Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/Z1V2P99axUzeTKh11WwxPymoRxc.roa
File: Z1V2P99axUzeTKh11WwxPymoRxc.roa (raw, json)
Hash identifier: TatPZK1rBwzilPh1/dcYl/LZedeEcaltPVWCID25KDY=
Subject key identifier: 67:55:76:3F:DF:5A:C5:4C:DE:4C:A8:75:D5:6C:31:3F:29:A8:47:17
Certificate issuer: /CN=fdd0fd68c1b6b569b9f7c4813ac12ded6ae5e8ab
Certificate serial: 01A158FB1BDB7100FE140471BF2421C35352
Authority key identifier: FD:D0:FD:68:C1:B6:B5:69:B9:F7:C4:81:3A:C1:2D:ED:6A:E5:E8:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/Z1V2P99axUzeTKh11WwxPymoRxc.roa
Signing time: Tue 20 Oct 2026 11:03:33 +0000
ROA not before: Tue 20 Oct 2026 11:03:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51369
IP address blocks: 62.204.32.0/24 maxlen: 24
91.209.127.0/24 maxlen: 24
91.239.132.0/22 maxlen: 22
137.22.159.0/24 maxlen: 24
168.113.163.0/24 maxlen: 24
185.16.116.0/22 maxlen: 22
193.176.227.0/24 maxlen: 24
194.15.126.0/23 maxlen: 23
2001:67c:1484::/48 maxlen: 48
2a04:280::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:58:fb:1b:db:71:00:fe:14:04:71:bf:24:21:c3:53:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd0fd68c1b6b569b9f7c4813ac12ded6ae5e8ab
Validity
Not Before: Oct 20 11:03:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6755763fdf5ac54cde4ca875d56c313f29a84717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:68:cf:62:8f:22:54:15:c7:84:b6:71:e6:3c:
22:ed:01:a9:17:a7:31:73:8e:3a:1b:0f:ec:17:0b:
be:a1:af:06:33:1b:c1:e9:e8:57:e8:21:9a:58:55:
aa:22:2c:9b:19:61:e3:5f:a3:20:8b:4b:55:cc:0b:
84:af:9b:af:34:bf:8d:41:60:b9:5c:98:40:a9:1b:
19:89:0d:f7:6b:e5:8f:6b:2f:41:3c:50:b5:46:8f:
c2:64:d4:d6:e7:74:c9:96:04:bc:8b:a6:25:02:aa:
9b:36:01:6d:9c:a8:5e:2e:fb:cd:56:b6:d5:2d:09:
fe:cc:fc:f1:ed:bc:6e:b7:24:1b:34:3f:5d:be:ab:
8c:29:c4:bc:d6:fd:1f:9a:6f:99:77:63:79:6b:64:
e1:d1:da:6d:cd:b1:5d:ae:fd:b6:09:18:fe:73:24:
7e:b8:8b:d6:2c:47:4e:b6:d7:a3:a3:ad:b2:3c:f8:
3d:c1:ea:94:e0:db:74:6f:af:2f:2d:bd:22:f6:7c:
f4:25:80:4d:e5:9c:81:7d:85:1b:32:27:df:60:ba:
38:fa:8e:b7:ef:0e:d5:82:6f:02:60:88:dd:59:14:
b1:96:ac:54:e1:7e:75:8a:4e:e8:65:39:c9:fe:c5:
b4:06:c9:ab:c2:08:e6:ee:63:dc:fb:49:06:36:b1:
68:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:55:76:3F:DF:5A:C5:4C:DE:4C:A8:75:D5:6C:31:3F:29:A8:47:17
X509v3 Authority Key Identifier:
keyid:FD:D0:FD:68:C1:B6:B5:69:B9:F7:C4:81:3A:C1:2D:ED:6A:E5:E8:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/Z1V2P99axUzeTKh11WwxPymoRxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.32.0/24
91.209.127.0/24
91.239.132.0/22
137.22.159.0/24
168.113.163.0/24
185.16.116.0/22
193.176.227.0/24
194.15.126.0/23
IPv6:
2001:67c:1484::/48
2a04:280::/29
Signature Algorithm: sha256WithRSAEncryption
2a:27:78:40:39:57:e4:b6:ef:b8:61:c9:3b:f4:48:6c:f2:ec:
69:7f:0a:ba:1c:91:65:76:3d:90:88:4f:ec:e4:4f:98:36:f2:
ee:b1:dc:b1:83:2f:e6:16:1d:13:c6:3e:f0:25:25:07:77:5c:
39:94:36:25:ea:dd:33:28:36:e0:f6:1c:3c:e4:23:87:0a:56:
2d:45:6f:2b:47:75:71:dd:03:80:20:3e:8c:23:37:4d:62:b3:
2e:e4:3e:48:c4:95:65:42:77:4f:11:1d:88:ce:d6:33:da:7a:
d3:a2:fd:bb:6e:9d:99:93:b2:fd:f8:c2:b2:83:b1:43:2b:5c:
d5:b8:e7:d8:6d:1e:b6:e9:f1:d1:19:7e:21:bc:8a:e2:38:69:
cc:74:ac:1f:1d:54:8c:42:9b:80:c7:c5:28:3f:e9:32:e0:32:
69:2a:8d:b8:07:03:1c:00:b5:53:3d:2e:45:f2:8f:15:9d:53:
25:b4:3d:01:ae:a2:89:6e:71:30:30:af:58:19:25:12:de:d8:
57:ec:83:32:6d:2f:60:7a:42:54:99:03:c3:4d:9a:ef:73:38:
db:67:c7:b9:fd:be:ef:b6:6b:31:0d:ed:8a:71:cd:ed:5f:7c:
c7:8b:84:f8:b9:7a:8a:ab:5b:c9:28:e5:55:52:15:22:df:12:
5f:80:2f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 13:19:10 2026 by rpki-client