLh1svxcHtYjIia8kE.roa (raw, json)
Hash identifier: gpP3OVLVXEjQAyx/ubR2IQ159VwQmC5dS71VjRyfsl8=
Subject key identifier: 64:DF:40:A4:E4:1C:68:72:E1:D6:CB:F1:70:7B:58:8C:88:9A:F2:41
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F236925311B7EF98764C38EF417A5E2B2
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZN9ApOQcaHLh1svxcHtYjIia8kE.roa
Signing time: Thu 02 Jul 2026 15:18:41 +0000
ROA not before: Thu 02 Jul 2026 15:18:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 89.213.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:25:31:1b:7e:f9:87:64:c3:8e:f4:17:a5:e2:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=64df40a4e41c6872e1d6cbf1707b588c889af241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:14:e6:13:6f:b6:7e:21:10:6a:8c:75:47:32:
3a:d3:1b:80:23:23:2d:9b:18:95:71:16:cf:96:c0:
e4:81:c8:96:53:c9:d7:3d:01:67:91:88:eb:7a:d6:
fd:dc:2b:1a:c2:be:86:e5:3e:de:40:b3:ce:77:01:
3a:b3:b7:90:a7:45:2f:97:85:e8:45:02:4b:2e:7d:
14:33:db:57:b8:39:56:ff:73:8f:78:2c:3b:4a:15:
57:7a:39:8d:bf:ab:3e:a3:00:18:71:9a:a5:7c:ff:
fb:27:88:8f:29:e4:5f:03:d9:ab:c2:a1:23:e7:53:
19:96:9c:9d:21:0b:a7:55:98:a0:3f:8a:3d:57:aa:
02:fb:53:56:10:a8:57:24:89:35:fe:cd:39:f9:b7:
07:73:e0:a4:5f:35:6a:ee:c8:da:8d:86:fa:24:0b:
ec:8a:46:a2:3b:06:36:b1:7a:f5:64:94:a0:cb:f5:
d0:52:6f:1c:63:35:a3:3b:e2:94:3c:af:58:12:f0:
3b:05:44:41:c6:a3:e3:3b:96:f3:d1:16:e3:45:ac:
fa:35:7f:a4:36:1d:0d:f8:4b:04:26:79:e4:5a:0c:
85:59:e6:d9:0e:b3:6c:f5:44:d1:5f:08:3f:c3:bc:
f1:72:ad:c8:d1:61:3c:7a:16:3a:97:84:ae:57:70:
3d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:DF:40:A4:E4:1C:68:72:E1:D6:CB:F1:70:7B:58:8C:88:9A:F2:41
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZN9ApOQcaHLh1svxcHtYjIia8kE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.2.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:65:24:7c:2a:f9:90:29:5c:73:5b:23:b9:09:c3:ff:7f:66:
b9:c9:75:a5:5d:39:8f:9c:fd:81:4f:e5:8b:4f:06:a9:80:22:
88:7c:98:26:cc:fb:93:fb:f2:df:a1:82:e0:09:95:cc:c6:e0:
c8:74:17:26:2d:b4:4b:70:5b:9c:12:96:50:6c:73:f5:1c:6d:
9e:1f:5e:34:49:54:0c:f1:a4:0e:57:cf:c1:76:1d:89:82:a7:
f1:e9:27:a7:0b:62:4d:01:3e:4d:f1:0a:42:4d:ce:10:bf:7c:
93:e3:a2:98:17:94:69:02:ec:88:da:b4:5b:a6:7a:a7:b7:d8:
3b:c8:86:2e:8e:68:c0:c9:a5:40:21:14:0c:ef:63:30:59:27:
ed:48:c6:e6:04:56:b7:09:d5:22:29:ec:97:6c:1e:9e:86:0c:
dd:8e:f9:9f:71:1b:b4:d3:4e:c2:b7:73:1c:08:d1:a3:84:4c:
68:c3:a5:d8:f9:f2:a1:8d:37:4c:7d:87:3a:17:ff:4d:5e:4a:
39:df:c0:6c:6c:66:83:c3:fb:6b:ad:eb:42:30:d0:31:2e:2e:
da:99:f7:f6:7f:fb:d6:de:c9:cd:44:18:97:f7:a8:3f:b1:16:
46:f1:f7:cd:3f:d2:b2:c1:9a:8d:90:24:4a:69:64:ad:ed:27:
43:f9:73:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:20:47 2026 by rpki-client