Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/ZsvTx9SfJapFLF0M3RriUR8HtMM.roa
File: ZsvTx9SfJapFLF0M3RriUR8HtMM.roa (raw, json)
Hash identifier: lxhDwbf/d9lixiDK0WW+B7DIvTUm3qDzeV3VF8OSC8M=
Subject key identifier: 66:CB:D3:C7:D4:9F:25:AA:45:2C:5D:0C:DD:1A:E2:51:1F:07:B4:C3
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 01A00F0EDEBF4D4D25B5DC65DFE055667E6E
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/ZsvTx9SfJapFLF0M3RriUR8HtMM.roa
Signing time: Mon 17 Aug 2026 09:30:27 +0000
ROA not before: Mon 17 Aug 2026 09:30:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203516
IP address blocks: 2.58.152.0/24 maxlen: 24
2.58.153.0/24 maxlen: 24
2.58.154.0/24 maxlen: 24
2.58.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 20:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0f:0e:de:bf:4d:4d:25:b5:dc:65:df:e0:55:66:7e:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Aug 17 09:30:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=66cbd3c7d49f25aa452c5d0cdd1ae2511f07b4c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8b:f6:3d:5c:4a:c8:96:be:7f:fb:06:12:44:
72:00:b5:1b:9d:ae:80:6e:4d:56:3b:ea:36:5b:6c:
fb:b6:51:11:45:85:b1:cc:e0:c9:dd:45:ae:95:a2:
2d:30:31:64:9e:74:5c:87:e4:13:dd:3c:f5:40:8c:
bc:2b:96:ee:0d:36:c0:08:f5:82:9b:66:7f:9e:01:
4d:0c:92:ef:fc:00:6e:ad:f7:85:7c:c1:69:9b:e7:
a3:1c:14:3d:7c:d9:26:9a:22:31:fa:26:2b:f7:01:
63:97:ec:85:8c:c3:1f:a8:d5:b4:94:0a:9a:ab:63:
8c:ed:76:e0:fb:3d:b4:a1:5c:ce:01:05:1c:7e:5f:
b9:dd:c2:02:7e:ec:fe:01:f7:35:78:e2:00:30:ad:
62:c5:ed:84:71:b4:4e:30:49:0d:9c:69:3d:8a:9e:
8c:d4:4d:d0:e3:37:39:da:a6:75:23:d6:d4:67:85:
df:83:f7:33:23:cf:d9:d9:a6:9a:20:f6:05:dc:bf:
a7:6b:cf:d1:55:cf:dd:ab:0e:fe:50:01:9c:1a:56:
e7:af:79:e4:c6:b2:9a:53:e1:50:dc:49:e0:8f:52:
c5:4a:ed:98:63:42:7b:83:7a:2f:bc:f7:e8:39:85:
09:93:55:9c:4d:76:31:21:2d:60:11:80:98:40:65:
57:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:CB:D3:C7:D4:9F:25:AA:45:2C:5D:0C:DD:1A:E2:51:1F:07:B4:C3
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/ZsvTx9SfJapFLF0M3RriUR8HtMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.152.0/22
Signature Algorithm: sha256WithRSAEncryption
55:ac:84:a8:c5:4f:36:b7:2c:3e:bb:33:92:05:f3:d6:99:5e:
91:8d:e8:78:24:b8:8f:54:40:14:6f:87:20:8f:3c:1e:49:87:
22:a3:67:52:e6:97:a3:eb:4d:36:e4:cb:36:cd:dc:a0:d3:ce:
09:52:ce:f2:63:09:ba:38:f5:d7:00:b5:bd:cf:6c:70:12:ef:
88:fd:a7:ef:03:e8:8b:06:0a:ca:8c:7b:23:34:37:9d:d0:e0:
06:9b:01:d0:b4:9c:e5:14:51:09:19:45:a5:b8:6d:49:71:ff:
c7:81:5e:c0:1b:01:fa:cd:88:b3:49:98:82:8c:d9:94:4b:f1:
fa:be:a5:48:11:66:4e:a4:37:7f:b1:b9:90:3d:a8:61:97:b1:
8f:c4:f4:f8:16:50:51:25:39:e2:7d:ce:da:6f:d7:ca:16:42:
b9:1d:59:69:8f:dc:a7:1c:b1:4c:d3:e7:a1:e7:8e:66:c0:f9:
6e:ae:7b:2e:1f:50:49:41:72:38:11:48:e2:0e:2d:3f:a4:de:
17:ed:dc:8a:77:a9:31:55:e8:a7:2a:3d:d2:2c:8e:33:34:39:
21:56:aa:31:3e:b9:6b:6c:18:9e:55:3b:35:2b:dc:f5:c4:40:
67:e4:49:e3:c5:7f:7d:4f:20:41:3c:30:d9:a4:d6:36:4b:94:
c3:77:50:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 18 05:23:58 2026 by rpki-client