Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/zfKx00s8GmNdr-gpOV4uSxk2_RY.roa
File: zfKx00s8GmNdr-gpOV4uSxk2_RY.roa (raw, json)
Hash identifier: 1Py/XVwmGf8udcwbvhAsqk0CSdAhRehMyDOi6+cco/E=
Subject key identifier: CD:F2:B1:D3:4B:3C:1A:63:5D:AF:E8:29:39:5E:2E:4B:19:36:FD:16
Certificate issuer: /CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Certificate serial: 019F0E86640FA4BF1F88E042C78C1B5EEC31
Authority key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/zfKx00s8GmNdr-gpOV4uSxk2_RY.roa
Signing time: Sun 28 Jun 2026 13:58:36 +0000
ROA not before: Sun 28 Jun 2026 13:58:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198584
IP address blocks: 87.248.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:19:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0e:86:64:0f:a4:bf:1f:88:e0:42:c7:8c:1b:5e:ec:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Validity
Not Before: Jun 28 13:58:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cdf2b1d34b3c1a635dafe829395e2e4b1936fd16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8e:0e:7f:e0:c4:47:d4:50:8f:1c:fa:7e:a5:
c7:15:1d:07:85:5f:14:31:f3:8b:9d:cc:40:02:3c:
e7:09:29:d4:3b:36:0b:61:a6:d3:26:6c:eb:cb:7e:
be:30:7d:22:62:58:f7:65:48:c0:e4:df:77:9e:27:
c9:bd:d9:a7:30:9d:bd:cf:4b:04:d4:e8:af:38:b9:
51:1f:26:21:a0:e9:13:f2:cb:4c:f0:00:38:a4:c9:
8c:3e:80:78:a8:19:4a:6b:fa:80:43:d4:40:83:b5:
2b:db:76:7a:15:03:ff:c4:7e:52:28:40:70:54:50:
ae:be:e6:fc:82:a6:d9:e6:1f:ec:80:36:a4:03:16:
ab:e6:b8:02:d9:da:59:3a:2f:19:83:3b:fd:36:df:
b9:54:78:db:03:16:22:61:e1:3e:31:e7:21:6b:a8:
62:ee:bf:79:b2:c3:71:77:7d:5c:6e:d1:62:82:7b:
4e:f5:de:99:69:80:6f:24:35:60:06:d7:77:7d:6f:
f6:7d:33:67:da:10:a6:b3:bd:b1:73:eb:fa:06:eb:
91:37:4f:64:0e:a9:bd:02:76:79:78:6e:4c:83:1f:
e7:2a:d9:dd:49:2e:6a:bb:54:b5:6f:59:2e:49:5c:
c3:b5:7d:05:64:34:e2:0e:28:a3:60:24:35:b0:fd:
11:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F2:B1:D3:4B:3C:1A:63:5D:AF:E8:29:39:5E:2E:4B:19:36:FD:16
X509v3 Authority Key Identifier:
keyid:A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/zfKx00s8GmNdr-gpOV4uSxk2_RY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.132.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:74:87:0c:d3:15:99:2c:23:4d:45:54:cd:a6:19:eb:bd:7c:
2f:bc:c6:2a:b1:f1:2c:5a:c6:bc:5f:ad:9b:c4:b7:3b:20:ae:
cc:d6:a9:97:c1:cc:70:ee:72:ff:93:90:ae:72:5b:dd:61:96:
9b:b7:71:d4:bd:df:37:68:f8:d8:50:1d:36:db:64:c9:1f:d0:
86:e9:a7:d3:76:d1:56:b2:da:63:b5:67:b6:13:8f:20:70:dd:
99:2e:8e:1c:09:12:5e:3e:5c:d4:d3:61:01:fa:17:1a:ba:bf:
9e:68:84:26:c0:cc:2c:98:e7:25:8b:41:62:6c:4e:f6:2e:f5:
6c:8b:f6:e8:86:a4:5e:83:b7:3b:c6:f1:e0:3d:91:3f:8d:0d:
f5:35:58:97:bf:dc:40:e5:a0:ce:ee:ae:45:27:69:b2:c4:61:
91:c7:c3:6c:fa:ae:22:77:b4:5c:2b:4f:96:7a:cf:45:4e:09:
69:76:b1:ea:e0:cd:53:27:44:78:99:b6:aa:61:2c:17:63:b2:
b4:d7:18:12:5e:61:5b:b8:e0:d3:fc:9c:b3:83:78:02:94:59:
3a:c8:dc:d6:70:34:fc:de:e7:b9:60:e0:62:45:d5:43:d8:57:
90:33:bc:95:ee:d7:e7:01:96:f4:68:e7:eb:10:73:ea:85:e5:
2e:c5:45:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:26:35 2026 by rpki-client