Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/ZNzJPMt2B1SyImQTB05Yvsvkd14.roa
File: ZNzJPMt2B1SyImQTB05Yvsvkd14.roa (raw, json)
Hash identifier: leKWlyfh6OtsxG9LVgSYbJDdSIf0o1TbZ02gUSkJ9+8=
Subject key identifier: 64:DC:C9:3C:CB:76:07:54:B2:22:64:13:07:4E:58:BE:CB:E4:77:5E
Certificate issuer: /CN=339af1753cb5827b7b433753b57c478d4aad6eeb
Certificate serial: 019F2368A354CAFF98B9A63DD4B30C126278
Authority key identifier: 33:9A:F1:75:3C:B5:82:7B:7B:43:37:53:B5:7C:47:8D:4A:AD:6E:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M5rxdTy1gnt7QzdTtXxHjUqtbus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/ZNzJPMt2B1SyImQTB05Yvsvkd14.roa
Signing time: Thu 02 Jul 2026 15:18:07 +0000
ROA not before: Thu 02 Jul 2026 15:18:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62144
IP address blocks: 89.108.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/M5rxdTy1gnt7QzdTtXxHjUqtbus.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/M5rxdTy1gnt7QzdTtXxHjUqtbus.mft
rsync://rpki.ripe.net/repository/DEFAULT/M5rxdTy1gnt7QzdTtXxHjUqtbus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:a3:54:ca:ff:98:b9:a6:3d:d4:b3:0c:12:62:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=339af1753cb5827b7b433753b57c478d4aad6eeb
Validity
Not Before: Jul 2 15:18:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=64dcc93ccb760754b2226413074e58becbe4775e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8f:ad:d1:6f:31:f0:7e:2a:80:3b:02:d3:05:
7b:16:a0:bc:07:16:e6:02:b8:80:37:55:2d:36:28:
08:ff:b1:43:ac:98:19:e7:a5:1c:9b:ff:20:42:74:
81:11:b8:73:e1:8f:88:3c:41:46:03:65:a6:e0:2b:
5c:6a:6e:28:33:39:ad:51:1c:b9:65:75:12:11:d7:
a4:be:64:f0:45:82:9a:0e:1f:47:3d:b0:1b:a3:9f:
be:e7:71:20:8d:90:d4:f6:4d:89:85:fd:27:5f:25:
f9:82:da:8b:bb:bb:00:7a:86:89:1f:9d:54:85:4e:
fe:94:d1:9b:a9:70:b4:6d:b1:5b:e2:ff:1e:7a:b6:
57:49:a2:9f:d6:9c:ec:7f:47:98:c1:f8:0a:ec:33:
95:3a:58:f9:bb:be:50:69:e9:a1:3c:20:88:be:c4:
aa:a3:14:97:c3:73:34:2e:93:17:10:55:99:bc:8a:
92:f2:17:5d:b5:2c:1f:73:7d:ef:a5:c7:0a:4e:03:
b0:d1:95:6a:52:4b:70:6c:bf:a0:89:51:8e:52:8a:
2a:96:96:ec:7e:12:bd:b5:6b:15:7b:6c:d3:e0:76:
72:6d:c0:3b:4f:9e:e5:f3:92:96:ff:71:2f:27:f5:
42:65:de:39:56:bb:2a:64:06:0c:bb:80:d8:91:a8:
5e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:DC:C9:3C:CB:76:07:54:B2:22:64:13:07:4E:58:BE:CB:E4:77:5E
X509v3 Authority Key Identifier:
keyid:33:9A:F1:75:3C:B5:82:7B:7B:43:37:53:B5:7C:47:8D:4A:AD:6E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M5rxdTy1gnt7QzdTtXxHjUqtbus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/ZNzJPMt2B1SyImQTB05Yvsvkd14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/M5rxdTy1gnt7QzdTtXxHjUqtbus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.108.136.0/24
Signature Algorithm: sha256WithRSAEncryption
75:9e:9c:e3:ed:f5:6b:a9:61:60:07:27:95:08:fc:5c:27:a2:
3c:18:f0:d2:d3:af:86:47:24:ff:c5:4e:0a:fc:ba:68:ac:cf:
73:d0:2d:ae:d3:87:53:42:ab:d6:81:32:77:01:d6:07:7b:3c:
5b:6f:bc:3a:2e:e7:06:6a:31:b3:c4:bc:1b:49:d5:e3:fc:fc:
7a:4d:3a:08:9b:10:24:0d:b1:6c:4f:bd:73:b8:9a:9a:a2:8c:
0e:f7:4c:a0:d2:68:75:72:3e:8b:c7:3c:e4:d1:d8:c8:1a:ed:
45:dd:c5:9f:6b:92:a5:64:96:bd:84:e4:de:36:e1:e6:82:0a:
e2:0f:c1:35:99:42:73:7e:82:4c:69:aa:0d:c0:c0:52:cd:60:
d0:80:19:33:81:e5:1d:70:98:f8:74:5e:a1:ad:a2:40:94:48:
7c:f6:00:3d:13:39:62:25:7f:dc:4a:90:03:6c:d0:f1:8f:40:
c5:64:03:5d:76:06:46:e4:01:32:82:b4:80:93:70:2d:7c:75:
af:0e:8b:59:4b:f6:ab:50:08:16:73:71:36:f3:af:ad:bf:f1:
90:ad:fb:d5:ec:f6:d5:c8:38:77:2f:a9:91:18:c1:2d:35:f0:
ae:3c:a7:24:f3:b2:db:b9:57:e6:f2:25:16:6b:fe:57:40:74:
0a:cb:9d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:57:40 2026 by rpki-client