Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/z2kxewmMnzCsxXtRh1RCjvUJK1A.roa
File: z2kxewmMnzCsxXtRh1RCjvUJK1A.roa (raw, json)
Hash identifier: SC14D0CS76vWK1ek4LA+hWfgnz1fWq/sGIIgZspBYGI=
Subject key identifier: CF:69:31:7B:09:8C:9F:30:AC:C5:7B:51:87:54:42:8E:F5:09:2B:50
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 019EFAFCD7BDA3BD85E64A4676A9E204E751
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/z2kxewmMnzCsxXtRh1RCjvUJK1A.roa
Signing time: Wed 24 Jun 2026 18:55:34 +0000
ROA not before: Wed 24 Jun 2026 18:55:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49747
IP address blocks: 45.8.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fa:fc:d7:bd:a3:bd:85:e6:4a:46:76:a9:e2:04:e7:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jun 24 18:55:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf69317b098c9f30acc57b518754428ef5092b50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:29:40:c6:b2:b5:a2:43:bc:fc:75:92:50:fe:
11:22:17:12:1e:f0:62:ad:5a:29:de:68:2e:7a:73:
ff:ed:6e:b1:a6:bc:7e:c4:0a:68:ad:61:ef:6b:02:
26:ee:d6:6c:fa:7c:0a:ab:64:ce:84:d9:02:9f:0b:
f3:d5:10:1b:be:c6:b7:d5:05:42:5a:16:6a:47:bb:
c1:8f:df:c0:03:00:e8:a3:d4:94:28:38:f9:55:e6:
b8:50:c9:fb:7c:76:5d:43:fc:12:d6:85:ce:55:3b:
7e:b1:bc:0e:16:5d:d7:70:bd:de:3c:19:37:2a:12:
2d:c6:1d:3e:99:c9:e4:8a:2d:b0:07:e7:78:b6:e1:
00:f9:cb:27:58:df:b2:71:2a:b2:d1:37:d6:94:f8:
a3:61:7c:0a:91:0a:51:9a:46:b0:b9:77:4f:51:ca:
d0:f9:8f:85:72:de:52:6d:9c:2e:5c:ff:48:be:36:
4c:5e:4f:ea:dd:c0:8e:b2:ea:b7:6b:43:ff:3a:81:
6a:69:64:e3:38:41:27:d5:f4:98:1b:42:0b:42:e1:
f5:89:98:c1:8b:7e:f2:4f:10:9f:18:65:eb:e3:3a:
3f:21:88:24:d9:2a:04:6c:10:38:59:fc:11:bb:dd:
f2:ff:df:d9:dd:82:da:96:8f:43:ba:fb:a7:2d:2e:
0e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:69:31:7B:09:8C:9F:30:AC:C5:7B:51:87:54:42:8E:F5:09:2B:50
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/z2kxewmMnzCsxXtRh1RCjvUJK1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.89.0/24
Signature Algorithm: sha256WithRSAEncryption
14:89:f9:8c:96:b3:3c:ea:62:52:ad:16:d7:d7:0a:92:bb:33:
74:76:5d:1a:8c:a9:21:a7:89:6a:61:23:42:b8:2b:91:be:ce:
2c:3e:2d:65:45:aa:ac:7b:4a:41:f1:c5:b6:a1:70:b8:68:71:
9f:ec:53:aa:9b:62:4e:81:6d:32:4d:4e:91:af:eb:dd:da:7b:
7c:d2:58:d7:f0:a8:3c:59:ec:2c:f3:76:5f:b4:f3:4a:6e:7d:
8f:ec:7a:39:1f:2b:79:62:31:50:72:cf:5c:01:2e:a0:e6:f0:
85:96:60:2f:11:40:89:d3:75:5e:cb:bd:1c:07:16:ac:10:d9:
f1:91:7a:de:ff:0c:21:d5:33:31:5c:fe:99:a0:4e:d6:c9:f2:
3f:2e:7a:8c:81:73:7d:a0:79:52:99:ad:f3:77:43:41:03:45:
11:48:61:fb:c9:35:a2:27:2d:79:13:79:83:06:95:21:59:cc:
77:fc:cd:07:b4:7a:8f:d3:f5:6b:d0:99:c8:12:46:57:cd:da:
8d:89:e7:de:ac:f2:96:ee:d2:27:81:38:af:15:39:52:39:11:
f2:b1:c2:48:89:43:3c:9f:28:d8:73:45:26:e0:c2:1d:c2:1a:
ee:e5:ca:7a:03:84:db:58:6b:19:63:f6:2f:3d:05:67:b6:65:
5f:33:81:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:53:37 2026 by rpki-client