Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/ZsxNzUsdpANozklTQJBr-KZ6v_A.roa
File: ZsxNzUsdpANozklTQJBr-KZ6v_A.roa (raw, json)
Hash identifier: LOCdyTvN/GYmJzkvgOFZR0P4C/r8MbHd1JrdxCC7U8M=
Subject key identifier: 66:CC:4D:CD:4B:1D:A4:03:68:CE:49:53:40:90:6B:F8:A6:7A:BF:F0
Certificate issuer: /CN=b286e9f08848e480b1f3e9a9c06a832d48ce37ad
Certificate serial: 01A03D1B32F0F7F84759BE1CEABB0CB8293B
Authority key identifier: B2:86:E9:F0:88:48:E4:80:B1:F3:E9:A9:C0:6A:83:2D:48:CE:37:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sobp8IhI5ICx8-mpwGqDLUjON60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/ZsxNzUsdpANozklTQJBr-KZ6v_A.roa
Signing time: Wed 26 Aug 2026 08:06:27 +0000
ROA not before: Wed 26 Aug 2026 08:06:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214432
IP address blocks: 200.149.176.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/sobp8IhI5ICx8-mpwGqDLUjON60.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/sobp8IhI5ICx8-mpwGqDLUjON60.mft
rsync://rpki.ripe.net/repository/DEFAULT/sobp8IhI5ICx8-mpwGqDLUjON60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 10:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:1b:32:f0:f7:f8:47:59:be:1c:ea:bb:0c:b8:29:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b286e9f08848e480b1f3e9a9c06a832d48ce37ad
Validity
Not Before: Aug 26 08:06:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=66cc4dcd4b1da40368ce495340906bf8a67abff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:92:87:63:cf:2d:45:04:62:cf:62:41:65:e0:
25:41:6c:61:08:13:90:4c:d7:ac:09:cc:9f:f5:f9:
46:8a:a0:2a:da:d9:47:10:97:d9:a5:e5:18:52:cc:
eb:d2:e5:aa:0a:c2:a8:6b:75:bd:ca:98:ec:3a:65:
cb:ed:a5:1d:f3:ea:f2:74:23:50:93:c4:62:ec:13:
18:dd:89:8a:71:e9:aa:d0:29:66:60:f9:65:c9:aa:
8d:5f:8d:04:28:f8:3d:01:2b:ad:ba:40:fa:20:e6:
fc:0e:6f:97:28:4b:8c:58:d6:83:7d:f0:a0:01:5f:
11:86:60:42:e5:1f:2b:0a:bc:1e:51:b9:f5:e7:95:
48:57:23:1e:e6:72:e3:9c:eb:e0:bb:93:71:2a:27:
a8:05:d2:9f:fe:13:90:0a:a1:5a:4e:a6:c0:af:ed:
ec:1e:33:80:20:44:7b:bc:37:37:01:cb:1d:6a:04:
31:e1:d8:b1:e3:d8:ca:2f:a6:88:83:70:51:22:c4:
16:9a:19:b2:c1:f6:10:8c:19:03:8f:f2:31:68:b8:
be:bb:b9:cf:1a:ea:ba:84:e9:b7:58:6a:be:95:0b:
4b:f2:14:56:dc:e3:b9:91:1c:f2:62:03:94:55:95:
2b:90:b5:dd:78:7e:00:6b:77:de:89:9a:06:96:6b:
50:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:CC:4D:CD:4B:1D:A4:03:68:CE:49:53:40:90:6B:F8:A6:7A:BF:F0
X509v3 Authority Key Identifier:
keyid:B2:86:E9:F0:88:48:E4:80:B1:F3:E9:A9:C0:6A:83:2D:48:CE:37:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sobp8IhI5ICx8-mpwGqDLUjON60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/ZsxNzUsdpANozklTQJBr-KZ6v_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/sobp8IhI5ICx8-mpwGqDLUjON60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.149.176.0/21
Signature Algorithm: sha256WithRSAEncryption
aa:28:15:27:12:99:bc:3b:79:2d:92:a9:21:a2:a1:19:dc:39:
3c:05:35:df:16:25:a8:26:e9:90:ac:ce:86:cd:6a:b1:d2:2f:
ad:6e:ba:55:94:bd:15:2d:f4:97:58:df:17:8f:cc:84:71:2e:
58:29:12:4b:54:21:d4:bc:ce:4a:50:9a:d0:a3:fa:32:f4:4a:
bd:10:e9:0c:84:22:b9:7d:9d:71:1c:0a:cf:71:e0:48:34:82:
76:1f:0d:8c:a8:fe:2c:5a:b9:11:16:5f:d3:a6:f7:a5:2a:36:
f5:2a:96:ff:e6:1d:17:34:ec:8c:2d:16:a4:61:ea:5d:69:da:
b0:37:62:bf:5f:b4:44:f7:2a:4d:5c:e7:7a:8a:9f:e1:06:fa:
45:6a:32:62:f0:8f:d5:35:44:11:22:49:20:ad:ea:94:b5:3c:
54:cb:be:09:40:6f:b5:d3:1a:79:44:55:99:f8:a5:4c:42:c8:
d4:31:cb:23:f3:17:b8:47:e9:3b:fa:8f:88:fb:8c:98:3c:8e:
28:8b:56:a7:3b:62:54:4e:86:96:8e:5b:67:1e:99:82:a5:09:
99:79:0c:17:1c:82:98:6a:ef:bf:39:8a:b9:72:64:81:2a:ef:
28:50:db:fd:64:54:2e:df:ea:69:4b:6f:59:e1:6f:c4:38:b9:
09:08:b7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 19:48:05 2026 by rpki-client