Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/zCwAAoz5xoPjepAyOAHXKl3uKvY.roa
File: zCwAAoz5xoPjepAyOAHXKl3uKvY.roa (raw, json)
Hash identifier: HNUMDTcYRwuepAWngdJO3EHzEx35g02c0Bdz/koyqp8=
Subject key identifier: CC:2C:00:02:8C:F9:C6:83:E3:7A:90:32:38:01:D7:2A:5D:EE:2A:F6
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019FCDC1C4BA135A16A9A3A575AB0D553F2A
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/zCwAAoz5xoPjepAyOAHXKl3uKvY.roa
Signing time: Tue 04 Aug 2026 17:10:55 +0000
ROA not before: Tue 04 Aug 2026 17:10:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210537
IP address blocks: 110.34.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 15:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cd:c1:c4:ba:13:5a:16:a9:a3:a5:75:ab:0d:55:3f:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Aug 4 17:10:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cc2c00028cf9c683e37a90323801d72a5dee2af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:95:ee:67:23:43:70:26:1a:b6:ed:33:1f:2e:
11:d2:25:e8:e2:ca:f6:87:db:75:62:80:ed:af:fc:
62:b6:ed:46:3e:62:90:f9:ca:b9:b3:39:42:a2:85:
c0:de:f6:7e:4a:4c:53:ba:f5:3b:7e:54:2e:d5:0c:
e7:f8:23:b7:12:3b:27:b4:e2:65:20:6c:d5:e8:55:
84:f6:bc:78:32:b9:a7:c8:00:84:98:d1:ec:b7:b0:
9c:cd:64:40:62:a6:49:f3:be:63:8f:1a:6b:07:c3:
78:d6:2f:bd:dc:70:05:4d:41:24:53:3f:66:ae:e8:
d7:0f:48:cb:e5:8d:f3:da:5b:cf:c8:0b:b0:b2:89:
d0:02:16:2a:06:54:07:00:1f:be:9a:3b:df:f6:5a:
e0:7b:3d:19:ca:ae:08:5d:60:7b:5d:ee:9c:b0:06:
4f:25:53:54:8f:65:44:fa:cb:ce:df:3c:72:8e:ab:
c7:f7:9f:bf:43:e6:d2:c1:68:9a:88:d2:cb:43:13:
16:a1:04:bf:2a:cf:88:0b:a5:74:ba:d8:15:d3:cf:
97:4d:b3:bb:13:ab:80:b2:25:79:1c:90:23:5b:1d:
55:20:94:e0:4b:51:e1:40:50:70:b0:b9:bc:eb:ec:
2a:0e:93:c3:34:09:22:21:7d:e3:1e:e3:de:0a:4e:
3a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:2C:00:02:8C:F9:C6:83:E3:7A:90:32:38:01:D7:2A:5D:EE:2A:F6
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/zCwAAoz5xoPjepAyOAHXKl3uKvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.34.38.0/24
Signature Algorithm: sha256WithRSAEncryption
84:a1:2d:c4:88:97:80:b1:19:62:fc:d7:d2:11:66:cc:c6:97:
7b:5d:c1:8e:87:04:bb:aa:15:b4:9b:12:38:da:56:a5:7a:5f:
d9:0a:26:32:47:dd:9e:5f:77:6a:20:ed:2e:1b:d5:7f:d4:da:
89:8a:35:7f:09:9c:67:ff:77:c0:95:fe:fb:54:31:fc:62:56:
0b:79:2a:27:14:69:ff:39:4a:e1:55:20:88:80:ee:e7:6b:7e:
62:7c:b2:93:59:b9:aa:b4:6e:6b:c5:33:33:21:38:d6:41:13:
ea:74:20:e3:53:8e:98:c4:2d:65:04:86:91:61:3b:13:8a:29:
15:1e:b7:1c:21:7d:bb:b5:da:9d:59:9d:4c:4f:25:29:5c:70:
f1:66:b4:4d:8a:58:b9:5b:47:ed:bc:bd:b0:3a:04:9e:01:3d:
58:7c:08:5d:a4:03:67:cc:85:be:b2:b1:8a:65:a5:16:6e:80:
9b:e6:b9:be:9f:18:6e:4e:c2:3c:61:53:f0:cd:94:4a:bf:3f:
ea:12:9f:65:78:e0:26:08:7b:64:60:bc:9c:b5:fe:26:a1:aa:
88:0e:8a:b8:98:c3:04:b8:08:f1:7c:c2:b1:fe:e9:95:75:f0:
ba:5d:4b:7b:f7:11:58:7a:88:4a:9e:ad:ed:e0:de:92:46:3c:
5b:45:ce:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 01:19:23 2026 by rpki-client