Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/zKXTRXAVa6681AZh0iZenUpGbYQ.roa
File: zKXTRXAVa6681AZh0iZenUpGbYQ.roa (raw, json)
Hash identifier: 2eYIh4JNrDjETleZYYyV8v323dxtHY9QlIi6EQ3ZE14=
Subject key identifier: CC:A5:D3:45:70:15:6B:AE:BC:D4:06:61:D2:26:5E:9D:4A:46:6D:84
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 019F3B2BF2A90553C001EA63ADD619A00820
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/zKXTRXAVa6681AZh0iZenUpGbYQ.roa
Signing time: Tue 07 Jul 2026 06:02:43 +0000
ROA not before: Tue 07 Jul 2026 06:02:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402236
IP address blocks: 77.111.117.0/24 maxlen: 24
77.111.123.0/24 maxlen: 24
92.61.106.0/24 maxlen: 24
92.61.109.0/24 maxlen: 24
185.112.241.0/24 maxlen: 24
185.112.242.0/24 maxlen: 24
185.112.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3b:2b:f2:a9:05:53:c0:01:ea:63:ad:d6:19:a0:08:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Jul 7 06:02:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cca5d34570156baebcd40661d2265e9d4a466d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:75:76:d2:25:70:8d:03:7a:89:f9:19:af:36:
19:c4:6f:3e:16:7b:a6:ea:d3:fd:ef:c5:81:11:7a:
b9:df:f1:d3:b9:41:bf:61:a5:fc:a6:0b:86:b5:a5:
a9:86:aa:39:db:b2:23:ac:28:c9:c0:4a:32:11:f9:
89:d3:0a:7e:1b:a1:db:e1:95:26:88:87:35:d3:67:
8f:d4:b4:eb:9a:ea:ac:40:19:d4:05:7d:c1:74:f8:
03:89:c1:01:c6:a2:c1:04:6c:5b:84:14:72:b4:5a:
24:a9:66:49:61:c2:36:4a:d7:55:47:df:d2:eb:2e:
0a:81:af:ae:ce:fd:42:3d:4a:85:d5:ff:7d:21:eb:
1f:86:fd:9f:b7:56:1b:89:01:98:b8:8d:02:ce:ba:
ce:76:39:a0:fe:16:0a:54:05:22:60:b7:44:88:a5:
f5:8b:57:9c:32:2c:16:36:18:ba:76:e8:9c:61:d1:
0d:2f:bc:5f:6a:52:13:99:a6:50:0c:24:9d:70:de:
5a:1f:f6:a7:cd:5f:be:8d:dd:a9:20:f9:68:af:37:
d7:5a:6a:65:8f:ab:21:e3:ad:ce:5a:44:53:db:ac:
c1:ae:8c:04:d4:ae:86:8f:15:53:b0:df:70:68:55:
a6:c7:93:93:74:68:f5:b2:6f:07:65:3c:0a:31:2e:
ac:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A5:D3:45:70:15:6B:AE:BC:D4:06:61:D2:26:5E:9D:4A:46:6D:84
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/zKXTRXAVa6681AZh0iZenUpGbYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.117.0/24
77.111.123.0/24
92.61.106.0/24
92.61.109.0/24
185.112.241.0-185.112.243.255
Signature Algorithm: sha256WithRSAEncryption
9c:c3:20:01:11:31:ec:29:f1:c0:1a:02:2a:c8:bb:a0:7e:62:
c1:10:9f:60:12:96:5c:07:30:79:c9:14:24:68:b4:33:8f:9f:
fd:de:9b:1c:86:88:4b:17:2c:a9:28:66:18:13:40:a2:55:1d:
21:a2:8f:37:35:b1:e3:ee:68:22:ac:10:74:bf:35:95:45:41:
f9:1f:b8:08:6f:c5:c4:4c:a3:ee:de:f6:9b:31:83:02:61:52:
48:90:71:b1:eb:cb:eb:6b:81:18:48:6c:33:29:15:16:46:c6:
20:77:b0:f0:4f:5c:55:a4:1a:75:92:3d:f7:6f:a8:51:1a:b4:
c3:90:3a:c1:44:e0:ff:f0:1a:4a:04:07:8b:fc:5c:0a:44:5d:
71:cf:c5:04:71:af:04:53:2c:7e:35:0a:31:bc:75:99:70:be:
c5:6a:1c:bf:2b:e7:7d:d8:69:b8:2f:87:36:11:07:c8:00:a8:
d8:52:98:2f:23:a7:9c:5d:6e:41:20:74:32:60:2a:37:d6:46:
a1:cb:92:5b:e5:9a:4c:d4:1c:7f:9c:c5:04:75:30:5c:b8:6c:
d2:db:62:72:47:76:91:5d:cb:13:e0:af:e2:55:30:ad:03:97:
2d:47:48:8e:0f:81:8f:bf:89:aa:89:bb:ac:4b:93:3a:bc:c6:
d1:32:37:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:22:02 2026 by rpki-client