Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/zz8CTQlAfvEvx5jGFMW1IXZKEIk.roa
File: zz8CTQlAfvEvx5jGFMW1IXZKEIk.roa (raw, json)
Hash identifier: 7EDuCy61tV3pK7OdC8G/gEKNQtib9Mnu4TD74arF9Fc=
Subject key identifier: CF:3F:02:4D:09:40:7E:F1:2F:C7:98:C6:14:C5:B5:21:76:4A:10:89
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01A143ED6928D27F502A9DD582192DBC1EFF
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/zz8CTQlAfvEvx5jGFMW1IXZKEIk.roa
Signing time: Fri 16 Oct 2026 08:56:34 +0000
ROA not before: Fri 16 Oct 2026 08:56:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 45.90.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 12:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:43:ed:69:28:d2:7f:50:2a:9d:d5:82:19:2d:bc:1e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 16 08:56:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf3f024d09407ef12fc798c614c5b521764a1089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5c:e3:02:98:95:39:7c:bb:0f:89:fd:d5:07:
4e:b5:db:19:cf:75:8f:69:db:4b:e9:89:2a:e3:da:
b9:2a:eb:1b:ed:72:85:1c:f6:ee:3e:65:9f:92:68:
7e:5b:a2:57:8d:39:1a:f0:b6:d8:70:e6:36:96:fe:
ff:a7:51:f6:7a:59:b7:c3:9e:e6:60:0e:25:dd:1e:
8f:be:62:f7:12:c2:15:23:56:fb:55:56:9a:ae:7e:
c0:8b:7d:e1:59:d8:0a:c5:b8:31:1e:39:e7:d4:61:
62:46:f4:24:ed:dd:a8:9d:24:ee:45:62:ad:cf:35:
8b:2e:eb:c8:1b:59:7a:1a:7b:ff:90:55:8c:d2:03:
29:fd:e8:13:e5:a9:9e:57:ad:eb:3c:f8:0b:3e:2f:
27:4a:d8:1c:db:8f:21:17:e2:82:74:20:a9:68:42:
9b:a7:d1:5a:1e:39:01:06:34:c6:2d:ff:3e:b6:c0:
22:16:3b:6a:4b:63:c4:ab:2b:00:39:8c:88:55:43:
01:7b:b0:0d:bd:2b:b8:03:d0:32:36:cd:9b:9f:d6:
41:53:1f:a7:80:b5:b1:a8:30:d6:0d:d6:45:26:e2:
4f:04:0f:66:ff:11:31:ed:ee:1c:dc:c5:0a:af:76:
eb:8a:81:eb:f5:e2:d5:ad:ca:b6:1e:b6:42:f4:80:
87:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3F:02:4D:09:40:7E:F1:2F:C7:98:C6:14:C5:B5:21:76:4A:10:89
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/zz8CTQlAfvEvx5jGFMW1IXZKEIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.16.0/24
Signature Algorithm: sha256WithRSAEncryption
62:da:ad:9a:04:58:07:2f:37:34:c6:85:5e:73:a0:57:ba:46:
4e:64:30:06:80:c5:8d:82:e7:83:fe:77:e3:a5:cc:a4:d7:a1:
1a:05:b7:6a:0b:10:83:03:05:aa:9a:b6:cd:d0:a2:c4:5a:15:
e6:0d:42:6b:aa:c2:56:1f:74:3f:49:01:c4:aa:09:79:bf:36:
00:ae:05:4b:47:30:3f:89:d0:14:88:79:e3:04:80:49:4a:0a:
8a:77:8e:7b:b5:c9:c8:87:9f:b6:e9:8a:d5:e0:c8:2c:8d:ca:
01:6d:46:95:16:8b:b8:ee:2a:a4:55:fe:97:69:ee:a2:a4:82:
3c:d2:7f:a3:2d:0e:63:1d:36:d1:5e:bc:04:e2:75:71:65:a2:
30:77:be:c9:55:5c:53:42:fe:ba:78:53:d9:db:26:6e:66:40:
66:01:1d:8b:ae:81:38:1e:6a:41:17:29:99:e2:81:1b:66:12:
ee:80:6d:f6:fc:ff:bc:79:24:dc:14:0a:5e:99:7b:d2:2d:d4:
f9:9c:cc:e7:e0:4c:02:be:71:75:cc:ae:6c:46:55:1a:d7:0b:
f6:05:3f:cf:d6:e4:cd:4f:9c:9f:ff:29:53:b6:3f:32:0c:65:
8d:51:f8:fb:ff:c1:bf:47:d8:e1:e3:d4:36:1c:42:0d:1e:79:
a2:84:7f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 21:59:37 2026 by rpki-client