Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/ZX7UqmpLWLaXZLHD_MHGYcq7tkw.roa
File: ZX7UqmpLWLaXZLHD_MHGYcq7tkw.roa (raw, json)
Hash identifier: lqjZMySa9xhu39DtKLF68f4mxjxAFpfXuyRlMIxaWIo=
Subject key identifier: 65:7E:D4:AA:6A:4B:58:B6:97:64:B1:C3:FC:C1:C6:61:CA:BB:B6:4C
Certificate issuer: /CN=90dd97e4fdfdcf3b4f1a9f761ecd85b368627e8c
Certificate serial: 019F2368A6B5EB85B626B8D604AC69659DC2
Authority key identifier: 90:DD:97:E4:FD:FD:CF:3B:4F:1A:9F:76:1E:CD:85:B3:68:62:7E:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kN2X5P39zztPGp92Hs2Fs2hifow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/ZX7UqmpLWLaXZLHD_MHGYcq7tkw.roa
Signing time: Thu 02 Jul 2026 15:18:08 +0000
ROA not before: Thu 02 Jul 2026 15:18:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43268
IP address blocks: 194.62.108.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/kN2X5P39zztPGp92Hs2Fs2hifow.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/kN2X5P39zztPGp92Hs2Fs2hifow.mft
rsync://rpki.ripe.net/repository/DEFAULT/kN2X5P39zztPGp92Hs2Fs2hifow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:a6:b5:eb:85:b6:26:b8:d6:04:ac:69:65:9d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dd97e4fdfdcf3b4f1a9f761ecd85b368627e8c
Validity
Not Before: Jul 2 15:18:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=657ed4aa6a4b58b69764b1c3fcc1c661cabbb64c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3c:f8:a4:4f:a1:5b:38:09:64:08:35:a0:be:
d4:1f:82:ac:59:1b:eb:2d:4c:dc:89:0f:4a:c6:3e:
9b:b1:79:b3:6b:c4:20:e2:da:e1:83:1d:75:e6:3c:
d8:4e:00:4b:9b:d3:25:d3:93:cf:e6:8e:f6:0c:0d:
8f:7c:d1:bc:ae:9a:b8:c8:07:1b:0e:88:c4:6d:67:
5a:fa:cf:a9:06:bb:2c:c1:c1:38:c8:e2:96:f3:34:
61:32:7f:27:c1:5d:b4:6d:8b:e2:07:95:7a:2f:fe:
ee:32:71:51:8e:16:75:ea:cf:95:ac:a5:44:53:6c:
fe:5e:04:cb:5e:89:30:04:74:e8:75:5f:ee:dd:fa:
2f:d9:ab:fc:8b:5f:4f:10:3b:87:a6:74:ed:db:13:
39:fe:6a:c2:f4:bb:ac:80:2c:18:90:d2:a0:44:85:
e0:47:5d:69:6a:9c:09:42:de:21:32:01:41:61:2e:
3c:7f:c2:41:cd:23:63:05:c9:e7:dd:e3:fb:0d:cf:
17:18:2e:e9:fd:02:04:2b:59:5c:3c:0f:b7:6b:06:
4f:d7:ac:6b:3a:cf:af:8e:7b:9c:72:36:42:b9:6c:
22:b8:99:d0:51:9c:d6:52:56:00:8a:8d:fe:f9:b2:
f2:fc:5c:f3:8f:e4:2f:2f:e3:cb:4a:3c:f9:30:39:
13:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:7E:D4:AA:6A:4B:58:B6:97:64:B1:C3:FC:C1:C6:61:CA:BB:B6:4C
X509v3 Authority Key Identifier:
keyid:90:DD:97:E4:FD:FD:CF:3B:4F:1A:9F:76:1E:CD:85:B3:68:62:7E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kN2X5P39zztPGp92Hs2Fs2hifow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/ZX7UqmpLWLaXZLHD_MHGYcq7tkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/kN2X5P39zztPGp92Hs2Fs2hifow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.108.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:75:f8:a8:c9:04:41:61:bc:c1:f6:5b:cb:c1:e1:e2:63:c7:
03:4d:dc:f7:59:e1:d0:9a:82:26:07:08:31:ee:7a:58:8a:e3:
b9:4a:7c:b0:20:16:fa:26:2a:9d:ba:d9:cf:f2:d9:5f:4f:5f:
b5:16:c4:2b:cb:35:3c:73:df:76:06:e9:9a:e6:f3:11:6b:86:
f9:9d:1b:95:c8:c8:ee:de:48:82:ad:e6:d5:62:be:51:17:7e:
b1:e5:3d:b3:20:59:d5:56:75:71:67:de:1e:47:3d:50:03:91:
84:14:b6:65:7c:e7:bb:83:26:36:0b:6b:9e:86:0e:76:0b:f9:
8e:a2:b9:07:fd:d6:38:c2:99:40:eb:17:09:d6:17:5d:44:32:
b0:1d:11:5b:94:10:5f:bf:bf:9b:1f:70:b1:8e:62:4e:f8:b1:
e4:13:67:c9:3e:64:6f:20:82:d7:f4:f2:99:a7:0f:7e:77:a7:
4b:87:04:d0:3b:91:35:79:7a:30:89:1c:48:8d:ab:45:48:ec:
0e:11:ba:8e:39:b4:4d:ab:ff:9d:78:6a:20:2a:d0:34:d9:39:
8c:d2:de:2d:44:6e:80:cc:15:05:81:ae:7e:83:95:14:4a:ac:
bb:d0:8b:9e:77:25:27:95:d9:c8:20:cf:65:0b:39:0f:f9:7d:
f1:bb:24:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:27:42 2026 by rpki-client