Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/ZokRLAVIZ8gWuG46Nx8ADvD8Xvw.roa
File: ZokRLAVIZ8gWuG46Nx8ADvD8Xvw.roa (raw, json)
Hash identifier: 2qfJJJvlEqlQrgnW0smV1KDHs6FwUNklbT4voZTqzrE=
Subject key identifier: 66:89:11:2C:05:48:67:C8:16:B8:6E:3A:37:1F:00:0E:F0:FC:5E:FC
Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial: 01A0E891A5F671F2BFBB7CD1E2F88B5CFAC0
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/ZokRLAVIZ8gWuG46Nx8ADvD8Xvw.roa
Signing time: Mon 28 Sep 2026 15:10:54 +0000
ROA not before: Mon 28 Sep 2026 15:10:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 163.245.47.0/24 maxlen: 24
163.245.48.0/24 maxlen: 24
163.245.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:91:a5:f6:71:f2:bf:bb:7c:d1:e2:f8:8b:5c:fa:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
Validity
Not Before: Sep 28 15:10:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6689112c054867c816b86e3a371f000ef0fc5efc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b2:77:2e:4c:10:91:0d:ff:45:23:f2:d0:25:
5d:12:b5:d5:d2:2a:86:14:fc:5f:84:85:b9:4d:be:
ba:a3:0b:bf:4f:1e:9b:27:29:a8:22:ec:d9:89:cd:
c8:cd:db:26:1c:e5:22:9f:11:a8:fc:fa:e2:2a:d6:
f2:f7:2f:01:09:c8:21:1e:91:e4:55:eb:ab:f8:25:
bb:ce:3e:11:f4:0e:84:b2:3d:25:3c:b2:49:34:48:
af:50:65:2b:30:72:4a:84:87:6c:fb:1b:9e:41:76:
9e:3f:e6:04:62:e0:3f:3b:9c:f5:b6:b5:de:4a:ff:
0e:b7:68:fd:f9:1c:ab:f4:de:a8:59:33:0a:33:dc:
23:5a:81:45:09:3d:6b:ab:3a:8c:f0:25:13:bd:a6:
c1:cf:1c:86:f0:2f:30:9b:27:13:c8:a4:de:4b:7e:
cc:26:6b:0b:b1:6a:62:f0:a9:82:d7:e8:83:6e:b7:
84:54:13:10:c0:51:72:bb:38:f4:1d:5b:62:98:6b:
ef:88:c2:f7:67:49:92:bd:99:7c:4d:4f:0a:92:cf:
18:a0:64:18:7f:1a:a0:a6:49:b2:20:e7:15:bd:a4:
cd:ce:f4:95:73:f3:d0:88:dd:da:e1:d5:dd:0a:36:
e0:a3:6c:3c:aa:67:48:cc:02:55:4d:c1:90:81:ae:
77:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:89:11:2C:05:48:67:C8:16:B8:6E:3A:37:1F:00:0E:F0:FC:5E:FC
X509v3 Authority Key Identifier:
keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/ZokRLAVIZ8gWuG46Nx8ADvD8Xvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.245.47.0-163.245.49.255
Signature Algorithm: sha256WithRSAEncryption
5a:6b:ff:07:3e:58:6a:e6:df:5b:b3:f1:4c:bb:90:0e:5e:64:
f7:a7:28:ab:e0:16:97:f7:16:a2:7c:c6:7d:60:c0:9c:2d:e5:
93:4b:f2:7b:97:12:9e:9e:1e:e0:d3:c5:68:20:88:ac:d6:34:
a7:98:b5:f5:61:09:1c:eb:d1:b9:7c:32:df:46:43:d8:a8:f7:
fb:59:1b:75:79:4a:3a:fe:ae:8b:1d:6a:a8:46:59:09:9e:bf:
bf:d0:fc:41:43:6b:8f:a6:02:f8:1d:6e:49:a4:8e:cc:12:13:
f7:9c:fb:95:c9:3e:44:15:94:66:f7:cd:e0:5b:95:d2:1f:7c:
53:37:53:be:c2:56:61:2b:ea:96:f8:45:31:36:f8:f9:91:a4:
7c:58:47:d3:d2:35:57:de:4f:a8:3e:8a:30:af:69:90:4e:21:
0f:3c:73:d8:25:62:12:82:37:3a:8d:e7:71:a5:c4:ce:1f:13:
91:e3:52:9a:ed:91:8f:4f:55:8f:21:0e:9a:59:a6:47:3f:fa:
03:f8:fd:58:9e:c0:28:9d:11:19:4e:c9:71:1b:0a:d5:e2:ee:
ab:c5:74:a8:17:65:fe:75:bd:fb:f7:4c:1f:0e:81:8b:d3:fd:
5e:98:eb:d0:c1:b4:36:54:20:5f:40:18:82:3c:62:c5:24:48:
6e:c1:4d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 05:53:51 2026 by rpki-client