Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/zaDnFGvlfelI_tMjoTP339vPBGw.roa
File: zaDnFGvlfelI_tMjoTP339vPBGw.roa (raw, json)
Hash identifier: 6zQB6LLudq9lrD59fSKuhQnrVhHCZxEGxEn2HPI44zQ=
Subject key identifier: CD:A0:E7:14:6B:E5:7D:E9:48:FE:D3:23:A1:33:F7:DF:DB:CF:04:6C
Certificate issuer: /CN=4459120809c23bf3033e3f573995276f0c7a2533
Certificate serial: 019F23688770412F7E70484F870D1A6336D5
Authority key identifier: 44:59:12:08:09:C2:3B:F3:03:3E:3F:57:39:95:27:6F:0C:7A:25:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFkSCAnCO_MDPj9XOZUnbwx6JTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/zaDnFGvlfelI_tMjoTP339vPBGw.roa
Signing time: Thu 02 Jul 2026 15:18:00 +0000
ROA not before: Thu 02 Jul 2026 15:18:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1239
IP address blocks: 84.22.148.0/23 maxlen: 23
84.22.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFkSCAnCO_MDPj9XOZUnbwx6JTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:87:70:41:2f:7e:70:48:4f:87:0d:1a:63:36:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459120809c23bf3033e3f573995276f0c7a2533
Validity
Not Before: Jul 2 15:18:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cda0e7146be57de948fed323a133f7dfdbcf046c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a5:0a:08:bf:2b:55:e8:14:7a:50:91:09:bd:
1e:ea:f7:c9:7e:11:fa:c5:f3:6f:42:f4:ab:27:b1:
80:58:21:b6:88:06:25:8f:ec:cf:13:91:c5:8c:53:
b9:a1:59:cd:22:3f:4b:4f:a8:c5:05:59:ac:26:10:
81:86:7f:1b:e5:42:f1:eb:c1:8a:dc:fa:25:57:4e:
38:20:b6:48:73:b9:36:c1:17:1a:27:ec:60:4b:22:
76:0b:de:a7:ac:79:85:20:72:85:d8:3f:a6:0a:5d:
dc:21:b7:6b:07:52:c9:8a:db:44:08:98:44:6e:95:
81:67:c9:83:e4:2c:fd:31:57:8b:9d:9b:ce:0f:71:
36:1a:d7:37:7a:78:be:43:40:5c:6b:a1:a2:a0:4c:
ac:a7:d9:9f:55:78:ed:42:2d:6b:a7:fa:8c:35:e9:
17:6d:06:09:d5:b9:d4:20:96:99:bc:e2:38:3a:ba:
99:92:fb:06:e8:29:3f:01:12:68:ac:90:2f:5d:1c:
66:8f:4f:c6:3f:30:cc:8c:29:88:da:4b:23:45:6d:
db:1d:52:fd:2e:97:99:ec:38:f7:e0:96:39:e5:00:
6a:a6:9e:da:ed:b9:07:89:3a:bd:7c:aa:64:81:31:
7d:78:b5:74:b3:5f:09:c1:75:85:52:10:c3:f8:fc:
70:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A0:E7:14:6B:E5:7D:E9:48:FE:D3:23:A1:33:F7:DF:DB:CF:04:6C
X509v3 Authority Key Identifier:
keyid:44:59:12:08:09:C2:3B:F3:03:3E:3F:57:39:95:27:6F:0C:7A:25:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFkSCAnCO_MDPj9XOZUnbwx6JTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/zaDnFGvlfelI_tMjoTP339vPBGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.22.148.0-84.22.150.255
Signature Algorithm: sha256WithRSAEncryption
1b:a0:9f:d9:1d:1b:98:2d:0f:01:3f:e6:01:dc:45:02:c3:67:
98:fd:cb:d6:f8:eb:b8:25:ed:5a:b6:b1:0e:22:8f:bc:e5:26:
c9:0a:20:da:da:1f:a1:94:65:be:f3:01:71:9e:bd:ee:4d:ec:
61:d1:5f:0b:70:40:59:c7:b5:af:9c:47:e1:86:e9:c3:9b:17:
7f:c4:94:49:66:1c:a9:f0:40:cd:cb:ee:20:41:ff:56:ec:00:
26:2d:92:78:d8:1d:89:21:e6:64:fc:77:54:d7:06:4a:63:09:
2c:0f:62:00:1c:09:20:ff:a9:02:ca:7c:1b:c5:af:2a:f0:56:
4c:36:a7:86:b7:35:6d:1e:a5:34:5e:22:b6:94:69:bc:40:92:
0b:9c:14:d5:80:8e:2d:3a:c0:47:11:91:c1:b9:1f:d2:1e:f7:
fe:e9:75:c8:40:f5:17:2c:43:cf:ed:6a:6e:12:bc:4c:59:70:
59:b5:0e:db:6d:f2:56:76:12:1c:2c:5e:47:7b:b4:6e:5f:59:
f3:6e:2b:01:b9:10:4e:97:c7:e5:1e:10:ae:7a:fc:e6:f0:11:
97:73:c5:92:c8:a5:bf:84:39:f4:7b:7e:98:16:2e:e1:98:9b:
df:fd:65:82:b0:99:5c:39:df:90:1b:33:82:2f:6c:14:81:c1:
57:19:73:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:54:21 2026 by rpki-client