Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZZjTp0YDxbopYKcXXgmsH-PWjWM.roa
File: ZZjTp0YDxbopYKcXXgmsH-PWjWM.roa (raw, json)
Hash identifier: rAxvzU0VZMcD2n7q0UOpts2C31PRqHserkcdqpEV3e8=
Subject key identifier: 65:98:D3:A7:46:03:C5:BA:29:60:A7:17:5E:09:AC:1F:E3:D6:8D:63
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368EF022BB3A17F188FEC9AAA1DA3D9
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZZjTp0YDxbopYKcXXgmsH-PWjWM.roa
Signing time: Thu 02 Jul 2026 15:18:27 +0000
ROA not before: Thu 02 Jul 2026 15:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210538
IP address blocks: 82.153.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ef:02:2b:b3:a1:7f:18:8f:ec:9a:aa:1d:a3:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6598d3a74603c5ba2960a7175e09ac1fe3d68d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:eb:a9:bb:62:26:a9:a1:46:8f:cd:39:77:ed:
3c:f9:f6:e2:81:bc:76:fe:94:26:2a:af:16:33:65:
04:5b:e6:26:6b:0a:55:25:95:50:81:8a:32:d5:b5:
20:a9:d1:41:c1:a5:bd:cd:9e:1a:b9:c6:eb:de:6d:
4d:40:9d:9b:16:a0:1d:83:ad:0c:05:aa:a5:15:f8:
67:5a:ca:26:c8:90:50:7f:7a:8f:79:41:72:f7:2f:
b7:f0:a4:1b:02:9e:63:1d:cb:d4:3a:1f:75:29:24:
ef:f1:14:9f:d8:cc:78:a2:98:af:b1:fe:48:3a:63:
66:c1:d6:e1:54:17:b5:a7:be:4d:23:e3:df:59:72:
f5:cc:33:cb:62:f4:72:bd:4f:e1:8e:37:75:ad:1d:
a8:53:b6:bd:74:99:04:86:77:0f:64:f0:48:5e:fe:
ee:46:49:d6:34:c9:7e:45:13:02:63:3f:14:d9:5e:
c5:4b:fc:9f:32:b1:e8:b5:f1:27:df:a2:56:10:d7:
33:c9:e5:4d:37:42:f6:74:b7:52:d9:a3:4c:74:76:
2d:57:98:3a:99:74:f2:f3:f5:81:17:ed:ad:8a:86:
4f:66:4e:9a:51:53:05:3b:15:97:d4:95:8f:e8:10:
d9:65:73:8c:f9:55:50:57:eb:cf:48:b5:44:da:51:
e7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:98:D3:A7:46:03:C5:BA:29:60:A7:17:5E:09:AC:1F:E3:D6:8D:63
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZZjTp0YDxbopYKcXXgmsH-PWjWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.241.0/24
Signature Algorithm: sha256WithRSAEncryption
28:89:58:be:37:56:b1:68:07:4a:05:10:ce:60:94:e8:c8:f1:
33:82:03:a5:1c:e1:24:3b:4c:10:41:be:d2:25:3a:bd:7e:57:
c3:0f:39:33:e8:0c:09:f6:a8:1d:36:c2:bb:cd:6a:08:15:57:
f6:2e:24:81:e5:bd:d5:1e:61:b5:a7:84:21:61:8c:50:05:40:
89:d8:6a:e7:ce:ae:73:c6:df:94:86:bc:14:3a:de:0b:e4:3d:
f1:b2:9a:13:5d:32:2c:92:c9:f7:2f:52:8d:8c:83:2d:97:72:
bc:50:5c:3c:52:c0:fb:53:d2:17:c4:1c:ed:02:59:97:f4:a9:
c0:bd:ee:53:83:38:29:c3:25:ae:f3:9e:92:9c:51:48:13:db:
0c:65:32:ed:49:8e:d7:93:bb:fd:f9:44:7e:7a:63:20:b3:08:
7c:89:60:57:00:bd:33:c3:bf:50:fc:e2:51:20:c1:2c:82:83:
9b:52:b1:0a:4f:4e:05:85:b0:a6:6e:62:7c:43:5d:68:c8:4a:
85:9d:aa:90:54:56:5d:f4:89:2b:31:7e:d3:d1:07:d6:95:8c:
59:bf:77:32:3a:f8:fe:5f:63:e4:cd:13:60:5e:03:40:b0:09:
8e:30:f2:8c:a8:39:14:4e:1f:f4:d1:d0:51:0d:91:a9:dd:6e:
9d:5e:14:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:21:32 2026 by rpki-client