Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/ZV-VIieejiM4n3hbxs0N6ftuOVw.roa
File: ZV-VIieejiM4n3hbxs0N6ftuOVw.roa (raw, json)
Hash identifier: pTI547ZOUyif3aPyRC4ugck3ff/MwoWOImFHDZYKcO8=
Subject key identifier: 65:5F:95:22:27:9E:8E:23:38:9F:78:5B:C6:CD:0D:E9:FB:6E:39:5C
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 019F4E70CF18BF73E5C692FCDA2B1B1318C5
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/ZV-VIieejiM4n3hbxs0N6ftuOVw.roa
Signing time: Fri 10 Jul 2026 23:50:43 +0000
ROA not before: Fri 10 Jul 2026 23:50:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 162.220.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4e:70:cf:18:bf:73:e5:c6:92:fc:da:2b:1b:13:18:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Jul 10 23:50:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=655f9522279e8e23389f785bc6cd0de9fb6e395c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:14:1d:e4:b5:f9:d6:fc:f7:80:88:a6:77:35:
c8:79:32:92:e7:10:a0:88:15:00:ef:0c:50:64:d3:
4c:30:04:3b:6f:fb:1b:5d:4b:a9:8a:1b:58:f1:9b:
15:6f:88:bd:c2:ae:90:8d:2e:1f:9e:c3:f0:3d:4e:
0b:6c:25:25:9c:7c:84:b7:27:71:87:6c:eb:b2:18:
75:9b:81:3a:ec:2a:57:29:62:73:02:af:86:0a:1c:
b4:6d:b5:96:18:44:4b:84:a6:48:99:4e:79:e3:3f:
65:10:ae:c6:ca:2a:f1:c2:89:c4:57:c3:44:f7:f2:
3a:8f:13:4b:2c:49:6b:54:5a:1f:b3:a8:9d:08:1b:
12:f1:01:4f:8b:98:c0:85:a9:28:13:b7:61:41:8e:
8e:ec:96:05:ff:25:06:88:8a:3c:5c:76:f8:78:b1:
a2:00:25:03:6e:d9:eb:15:29:18:b1:6e:9c:ee:b3:
51:8a:4d:e8:cf:32:17:92:79:25:df:e4:fd:a3:78:
3f:f8:5c:a7:f8:d7:7c:0c:49:30:9c:46:8c:86:5a:
d2:ff:13:02:21:68:1a:ca:4c:88:6c:52:53:b5:6a:
c3:05:3a:de:e2:0a:f1:4d:a3:89:13:5f:a1:23:da:
0a:4c:61:7c:2b:aa:1d:3f:9e:06:f1:fe:9a:0b:dc:
6e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:5F:95:22:27:9E:8E:23:38:9F:78:5B:C6:CD:0D:E9:FB:6E:39:5C
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/ZV-VIieejiM4n3hbxs0N6ftuOVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.220.244.0/24
Signature Algorithm: sha256WithRSAEncryption
73:6a:58:5c:59:6d:f1:fb:03:c2:99:a9:57:a8:e4:f9:76:c0:
36:9c:db:9a:7c:37:6e:2c:d0:c0:91:e8:75:17:77:db:b0:23:
df:be:e5:f2:25:32:32:a5:04:47:d6:1c:83:63:c3:c0:1f:44:
a4:ba:0a:2d:90:f9:9c:33:36:ee:47:9b:71:2c:aa:7e:cb:3a:
e5:a1:f4:d0:f0:e0:5e:a1:55:12:92:d7:b5:e8:8e:fe:88:6d:
7d:e4:c7:e8:af:61:55:9c:5f:a7:5e:0d:72:a1:f4:5f:77:1c:
6f:49:65:a3:1b:30:64:6d:9d:9a:2c:7d:a6:22:f0:90:1d:b0:
a9:3c:d8:4f:50:fc:f5:d6:ae:55:c3:22:72:79:59:db:30:bb:
07:be:0e:11:49:70:7a:fd:44:92:5c:16:5e:47:4c:c6:45:ed:
f4:f4:13:76:02:9c:b9:26:03:9f:01:2e:99:c0:a7:ee:71:58:
74:fc:29:08:9e:03:92:d7:9c:e9:08:70:a6:71:8b:5e:4e:10:
64:8a:4c:28:cf:0b:09:fe:67:ba:8e:2c:88:57:d9:cd:3a:42:
83:1d:9f:50:b7:4c:28:be:34:49:0d:8b:ca:23:69:6a:9f:f4:
21:df:b6:48:dd:77:ba:0d:ed:31:ad:c5:90:6f:cc:be:8e:d4:
54:fc:bd:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:37:16 2026 by rpki-client