Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/zOH_qOgQOsgw3q138l3rckG6Ago.roa
File: zOH_qOgQOsgw3q138l3rckG6Ago.roa (raw, json)
Hash identifier: +Mx8N2tCJhWGBRIEJoPVrZh2rwV5PL/bGJpe+6e4qH0=
Subject key identifier: CC:E1:FF:A8:E8:10:3A:C8:30:DE:AD:77:F2:5D:EB:72:41:BA:02:0A
Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506
Certificate serial: 019FCC43FD620D1FEB384DC8B989705B536B
Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/zOH_qOgQOsgw3q138l3rckG6Ago.roa
Signing time: Tue 04 Aug 2026 10:13:55 +0000
ROA not before: Tue 04 Aug 2026 10:13:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 28771
IP address blocks: 83.68.143.0/24 maxlen: 24
83.68.146.0/24 maxlen: 24
2a01:190:167b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cc:43:fd:62:0d:1f:eb:38:4d:c8:b9:89:70:5b:53:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506
Validity
Not Before: Aug 4 10:13:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cce1ffa8e8103ac830dead77f25deb7241ba020a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1c:f6:c0:2f:ae:2b:57:cd:9a:85:7e:06:cb:
f5:3f:93:bb:6e:5a:4e:d3:c5:f3:f9:3c:0f:d3:14:
67:55:58:6d:1f:3c:43:57:d8:7d:47:91:ad:ab:1f:
5d:c2:c2:02:c4:54:57:a5:f9:82:a3:29:05:32:79:
fc:82:cf:a2:23:01:2b:fc:4c:11:e4:c8:99:40:35:
68:86:3d:00:0c:9d:8e:99:21:bc:24:59:f7:cb:ec:
d4:49:c1:d1:1c:f9:81:a3:8c:2c:86:78:85:31:81:
6b:ab:f3:5c:10:e6:88:9b:66:ba:ba:5e:54:52:d7:
ae:d9:36:17:92:9d:cc:1c:e6:2e:34:2e:be:9a:2a:
84:47:89:ef:fe:d1:6e:5d:5a:97:ae:94:d8:91:a9:
5a:be:30:e7:16:78:1b:91:8b:74:84:f1:f2:30:94:
2e:6e:6c:a3:47:81:e2:20:8b:3d:d3:d7:c7:31:b4:
2d:d3:77:a4:c7:46:b9:e3:d9:3b:e6:31:65:7d:e4:
da:61:1f:6b:92:43:12:13:42:27:30:91:79:c1:e4:
a8:6e:0c:8d:70:ec:10:ab:66:5a:8f:dc:21:df:cf:
4c:b0:82:f6:6a:29:07:6e:87:50:03:ed:b5:f4:e2:
20:f2:40:e4:00:93:ca:3d:aa:8c:97:fa:16:60:c1:
95:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E1:FF:A8:E8:10:3A:C8:30:DE:AD:77:F2:5D:EB:72:41:BA:02:0A
X509v3 Authority Key Identifier:
keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/zOH_qOgQOsgw3q138l3rckG6Ago.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.68.143.0/24
83.68.146.0/24
IPv6:
2a01:190:167b::/48
Signature Algorithm: sha256WithRSAEncryption
13:3c:d7:6a:81:9f:35:a8:87:7c:a4:6e:b8:ed:e4:0a:8b:e9:
af:69:4b:28:8b:a1:ed:3e:1c:20:f9:4b:10:c3:00:a0:51:b1:
27:86:4a:c3:e5:8a:29:ef:df:83:e3:2d:fc:91:94:43:a9:3f:
fa:37:60:d2:9a:f2:01:04:f0:38:1e:31:ac:c2:00:37:11:b3:
ad:8f:e7:95:38:66:b1:18:b7:8f:bb:03:4b:a7:80:4a:f9:cb:
c5:51:25:d9:7f:d7:97:db:6e:ec:7b:8c:e6:a9:24:9f:4f:ba:
45:79:c6:bb:55:c6:e8:06:ec:80:4f:3d:32:44:44:6f:ce:8f:
b8:fc:99:c8:8b:c5:14:18:e8:bf:ac:22:bd:c4:49:f3:46:dc:
29:f9:85:7e:04:1d:af:07:6d:55:ee:d2:b7:ad:28:ff:c7:32:
0e:91:6e:6b:1f:51:ed:99:bc:1b:69:5f:2b:ce:f3:e8:f5:f9:
9e:6c:30:0f:85:11:3d:9c:18:ce:04:2c:78:c9:ad:90:43:7d:
6e:6d:da:52:f3:ea:b9:e4:82:fa:45:c0:a9:70:f8:02:7e:dc:
65:2a:e7:ef:86:d4:3b:81:15:5f:dc:b6:62:45:7f:1e:a0:6d:
bd:7d:5f:96:cb:69:a9:1a:c4:2c:b4:3c:21:3c:d8:a6:ec:b7:
b4:5a:b6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:30:27 2026 by rpki-client