Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/zRSd70TdIvpXG9E317tO5nOGMLU.roa
File: zRSd70TdIvpXG9E317tO5nOGMLU.roa (raw, json)
Hash identifier: RYQRkWxOaPRNfKvsAV9YZE5gwnP5mGesOdQB0s+hJOY=
Subject key identifier: CD:14:9D:EF:44:DD:22:FA:57:1B:D1:37:D7:BB:4E:E6:73:86:30:B5
Certificate issuer: /CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
Certificate serial: 01A020CAF7E339210DA68B8F81E03DB3F278
Authority key identifier: C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/zRSd70TdIvpXG9E317tO5nOGMLU.roa
Signing time: Thu 20 Aug 2026 20:09:27 +0000
ROA not before: Thu 20 Aug 2026 20:09:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 398549
IP address blocks: 69.38.204.0/24 maxlen: 24
69.38.205.0/24 maxlen: 24
69.38.206.0/24 maxlen: 24
69.38.207.0/24 maxlen: 24
176.10.89.0/24 maxlen: 24
2a13:d8c1::/32 maxlen: 32
2a13:d8c2::/32 maxlen: 48
2a13:d8c3::/32 maxlen: 32
2a13:d8c3:2::/48 maxlen: 48
2a13:d8c3:5::/48 maxlen: 48
2a13:d8c3:7::/48 maxlen: 48
2a13:d8c5::/32 maxlen: 32
2a13:d8c6::/32 maxlen: 32
2a13:d8c7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Sep 2026 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:ca:f7:e3:39:21:0d:a6:8b:8f:81:e0:3d:b3:f2:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
Validity
Not Before: Aug 20 20:09:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cd149def44dd22fa571bd137d7bb4ee6738630b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7e:ea:60:4f:93:2c:e6:ae:7f:fa:40:75:41:
f9:77:62:69:46:1e:e9:5a:dd:7b:03:a8:c3:e8:0a:
b5:9a:0e:66:f0:04:14:fb:97:e1:30:a0:b7:99:6c:
ae:63:07:75:30:a7:6e:d9:c9:0a:26:05:ce:69:e8:
74:a2:0d:49:97:e7:f7:f9:6f:d6:91:17:74:0e:41:
f5:34:a2:6e:bd:2a:95:56:ed:a6:22:cb:af:7b:c9:
06:99:55:b6:a0:0f:d1:9f:8f:17:50:30:c8:56:0f:
e3:af:93:8e:0e:b8:87:18:ed:7d:bd:0c:e3:ca:b9:
f3:9a:16:61:f9:38:e2:17:bc:ed:78:fe:bf:28:45:
95:52:f7:82:7a:e6:63:a6:52:72:d3:fb:44:5b:f2:
27:51:fb:b8:32:19:ad:10:ae:d8:c2:cd:86:66:5b:
83:65:5e:af:5b:61:e3:bf:fd:b5:35:78:ad:5f:94:
1b:6c:ce:37:fd:29:d0:cc:48:50:e2:25:18:26:9a:
76:25:5c:99:69:8c:7e:c0:bc:34:c1:53:15:60:74:
21:a8:46:e8:8c:36:04:f9:7e:6f:6d:a5:c3:06:96:
ce:2b:ca:b0:c8:02:fc:38:e1:bb:24:1a:4b:aa:b8:
b3:fd:7f:06:d8:25:8d:b4:06:c7:50:5b:00:56:21:
38:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:14:9D:EF:44:DD:22:FA:57:1B:D1:37:D7:BB:4E:E6:73:86:30:B5
X509v3 Authority Key Identifier:
keyid:C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/zRSd70TdIvpXG9E317tO5nOGMLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.38.204.0/22
176.10.89.0/24
IPv6:
2a13:d8c1::-2a13:d8c3:ffff:ffff:ffff:ffff:ffff:ffff
2a13:d8c5::-2a13:d8c7:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
0f:c8:7c:f9:58:af:eb:3c:f4:b3:17:44:4e:9b:60:74:8d:43:
31:60:87:e6:6f:77:9c:22:b6:77:d0:b9:46:c9:6b:34:df:62:
0a:06:88:9f:ff:34:46:f3:57:cc:ff:d0:0e:d2:e5:d2:59:af:
5a:ab:b3:8d:76:ea:9b:59:92:98:76:b4:8b:2a:4e:54:c6:2c:
2e:7b:36:e2:0c:48:25:73:79:18:6d:ad:a4:39:44:d1:62:8f:
06:4c:ae:78:20:fc:f1:a2:76:c6:59:41:2f:d7:b6:e7:f9:23:
88:ff:ef:5d:b6:02:99:ee:f0:b4:8d:dd:15:e5:c2:33:37:cc:
c4:b1:6e:13:c5:b6:2a:e8:87:7a:17:34:71:0c:7d:e6:93:06:
e2:1b:a8:40:f9:56:d2:f7:45:96:fb:3d:53:8e:ca:81:a2:68:
b7:46:5f:15:23:3b:bd:57:0a:7f:a1:e5:76:25:58:e8:04:74:
fb:c7:d5:0e:e0:1e:d7:05:f6:4c:f0:0f:b4:6d:f9:01:c5:a3:
33:50:ff:59:25:94:48:03:69:5a:42:29:54:c9:7e:af:6e:5b:
66:d1:9f:5c:2d:6c:b7:c0:81:29:c4:9f:13:be:f8:43:28:01:
fe:fc:2f:14:e2:7b:5a:45:0c:52:ab:45:de:e9:85:3b:3b:20:
b0:8c:5c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 05:32:36 2026 by rpki-client