Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/zD7nESecYwtlNUgziZizt2KgWrs.roa
File: zD7nESecYwtlNUgziZizt2KgWrs.roa (raw, json)
Hash identifier: OQocDdnRY13fhei7ZCsBF7Is+iTp+9SUDJbiLqcYRWE=
Subject key identifier: CC:3E:E7:11:27:9C:63:0B:65:35:48:33:89:98:B3:B7:62:A0:5A:BB
Certificate issuer: /CN=b286e9f08848e480b1f3e9a9c06a832d48ce37ad
Certificate serial: 019FFF6B445956F122283F0E96E85DBB2D8C
Authority key identifier: B2:86:E9:F0:88:48:E4:80:B1:F3:E9:A9:C0:6A:83:2D:48:CE:37:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sobp8IhI5ICx8-mpwGqDLUjON60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/zD7nESecYwtlNUgziZizt2KgWrs.roa
Signing time: Fri 14 Aug 2026 08:37:27 +0000
ROA not before: Fri 14 Aug 2026 08:37:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40929
IP address blocks: 177.177.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/sobp8IhI5ICx8-mpwGqDLUjON60.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/sobp8IhI5ICx8-mpwGqDLUjON60.mft
rsync://rpki.ripe.net/repository/DEFAULT/sobp8IhI5ICx8-mpwGqDLUjON60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ff:6b:44:59:56:f1:22:28:3f:0e:96:e8:5d:bb:2d:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b286e9f08848e480b1f3e9a9c06a832d48ce37ad
Validity
Not Before: Aug 14 08:37:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cc3ee711279c630b653548338998b3b762a05abb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7a:d0:5f:54:54:33:55:86:13:25:b3:14:4c:
f8:f9:3c:17:71:00:45:4e:4a:8c:96:0f:50:2f:9a:
27:97:29:d2:0d:bd:21:48:b8:04:bf:ab:7c:93:6a:
87:f3:ae:c9:17:68:17:10:e7:5c:54:e3:d1:19:dd:
8c:ec:dd:91:a1:c4:c4:73:01:49:88:48:55:2c:c0:
9e:36:86:48:91:e4:7c:e3:9f:c4:e7:d7:ed:fb:8e:
ac:c4:04:4e:b7:a4:b2:2b:4f:c7:a0:6b:eb:45:c5:
81:6e:66:eb:db:98:43:37:ab:96:e6:71:db:cc:f5:
b9:d9:c8:c9:bf:f2:57:b2:3f:2f:88:5f:f7:81:04:
d8:61:19:e0:7f:fc:06:1a:9e:ba:c4:3f:45:cb:32:
e7:7c:94:82:c7:be:95:56:a9:7b:dc:1d:1d:a9:6c:
83:ba:ec:60:41:76:58:af:19:46:0a:94:4d:7e:d8:
78:cb:d7:64:4f:f1:18:5d:6e:af:8d:82:bc:5d:14:
9e:b0:e4:2e:b2:21:3c:26:8b:ee:7c:25:6b:dc:34:
67:b8:62:fc:ec:58:f0:f3:9a:4c:1f:fc:52:6e:d0:
76:ea:11:9e:94:74:cc:14:06:a0:3e:8b:a9:1e:b8:
be:52:22:da:07:78:d5:a1:62:e1:bc:80:78:3e:28:
81:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:3E:E7:11:27:9C:63:0B:65:35:48:33:89:98:B3:B7:62:A0:5A:BB
X509v3 Authority Key Identifier:
keyid:B2:86:E9:F0:88:48:E4:80:B1:F3:E9:A9:C0:6A:83:2D:48:CE:37:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sobp8IhI5ICx8-mpwGqDLUjON60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/zD7nESecYwtlNUgziZizt2KgWrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/sobp8IhI5ICx8-mpwGqDLUjON60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.177.82.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:c0:08:b0:70:4f:2f:0b:75:d7:ad:9c:09:f0:75:1f:50:76:
dc:22:a7:1f:9f:37:8d:1e:f4:6f:5e:72:ac:3b:e6:21:32:87:
19:dc:54:64:e0:8c:f3:64:e2:83:90:a0:e7:e5:4d:84:1e:f6:
70:f2:b5:c6:78:af:cb:06:d9:40:5d:7f:53:6b:ae:4c:76:3c:
5d:50:c8:f7:92:c6:47:db:b7:24:63:55:29:0f:fc:63:b3:63:
df:fc:c5:d6:86:95:d2:69:bb:71:b7:9e:9a:bd:cc:50:7f:fc:
d7:5b:9e:6c:a7:44:c3:ab:e3:af:df:26:3f:27:9e:0f:3a:a7:
74:db:ea:71:3b:89:5e:c1:35:50:0a:db:c7:de:e6:9e:2c:3e:
74:5a:d8:a2:21:c3:43:99:e2:b8:0d:6f:34:03:21:81:61:66:
84:f8:57:2c:26:a0:0c:51:78:24:d6:08:87:b8:26:7b:ff:ce:
a7:51:b2:69:6c:bc:e9:ed:78:fc:a3:6f:86:fa:5b:84:3c:76:
81:92:6c:c8:94:d6:c3:8d:73:5d:69:f9:ea:8b:e4:9f:d9:bd:
95:0c:5b:6a:a6:d8:1a:c8:fe:bc:78:13:5b:5c:dc:06:8d:1b:
eb:2a:f0:0f:ed:8b:f9:7b:77:20:f0:c7:52:1e:08:37:8a:4d:
79:ce:2e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 07:26:48 2026 by rpki-client