Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/zyp1MFClUP-rKn_CvuNxNM2spCM.roa
File: zyp1MFClUP-rKn_CvuNxNM2spCM.roa (raw, json)
Hash identifier: 6VLUIbQnQ69za9209XbA95pe+bnTCLbMJatkGlLpK6g=
Subject key identifier: CF:2A:75:30:50:A5:50:FF:AB:2A:7F:C2:BE:E3:71:34:CD:AC:A4:23
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019E515182E44277CD0FB67B7E92552983BB
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/zyp1MFClUP-rKn_CvuNxNM2spCM.roa
Signing time: Fri 22 May 2026 20:12:36 +0000
ROA not before: Fri 22 May 2026 20:12:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1299
IP address blocks: 222.167.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:51:51:82:e4:42:77:cd:0f:b6:7b:7e:92:55:29:83:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: May 22 20:12:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf2a753050a550ffab2a7fc2bee37134cdaca423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d6:51:48:9f:bb:28:a9:58:a4:69:e6:73:a9:
53:dd:ba:da:2a:ab:00:34:44:f3:76:53:e9:bc:f4:
e3:f1:ca:25:7a:89:97:b4:31:3e:02:47:39:d2:0f:
e2:2a:7c:5d:0c:3d:88:30:0d:95:e1:86:af:c7:8d:
c4:21:50:2b:60:7c:17:92:20:75:10:63:11:8e:e2:
74:41:9c:33:fc:bb:09:36:aa:36:3a:bf:19:92:9a:
19:cd:48:ee:f5:61:74:37:a0:b1:95:20:f2:7b:dc:
bb:0a:ae:56:68:eb:50:b4:b4:66:bd:74:82:c5:58:
3f:de:f2:6b:b5:dd:5d:ed:eb:53:c1:86:bb:eb:12:
3a:b2:4a:5f:08:0c:f7:2f:f9:b0:b1:8d:31:0c:fe:
4d:f7:81:f8:72:35:c7:8d:0f:e0:4d:f0:d1:c0:45:
f5:20:39:92:06:99:1b:c2:df:39:f9:9c:a6:3a:92:
3c:ac:d6:38:73:5a:5a:e8:f4:c6:95:8b:2c:87:37:
b6:5b:84:5c:93:08:f3:21:64:ad:10:b1:f0:35:d0:
ea:39:fc:da:11:54:a3:c1:f5:f0:27:f5:5e:52:aa:
f3:35:04:93:f7:9c:83:e7:4a:da:2a:70:3a:33:4d:
35:d4:1a:fc:d4:0d:5c:7a:ee:e7:39:40:e4:c1:0b:
89:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:2A:75:30:50:A5:50:FF:AB:2A:7F:C2:BE:E3:71:34:CD:AC:A4:23
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/zyp1MFClUP-rKn_CvuNxNM2spCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.214.0/24
Signature Algorithm: sha256WithRSAEncryption
71:b5:95:93:5e:7a:82:89:68:e7:b4:3a:c2:95:f5:fb:c3:0f:
79:77:37:f7:06:e5:90:5f:f4:13:d5:67:25:2c:4f:59:55:ef:
4e:31:49:07:d9:3d:12:76:cf:47:b0:dc:a6:f4:cf:fe:1c:65:
79:df:82:93:92:98:bb:e6:31:62:c1:94:e1:8f:d5:39:71:0a:
1e:e5:82:be:b8:3b:70:f5:f0:66:68:f5:61:e0:92:5e:b7:82:
d1:f5:df:95:f7:0e:8b:bc:ec:a5:45:35:c3:81:19:ac:48:d8:
9f:0a:ab:37:79:12:59:2a:0b:00:6d:8d:af:bc:b8:f5:f7:06:
0b:c4:36:8a:35:c7:44:57:b3:bb:ea:5f:3a:81:52:0a:81:73:
13:da:22:be:b8:99:0f:91:16:9f:da:e7:db:b6:4e:22:14:99:
9e:0d:f6:12:63:5d:05:54:d2:c4:03:98:24:1e:65:54:fd:7d:
13:c0:a2:5d:37:c0:3c:22:18:b4:3c:82:5d:97:b1:50:22:42:
63:36:81:09:4d:97:63:24:c3:2f:6d:d1:07:b0:b7:f4:34:31:
9c:10:10:52:4d:e4:3c:0f:ee:f6:d8:33:1a:30:57:4c:19:12:
f2:0e:74:28:83:db:59:84:0f:0a:95:4e:68:f6:f0:06:ee:11:
b4:45:53:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 05:21:35 2026 by rpki-client