Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/ZZFgkpJb9-3d5H0yyE1CKj2kAS4.roa
File: ZZFgkpJb9-3d5H0yyE1CKj2kAS4.roa (raw, json)
Hash identifier: bcEpefxe5eIkjGbIKLrqQ4v0mW0lK/ne60fxBZti+7s=
Subject key identifier: 65:91:60:92:92:5B:F7:ED:DD:E4:7D:32:C8:4D:42:2A:3D:A4:01:2E
Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907
Certificate serial: 019FAECB69863EF440057917BD2E8515393A
Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/ZZFgkpJb9-3d5H0yyE1CKj2kAS4.roa
Signing time: Wed 29 Jul 2026 16:53:14 +0000
ROA not before: Wed 29 Jul 2026 16:53:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212167
IP address blocks: 193.255.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:cb:69:86:3e:f4:40:05:79:17:bd:2e:85:15:39:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907
Validity
Not Before: Jul 29 16:53:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=65916092925bf7eddde47d32c84d422a3da4012e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:db:fc:7d:79:dc:e2:4b:1e:e1:ed:cb:5b:f8:
12:fa:ca:6a:41:0c:cf:09:fa:f1:8d:d9:81:b9:bb:
80:57:c0:41:e8:b4:4d:8d:dd:80:18:0f:b0:11:55:
5a:80:6d:2b:39:c0:19:9e:65:c8:07:45:e9:6f:ce:
4e:ec:47:f6:ea:f6:41:ea:45:e4:25:2a:2c:58:80:
4e:16:e7:a5:65:40:db:1d:9a:69:74:bd:15:c3:a5:
15:d6:51:6a:1c:f9:e9:60:bf:07:3b:fb:ff:63:22:
64:e8:c6:17:bb:ab:a9:e3:68:b0:6c:83:b8:60:cd:
e5:f4:93:31:a1:49:2b:77:83:ef:5e:88:dc:78:3b:
17:b2:a1:c3:30:a5:68:ba:8e:bb:bd:82:59:31:64:
5c:70:4b:f9:ad:e8:eb:e9:2c:34:18:1f:ce:15:94:
cd:7b:56:24:39:76:07:e1:d6:ea:a6:17:7d:5b:4d:
01:82:14:80:e6:33:43:52:8e:a0:36:ec:52:fc:ab:
9e:96:06:f8:b1:24:cd:14:e5:66:3d:c0:4c:f0:27:
ab:0e:29:46:f8:d7:de:76:85:c9:70:84:4e:15:b2:
a3:dd:0b:7f:a0:c2:fc:bf:e7:0e:a5:27:f7:f8:ca:
df:0d:37:69:7f:08:ca:bb:8c:44:6b:f2:9a:ff:d1:
99:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:91:60:92:92:5B:F7:ED:DD:E4:7D:32:C8:4D:42:2A:3D:A4:01:2E
X509v3 Authority Key Identifier:
keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/ZZFgkpJb9-3d5H0yyE1CKj2kAS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.255.52.0/22
Signature Algorithm: sha256WithRSAEncryption
23:66:67:81:c5:33:50:98:6a:4d:23:14:03:c1:ac:bf:be:6b:
1c:ab:62:a3:21:70:26:6a:d2:10:b1:31:43:96:87:8e:6e:8a:
5e:d3:c9:83:95:d4:05:d8:28:e5:ec:99:f1:40:33:20:37:df:
5d:27:62:dd:e7:58:da:a0:d6:cc:fc:f6:f3:4b:80:ca:1f:ae:
ea:bf:59:cc:b9:b4:1b:7c:f5:81:01:57:fd:7b:6d:46:3f:b7:
fe:a0:1e:90:67:97:28:94:b8:49:ff:a4:5b:2c:ba:22:8c:a8:
48:5f:77:c6:80:41:3b:a6:8f:3c:7c:9c:8a:7c:74:ad:8d:93:
4d:5f:95:08:4b:97:0d:99:98:18:5f:00:b1:41:f5:a4:a8:ea:
10:55:26:46:7a:6b:49:2b:1e:fa:b1:d1:07:e0:1b:9f:3e:5c:
a5:41:ff:81:02:6e:a0:d8:e4:f2:b6:3b:eb:50:ea:07:38:dd:
65:c9:69:a6:a2:a9:f0:73:5b:33:92:02:8e:30:f5:5d:8d:d6:
a0:58:3d:1f:e5:2e:73:26:ce:5a:33:61:e4:7a:62:9a:7c:f1:
d7:42:b7:cf:01:76:c8:e6:55:05:85:b9:d7:1c:25:f6:35:a1:
95:26:bb:37:88:5b:a4:a3:8e:35:0f:be:8a:df:34:08:25:56:
0a:31:1d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:30:04 2026 by rpki-client