Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/z3KWbXv42c-ZATgtnic3uJ_XhGc.roa
File: z3KWbXv42c-ZATgtnic3uJ_XhGc.roa (raw, json)
Hash identifier: F/Z940zFmLWbSHSUiP5QUTYBI1TQajSnkxOAhEnwt4M=
Subject key identifier: CF:72:96:6D:7B:F8:D9:CF:99:01:38:2D:9E:27:37:B8:9F:D7:84:67
Certificate issuer: /CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00
Certificate serial: 01A00661CD315C513311BD4F74ECA074566E
Authority key identifier: 67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/z3KWbXv42c-ZATgtnic3uJ_XhGc.roa
Signing time: Sat 15 Aug 2026 17:04:27 +0000
ROA not before: Sat 15 Aug 2026 17:04:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60672
IP address blocks: 91.211.152.0/24 maxlen: 24
2a10:c883::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:06:61:cd:31:5c:51:33:11:bd:4f:74:ec:a0:74:56:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00
Validity
Not Before: Aug 15 17:04:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf72966d7bf8d9cf9901382d9e2737b89fd78467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:34:64:ce:83:cd:da:83:7d:79:4a:b7:32:64:
7e:b4:ed:74:58:eb:1c:cd:00:1f:c2:7e:97:c5:ec:
e1:7b:74:07:df:5c:d2:25:76:6b:20:e2:54:48:21:
42:f2:03:6d:d2:9e:b2:fc:19:c3:4d:b4:3d:bc:bf:
c2:1e:7d:c6:04:6d:f3:f2:16:f3:3d:99:d1:c6:5a:
c0:e2:3e:ea:91:6b:b4:8d:dc:73:4d:19:c9:29:35:
98:c8:e0:63:fa:1c:69:d4:53:6d:51:6f:f9:38:eb:
5e:0f:2b:35:ed:b5:23:c1:91:e6:8b:d1:58:62:86:
be:7d:b5:23:22:cb:50:a5:1e:00:25:47:61:84:a2:
b1:b7:ee:ca:68:08:83:7c:eb:27:e7:7a:9d:80:66:
d7:1e:18:51:3c:3a:d6:3d:e6:1c:35:3c:c0:99:62:
50:70:a0:0b:6d:3d:f4:7a:27:d5:8d:c2:3c:35:b5:
6e:03:02:99:bf:68:fe:9f:cc:21:df:ff:2c:38:a1:
4d:8e:3b:a7:ec:6a:f8:76:38:4b:ce:8a:0b:28:e4:
82:08:3c:cb:e3:af:34:ec:26:4b:a7:67:0a:02:ef:
33:04:bd:76:81:36:ee:68:63:b0:22:a9:28:4e:48:
a8:ba:97:71:65:ba:ba:65:ab:ee:d8:d6:29:74:15:
98:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:72:96:6D:7B:F8:D9:CF:99:01:38:2D:9E:27:37:B8:9F:D7:84:67
X509v3 Authority Key Identifier:
keyid:67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/z3KWbXv42c-ZATgtnic3uJ_XhGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.152.0/24
IPv6:
2a10:c883::/32
Signature Algorithm: sha256WithRSAEncryption
0a:1d:da:af:32:e1:54:d9:86:4f:83:58:54:f9:72:aa:ed:6c:
95:bb:67:a5:e4:46:23:92:aa:57:b6:99:91:20:be:87:88:20:
1f:d8:33:0b:4f:98:39:6c:1b:68:f9:2f:27:71:56:8d:81:c6:
42:23:11:b7:f5:77:82:64:3f:5c:45:04:18:3e:f1:09:c3:fb:
4d:5f:48:ae:fd:70:09:74:bd:14:68:c8:cc:75:77:a4:c7:a7:
43:45:cc:f6:2a:18:d9:86:6e:db:56:70:6c:04:9d:98:c7:30:
fb:51:d1:75:5d:3d:28:38:6f:b0:2d:07:01:bc:93:ed:a3:b6:
2e:18:ef:79:a6:6f:99:92:4c:5a:c6:f7:bf:0d:83:8d:7f:ba:
0e:b6:f2:2b:2b:18:80:be:91:b8:e6:47:3f:c8:3d:8c:be:5b:
c8:4a:13:d8:94:d7:c9:e1:f3:7c:4d:a6:c5:ec:9e:c7:34:20:
ad:e6:7a:a8:19:f4:67:7e:72:aa:63:29:e1:3b:16:a5:1e:c8:
36:c8:37:d7:3d:7c:54:47:94:5f:2b:d8:4f:6b:9a:06:fc:40:
75:24:d7:06:c9:d8:a5:0e:67:c7:c9:55:3a:22:96:94:c9:14:
dd:d7:3f:ab:6b:f1:a2:6b:dd:3e:ac:87:fd:e8:81:45:d2:a9:
1c:9b:3c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:13:59 2026 by rpki-client