Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/zbB9bOrDvpQhz8rM2SWmNLWPUT0.roa
File: zbB9bOrDvpQhz8rM2SWmNLWPUT0.roa (raw, json)
Hash identifier: rpkVJVzw/qdvIkZyInRx6Bx7b3NqiJEAzZ8FKUQsPfI=
Subject key identifier: CD:B0:7D:6C:EA:C3:BE:94:21:CF:CA:CC:D9:25:A6:34:B5:8F:51:3D
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 019F3C9016A547E07CA800C3A3D8037968B0
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/zbB9bOrDvpQhz8rM2SWmNLWPUT0.roa
Signing time: Tue 07 Jul 2026 12:31:43 +0000
ROA not before: Tue 07 Jul 2026 12:31:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402236
IP address blocks: 46.34.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3c:90:16:a5:47:e0:7c:a8:00:c3:a3:d8:03:79:68:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Jul 7 12:31:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cdb07d6ceac3be9421cfcaccd925a634b58f513d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4e:59:6f:a6:9d:f4:8c:5c:e6:9d:6a:3b:21:
7d:93:09:7a:84:6b:7f:95:cf:9b:cd:fc:f2:bf:f6:
e9:2d:78:30:79:d8:dd:40:95:a4:d3:a3:01:92:da:
85:64:c6:c5:8c:97:62:7b:38:cd:19:ed:bf:4e:a4:
18:1b:f8:a0:a6:89:3f:e9:f4:3b:ae:a8:48:cd:0a:
0d:62:a4:69:cb:1a:c4:9a:e4:ed:ed:ec:28:0e:0b:
b6:e3:f6:44:59:0f:31:44:bf:7e:cf:e2:04:f5:fe:
e9:1e:da:19:ad:e9:34:db:32:46:6a:36:c2:9a:4a:
a9:a1:12:bc:e7:ff:b0:42:93:4b:08:c0:c7:70:a9:
cc:17:24:1f:fa:5d:0b:db:44:13:cb:32:32:51:3f:
3a:16:52:5e:4d:20:34:8d:f2:02:53:f2:55:13:d0:
d0:06:a2:83:03:7c:d5:d7:7c:92:53:2b:f8:3a:e0:
26:c1:46:fc:ab:5f:66:f5:42:81:e0:20:a7:4d:69:
d7:55:a6:97:4e:c7:db:46:d6:db:a6:70:bc:1c:74:
9a:92:83:90:5e:63:e6:6c:1b:d3:f7:81:3b:1c:8f:
27:57:54:51:ef:da:2f:bb:dd:51:a5:f2:cc:be:42:
57:dd:ea:d1:55:e5:f8:2c:03:c0:e6:31:b9:2a:c9:
3c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B0:7D:6C:EA:C3:BE:94:21:CF:CA:CC:D9:25:A6:34:B5:8F:51:3D
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/zbB9bOrDvpQhz8rM2SWmNLWPUT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.37.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:10:47:6c:8b:41:b0:ad:38:45:4c:76:2b:eb:ef:e6:ec:f8:
25:9a:b7:57:b5:ae:83:a8:b1:e2:1f:25:96:1d:f6:e3:5e:bd:
2a:aa:9a:56:95:98:19:ba:4e:a0:7e:cb:0d:64:e1:ba:b6:12:
70:5e:25:15:2d:bf:e2:35:4c:2d:79:88:84:35:83:d3:91:39:
14:8a:fb:d0:38:43:76:78:a2:b9:7f:04:e0:bc:8c:61:98:f8:
3b:a5:db:56:9d:8f:80:9f:09:ed:0e:1d:0f:b9:17:a8:b7:82:
14:00:8a:ba:2d:a2:9d:85:6c:20:d0:42:d1:47:22:dc:f9:a2:
c9:92:a1:00:6c:d9:54:1c:29:18:fd:4b:c7:88:2e:26:40:39:
cf:9c:09:d8:59:c7:c9:86:e0:37:9d:fa:88:6a:a9:19:57:e3:
a1:f1:4c:77:5f:b4:4a:09:0e:4a:7f:ea:40:77:05:bf:b8:13:
6e:40:cb:f7:8a:e2:6b:01:6c:c7:65:44:88:47:d7:55:cd:e9:
b4:1a:b4:16:3a:73:f7:7b:3b:82:ca:b6:0c:78:d6:fc:19:82:
ef:49:97:fa:a7:19:f9:81:76:9d:b8:da:33:3c:85:12:2a:a9:
5f:c2:29:16:3b:0c:75:f8:67:73:de:83:05:36:a4:f9:34:b5:
ba:46:ea:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:37:05 2026 by rpki-client