Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/z07thSVHyWAJuxXJ5H9o1VqkWdI.roa
File: z07thSVHyWAJuxXJ5H9o1VqkWdI.roa (raw, json)
Hash identifier: 2LrgxlyNUcDLXkqgnPDZ94RtD0Ca6QUNJukOrzPXmio=
Subject key identifier: CF:4E:ED:85:25:47:C9:60:09:BB:15:C9:E4:7F:68:D5:5A:A4:59:D2
Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Certificate serial: 01A06687F3478F62015883BC7E875CC81DB3
Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/z07thSVHyWAJuxXJ5H9o1VqkWdI.roa
Signing time: Thu 03 Sep 2026 09:09:40 +0000
ROA not before: Thu 03 Sep 2026 09:09:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39855
IP address blocks: 62.68.69.0/24 maxlen: 24
185.83.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:66:87:f3:47:8f:62:01:58:83:bc:7e:87:5c:c8:1d:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Validity
Not Before: Sep 3 09:09:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf4eed852547c96009bb15c9e47f68d55aa459d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:be:9c:ea:dd:77:1f:75:b6:ab:75:ae:54:02:
be:a1:ae:8b:2e:e6:22:6f:0e:24:a6:44:0f:e9:01:
04:bd:23:2a:e8:50:1f:28:11:37:5d:92:48:41:1f:
97:b5:9d:e8:44:51:bf:a1:9b:dd:8b:15:53:98:c1:
86:83:33:a1:46:be:48:61:66:c9:6e:fd:26:1e:a2:
33:1f:e4:15:74:78:6b:91:b6:4c:bc:5a:94:04:4d:
ee:71:f8:e5:4d:0c:4f:79:38:bc:68:91:95:42:a8:
93:e0:7f:17:91:9a:cf:85:4c:31:08:4f:65:97:f7:
69:cc:4a:86:9e:72:bd:25:ca:68:42:0a:2f:0a:0f:
69:61:16:0c:29:58:24:ec:f6:d7:3a:8d:b6:a7:a4:
8b:cb:53:52:0b:6f:bc:d0:ac:ac:e2:da:bc:b1:86:
cd:4e:b5:1f:bc:5d:98:d0:34:2f:29:91:12:23:fa:
2f:6a:2c:39:dc:9e:8d:aa:ff:bd:05:6f:bc:86:db:
4c:39:6f:72:3e:21:c2:e8:cd:17:f6:6d:b1:4c:5a:
69:7c:90:c1:03:5f:f8:c1:33:3a:0e:7f:1e:b7:19:
eb:34:69:7f:5a:eb:91:e2:46:f2:07:48:b1:33:f6:
d0:06:77:db:b1:8e:cc:69:34:a1:a7:99:80:73:1d:
5e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:4E:ED:85:25:47:C9:60:09:BB:15:C9:E4:7F:68:D5:5A:A4:59:D2
X509v3 Authority Key Identifier:
keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/z07thSVHyWAJuxXJ5H9o1VqkWdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.69.0/24
185.83.230.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:4a:c4:60:eb:c6:7d:64:4f:e6:9a:38:f8:5e:2d:fd:4e:ba:
fe:1d:f5:fe:c3:23:ca:ee:f3:1f:0e:11:52:35:76:fa:82:31:
45:95:1e:ba:06:44:d4:fc:c6:ad:09:31:04:56:d9:41:62:12:
8d:14:14:55:cf:00:8a:44:8b:80:bf:72:f1:27:6b:d3:7b:02:
01:40:d6:4c:05:e7:a4:28:fb:be:ed:4b:e8:d7:de:5c:12:ec:
23:0e:b8:8f:d6:fd:60:7b:7e:65:1f:17:ba:12:5b:94:58:40:
5b:41:c3:f4:03:9d:96:c8:f5:c1:ba:68:13:9e:90:ed:c5:d4:
e9:f8:95:e3:bf:df:1f:32:eb:9e:3d:b3:f4:94:8b:8c:33:ca:
c8:3f:35:b2:20:0e:cb:ee:ec:9c:05:bf:a0:ca:d1:6e:01:83:
cf:02:a8:fe:08:ff:88:31:24:29:6b:ce:d6:67:4f:ac:ba:27:
cd:09:08:78:45:03:66:aa:51:1a:89:ce:27:7c:6b:6e:97:a2:
3c:64:17:c9:85:d6:6a:91:72:1d:4b:c8:ea:92:8b:95:f2:77:
08:7c:f3:ff:c2:d4:8e:3b:3a:58:e4:c3:85:d8:d2:cd:de:fe:
b7:31:bb:0a:32:9f:9c:9a:40:1b:47:cd:9e:47:8b:f9:cf:4b:
cd:c1:62:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:13:57 2026 by rpki-client