Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ZP_NatPVbQpMNVZQ1RUUpNSNiLk.roa
File: ZP_NatPVbQpMNVZQ1RUUpNSNiLk.roa (raw, json)
Hash identifier: vBs9unzDv54lv2gCg5d3vkPJrE46waupE1vKIpLmX1g=
Subject key identifier: 64:FF:CD:6A:D3:D5:6D:0A:4C:35:56:50:D5:15:14:A4:D4:8D:88:B9
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A08CB7C37AB030A532C39FDA6AE04F0F74
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ZP_NatPVbQpMNVZQ1RUUpNSNiLk.roa
Signing time: Thu 10 Sep 2026 19:07:28 +0000
ROA not before: Thu 10 Sep 2026 19:07:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57724
IP address blocks: 31.77.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:b7:c3:7a:b0:30:a5:32:c3:9f:da:6a:e0:4f:0f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 10 19:07:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=64ffcd6ad3d56d0a4c355650d51514a4d48d88b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e6:8b:79:7f:0c:e9:20:60:63:df:3f:20:6c:
1b:1a:50:8f:fd:95:ef:23:5e:41:85:2c:6a:38:26:
a9:1e:6b:9d:d6:4f:25:64:d1:8f:03:69:a3:6e:f8:
c2:f8:21:46:6d:92:91:d1:ce:7c:8c:ff:e9:91:0e:
2c:c1:43:c8:80:cc:1b:58:39:71:10:c7:50:5d:56:
a8:35:68:a9:3b:6c:25:35:b2:48:e6:e5:a7:be:d2:
8f:02:55:70:b0:b2:a0:c5:aa:85:4f:66:29:35:69:
84:ea:f8:0b:2c:47:9a:20:d8:14:11:98:9d:32:37:
d0:27:0a:eb:15:f4:ef:dd:0b:84:84:7f:ee:1d:43:
0e:83:b2:f4:48:d7:14:75:38:98:80:5e:7b:f2:a4:
f0:63:73:7a:76:ec:98:e1:ed:56:58:41:a5:40:2e:
7f:a8:86:c3:61:58:b2:a9:34:46:2c:44:d1:9b:1d:
25:3b:c7:fe:38:97:d0:8e:ce:46:b6:6f:0e:94:03:
59:61:4a:23:4f:68:01:01:b0:1b:58:1f:1e:3a:12:
c3:25:86:19:04:d3:5e:47:cd:e1:fc:dd:ab:58:24:
8b:d7:4f:09:46:e9:90:13:63:1c:83:cb:45:db:de:
7f:c9:bd:fe:18:1a:b0:45:a1:19:93:90:e0:84:f2:
32:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:FF:CD:6A:D3:D5:6D:0A:4C:35:56:50:D5:15:14:A4:D4:8D:88:B9
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ZP_NatPVbQpMNVZQ1RUUpNSNiLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.44.0/24
Signature Algorithm: sha256WithRSAEncryption
32:a1:d5:e3:a6:e9:25:3d:e3:b7:c4:37:77:c4:4a:47:5f:39:
bf:6f:eb:6f:2b:f2:8b:75:62:0f:13:29:5d:e6:b3:9b:bb:85:
18:11:a7:34:c6:2d:a1:a7:a2:b1:f2:40:ab:b8:c1:61:8a:61:
56:1c:d0:31:4e:e7:d5:71:4c:b4:52:38:20:53:12:a1:e8:95:
88:d1:4a:cc:4d:2a:6a:39:38:33:d0:d7:c5:a8:9e:55:d2:57:
4f:5f:ad:b7:37:40:3d:7e:7e:15:3c:f6:82:7e:bd:f6:a0:b7:
b8:45:8e:7d:20:29:a8:b0:dc:06:a8:3e:bf:53:9c:90:c8:c7:
a5:7f:85:f9:91:95:e1:98:32:69:2e:56:46:44:0b:54:14:e6:
99:09:d4:8f:d2:5c:a1:bc:9b:5b:cb:19:83:02:00:36:fd:c1:
b1:d6:7f:d7:0a:41:c0:fc:c1:56:10:90:3e:69:57:23:04:46:
12:c9:8a:16:c2:cd:7a:25:84:62:c3:30:ed:7f:8d:12:6a:1a:
52:ad:fe:90:e0:ef:24:ff:7f:d6:98:c7:1a:45:92:80:74:71:
d0:80:b2:d2:9c:28:df:1e:a5:13:a0:7f:bc:5f:11:fb:86:03:
1b:46:78:1c:46:ac:f4:4b:93:a8:ee:f5:a6:1a:72:66:c3:ed:
dd:c3:aa:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 16:26:16 2026 by rpki-client