Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/zwIbwnh5_kJrrh2hmkd8KMEVzwo.roa
File: zwIbwnh5_kJrrh2hmkd8KMEVzwo.roa (raw, json)
Hash identifier: 46z2WdXBxI4jpKEQrgbL4nevRdLPt/ILYjZDNX1OjFc=
Subject key identifier: CF:02:1B:C2:78:79:FE:42:6B:AE:1D:A1:9A:47:7C:28:C1:15:CF:0A
Certificate issuer: /CN=ae4c280d867e937783dec623f3a13f3cffee95a2
Certificate serial: 019F2368D92EFC16DF9DB104C83BC392B950
Authority key identifier: AE:4C:28:0D:86:7E:93:77:83:DE:C6:23:F3:A1:3F:3C:FF:EE:95:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkwoDYZ-k3eD3sYj86E_PP_ulaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/zwIbwnh5_kJrrh2hmkd8KMEVzwo.roa
Signing time: Thu 02 Jul 2026 15:18:21 +0000
ROA not before: Thu 02 Jul 2026 15:18:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57657
IP address blocks: 37.17.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/rkwoDYZ-k3eD3sYj86E_PP_ulaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/rkwoDYZ-k3eD3sYj86E_PP_ulaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rkwoDYZ-k3eD3sYj86E_PP_ulaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d9:2e:fc:16:df:9d:b1:04:c8:3b:c3:92:b9:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4c280d867e937783dec623f3a13f3cffee95a2
Validity
Not Before: Jul 2 15:18:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf021bc27879fe426bae1da19a477c28c115cf0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d4:3f:21:77:68:b5:58:ed:db:7c:dd:ea:2d:
50:6f:80:f7:b6:d0:d1:da:1a:dd:51:87:52:7a:ed:
1f:4e:a3:04:50:ca:02:dd:15:07:53:db:87:85:75:
42:57:ec:37:05:22:3e:0c:e0:d0:21:10:cb:44:2a:
a6:ac:0f:7f:8f:34:ad:c5:90:26:81:cc:ae:f9:cb:
7d:f2:01:76:c1:b4:76:aa:88:6c:c2:34:3c:b6:4a:
62:2c:9d:7d:9f:ab:f4:df:19:51:e6:e7:3b:d2:38:
52:35:03:5e:28:97:78:bb:e9:e0:6a:8c:f0:e5:9b:
ed:fd:7b:a4:4e:61:c8:7c:3d:c7:8a:d7:94:be:af:
32:3f:41:d4:90:f5:a7:7c:94:91:63:27:1d:46:e4:
13:95:74:35:56:78:2f:70:d1:72:22:c8:08:a7:88:
4d:ca:98:59:d1:c9:5c:27:e0:4c:2e:a9:24:17:77:
06:c4:c1:d1:61:7a:10:d0:62:f8:83:37:18:e3:cd:
a5:4a:69:69:05:9f:36:c3:9e:e1:48:d6:49:bf:5b:
fc:a6:0d:45:5a:70:6e:f5:53:2b:33:27:45:39:a1:
91:9d:48:a9:48:d4:57:85:05:44:88:05:17:88:d7:
67:b5:49:99:8e:86:ac:01:bb:81:02:ea:c9:35:20:
39:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:02:1B:C2:78:79:FE:42:6B:AE:1D:A1:9A:47:7C:28:C1:15:CF:0A
X509v3 Authority Key Identifier:
keyid:AE:4C:28:0D:86:7E:93:77:83:DE:C6:23:F3:A1:3F:3C:FF:EE:95:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkwoDYZ-k3eD3sYj86E_PP_ulaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/zwIbwnh5_kJrrh2hmkd8KMEVzwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/rkwoDYZ-k3eD3sYj86E_PP_ulaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.17.163.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:7f:a0:c9:d9:f3:4d:fa:d5:72:be:14:65:d1:37:34:0f:94:
52:fd:f3:0d:05:b7:87:d2:e8:56:b8:da:8c:15:0a:36:aa:4c:
81:3e:7b:9a:71:c6:6c:db:9f:59:3b:22:41:68:06:e8:79:fa:
ec:40:f0:6e:f0:6a:4f:34:a1:38:63:c8:d8:67:fe:fe:8c:95:
d9:94:72:27:14:4a:56:00:35:0b:d0:7c:48:74:ed:04:92:be:
d8:a1:8d:80:22:a3:e3:38:10:58:c5:81:31:02:7d:ee:cc:d8:
5a:cc:22:3a:c1:cd:8e:3d:9d:10:21:91:6a:d8:6e:fc:ff:04:
80:c4:af:71:01:a7:25:10:dc:4e:60:c3:f6:57:ed:65:fa:97:
6d:0b:5f:50:2a:7e:f5:df:71:51:85:96:31:92:26:49:50:19:
9a:fc:d0:e4:25:31:a7:06:76:0a:1f:40:4f:ca:85:20:ba:c9:
b8:58:56:3a:01:c4:00:4f:94:ec:80:31:4a:2a:45:63:1f:2f:
89:32:5f:ca:87:5f:d2:e4:97:45:4f:ab:45:61:f3:fb:7a:f1:
33:a4:fc:f6:00:78:f9:2e:d1:44:47:3c:ff:5e:b9:8c:f2:c4:
fc:88:86:75:26:f0:d1:fd:f8:31:d5:6e:e8:84:ec:75:f0:0a:
c8:28:8b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:24:17 2026 by rpki-client