Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/zUkRPCePTnjXP32W6ziaTjtNvVw.roa
File: zUkRPCePTnjXP32W6ziaTjtNvVw.roa (raw, json)
Hash identifier: ei3wpp5GVP0W4BLMBMt/Lh1gWFCco1WGTGn+ev6xgYM=
Subject key identifier: CD:49:11:3C:27:8F:4E:78:D7:3F:7D:96:EB:38:9A:4E:3B:4D:BD:5C
Certificate issuer: /CN=4587a688a89a989949416a819cc4a80dea454c9d
Certificate serial: 01A01E16D3D99718B98AF036F3A327D650F7
Authority key identifier: 45:87:A6:88:A8:9A:98:99:49:41:6A:81:9C:C4:A8:0D:EA:45:4C:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYemiKiamJlJQWqBnMSoDepFTJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/zUkRPCePTnjXP32W6ziaTjtNvVw.roa
Signing time: Thu 20 Aug 2026 07:33:27 +0000
ROA not before: Thu 20 Aug 2026 07:33:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401672
IP address blocks: 37.244.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RYemiKiamJlJQWqBnMSoDepFTJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1e:16:d3:d9:97:18:b9:8a:f0:36:f3:a3:27:d6:50:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4587a688a89a989949416a819cc4a80dea454c9d
Validity
Not Before: Aug 20 07:33:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cd49113c278f4e78d73f7d96eb389a4e3b4dbd5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:04:0d:b4:ca:83:c7:df:8d:7e:d2:c2:2c:f7:
4f:d1:5d:6f:ea:95:33:07:ad:94:04:05:41:10:b5:
f2:a3:32:f9:ec:96:38:2d:99:8d:ca:15:18:94:69:
d3:ff:78:c9:31:1b:01:43:2a:23:16:36:68:26:4a:
21:2b:75:10:a2:34:9d:fd:6c:2f:d5:e2:15:33:eb:
55:47:6f:68:69:47:d5:d3:98:4e:fb:c9:06:a4:5d:
e8:aa:ed:5c:33:da:66:cc:51:60:a2:f9:94:87:dc:
bf:6f:da:3e:64:1b:9b:1f:bf:d8:fa:6f:86:44:52:
bc:cf:a9:7e:d2:31:63:0f:1d:94:8b:2d:9f:7a:3b:
08:db:73:3f:b6:d7:ca:d7:6d:b8:4f:fa:7c:d2:ed:
c6:1b:a9:3b:93:6a:0f:da:95:b5:4b:72:61:bd:51:
64:25:03:2b:52:04:61:8c:a9:04:14:35:52:49:18:
fe:ee:07:fc:89:05:ca:cd:29:42:46:ed:1a:cb:67:
d3:ff:59:b2:07:01:f6:e1:51:62:4f:9e:17:b7:f5:
88:66:cf:3f:58:78:3f:52:60:ea:82:c5:91:82:21:
c9:73:69:32:e7:99:17:9c:ad:39:92:5b:92:5e:bf:
d3:21:4b:71:33:38:a2:42:b3:4c:43:9e:f9:b8:8d:
e9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:49:11:3C:27:8F:4E:78:D7:3F:7D:96:EB:38:9A:4E:3B:4D:BD:5C
X509v3 Authority Key Identifier:
keyid:45:87:A6:88:A8:9A:98:99:49:41:6A:81:9C:C4:A8:0D:EA:45:4C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYemiKiamJlJQWqBnMSoDepFTJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/zUkRPCePTnjXP32W6ziaTjtNvVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.244.88.0/24
Signature Algorithm: sha256WithRSAEncryption
34:2a:5c:c2:71:b6:df:cb:f0:67:b4:1f:57:05:50:78:a1:0a:
ee:e5:73:b6:1f:49:31:8f:2d:2a:1f:f7:1a:23:ab:cd:b3:49:
33:77:a5:2e:7a:86:e7:de:8c:5e:e9:4e:62:4b:59:21:12:a1:
18:05:9d:9c:86:d4:e2:05:f2:b7:14:ae:4c:c4:12:62:19:57:
d9:b5:65:79:83:2e:6b:43:2c:86:5c:63:dc:ee:95:1b:da:4c:
a6:fb:b1:6b:d7:b4:c6:22:fe:ca:21:cc:fc:83:c9:43:6f:c6:
08:c2:97:66:d8:56:ae:66:23:b8:0c:2f:0c:58:a1:21:42:10:
86:e0:a5:72:59:1d:63:57:23:79:dc:98:ca:fa:94:12:f8:aa:
7f:ed:34:03:0e:12:53:aa:8b:db:36:49:fd:c4:14:89:f2:e5:
15:49:16:b2:63:6a:f8:46:f4:5c:1d:4a:07:3e:0d:00:9a:6a:
94:1d:70:c1:66:f2:48:83:0f:8b:ff:3c:58:f5:f1:65:91:5d:
4c:dd:c5:5b:33:ab:c9:21:0b:cb:1c:bf:9a:11:ec:f2:1f:10:
3b:a6:5a:e5:0b:b4:27:0b:1a:20:58:20:4a:46:13:1b:56:58:
a7:78:4a:6b:7e:29:ea:6c:c8:e4:49:e7:a6:1d:5b:dc:c6:d4:
78:64:e4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 16:27:34 2026 by rpki-client