Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/ZFi-VF-nsRadbtFze21Z8_HjAMk.roa
File: ZFi-VF-nsRadbtFze21Z8_HjAMk.roa (raw, json)
Hash identifier: Yk/ofossI179okCkrA1xAfMSkH76UYS/s2OiRTVcCg8=
Subject key identifier: 64:58:BE:54:5F:A7:B1:16:9D:6E:D1:73:7B:6D:59:F3:F1:E3:00:C9
Certificate issuer: /CN=4b4839f5f19dbd5f070b21332b51db9600ecff1e
Certificate serial: 019F236941E2384D60E1C05CC5FAB6609F73
Authority key identifier: 4B:48:39:F5:F1:9D:BD:5F:07:0B:21:33:2B:51:DB:96:00:EC:FF:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0g59fGdvV8HCyEzK1HblgDs_x4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/ZFi-VF-nsRadbtFze21Z8_HjAMk.roa
Signing time: Thu 02 Jul 2026 15:18:48 +0000
ROA not before: Thu 02 Jul 2026 15:18:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7029
IP address blocks: 193.176.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/S0g59fGdvV8HCyEzK1HblgDs_x4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/S0g59fGdvV8HCyEzK1HblgDs_x4.mft
rsync://rpki.ripe.net/repository/DEFAULT/S0g59fGdvV8HCyEzK1HblgDs_x4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 15:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:41:e2:38:4d:60:e1:c0:5c:c5:fa:b6:60:9f:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b4839f5f19dbd5f070b21332b51db9600ecff1e
Validity
Not Before: Jul 2 15:18:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6458be545fa7b1169d6ed1737b6d59f3f1e300c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c8:29:11:93:5b:3c:7b:e9:ef:a2:48:ea:b3:
95:c1:4c:9e:f5:a0:76:95:69:af:9e:ff:2e:36:93:
b7:4c:d5:c1:bd:69:2a:7f:e2:36:7b:67:80:88:cd:
6d:c3:95:0b:47:dc:82:68:f1:c2:99:3d:20:54:5c:
0d:0c:9a:d9:e0:c2:ea:41:8e:d9:33:a1:59:15:a8:
44:00:27:93:34:5c:81:2e:84:80:64:00:6a:57:de:
b6:0d:f2:32:d2:ed:5c:1a:2e:fc:90:9e:b2:7a:d5:
68:36:7c:df:c7:77:35:49:15:ed:34:cf:89:e9:15:
34:7d:08:7d:0c:54:93:a5:fa:79:8c:40:ae:8d:05:
37:9b:5c:e6:08:0f:1f:82:f7:4a:d6:e1:91:82:3b:
f2:22:ed:8d:dd:4f:0a:18:06:5d:0a:d1:9c:9a:eb:
a1:3c:63:a0:93:8e:c3:0d:3a:66:50:fb:d0:08:c7:
e9:f1:d1:81:b3:c7:1d:96:21:d1:55:b0:ff:a9:ae:
c5:d2:25:fd:2c:0c:26:5c:c9:5b:f2:0a:14:0e:ca:
97:d4:41:dd:19:94:8e:30:54:89:24:af:f9:cf:63:
6b:97:e7:8b:a4:5b:27:44:fd:6a:09:2c:c2:7b:d9:
04:a0:df:6b:9e:e4:6d:5b:41:5d:47:61:71:4f:4a:
bf:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:58:BE:54:5F:A7:B1:16:9D:6E:D1:73:7B:6D:59:F3:F1:E3:00:C9
X509v3 Authority Key Identifier:
keyid:4B:48:39:F5:F1:9D:BD:5F:07:0B:21:33:2B:51:DB:96:00:EC:FF:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0g59fGdvV8HCyEzK1HblgDs_x4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/ZFi-VF-nsRadbtFze21Z8_HjAMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/S0g59fGdvV8HCyEzK1HblgDs_x4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.98.0/24
Signature Algorithm: sha256WithRSAEncryption
52:d8:de:1e:76:8f:c1:e9:de:51:b7:95:e3:a9:e0:20:86:bb:
95:ed:ef:07:5f:72:f0:ac:59:58:7d:e0:96:3b:00:ad:97:1f:
06:b5:75:65:d9:d9:7a:bf:d8:e1:21:71:fe:8d:db:26:35:fe:
c3:43:09:ef:f0:23:b3:22:32:79:df:a2:a7:d8:0e:d8:22:8a:
c4:51:e1:2d:04:c7:8a:7f:f7:04:5e:79:3f:60:9a:76:28:6b:
7e:9d:67:f9:52:a2:dc:f5:d7:ef:fe:01:21:de:1a:91:b9:b6:
80:b5:80:0d:1e:ae:5f:3f:ab:32:6d:a5:01:15:23:31:0e:89:
02:e9:ac:67:3d:0c:ad:6e:29:49:ae:94:fc:19:ca:0b:25:ef:
80:ed:d9:a0:35:f9:af:d9:68:26:76:76:3e:e2:a6:80:d4:9d:
6b:a2:fa:6c:85:97:52:16:89:97:14:5a:0a:c1:97:13:be:2a:
38:af:cb:3a:b1:a4:be:22:5c:91:00:09:b5:fb:3f:f7:d7:d0:
dd:75:4a:56:42:af:57:33:5d:43:2c:a7:2c:13:22:78:27:48:
1a:bd:5a:80:ef:5f:fd:ac:94:5b:1e:a3:81:bb:01:14:b0:79:
80:f1:e1:71:d1:41:d6:10:65:ae:77:67:5f:8d:91:2f:20:9d:
2d:8d:58:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:26 2026 by rpki-client