Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/2ZHH4Q6dG8aXC8ovz7FWqZ4un98.roa
File: 2ZHH4Q6dG8aXC8ovz7FWqZ4un98.roa (raw, json)
Hash identifier: V1sN5tzjBC8NrYtYzVIsGbciClAlLvbSPtzWowwXYbg=
Subject key identifier: D9:91:C7:E1:0E:9D:1B:C6:97:0B:CA:2F:CF:B1:56:A9:9E:2E:9F:DF
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01A008CE874848E8F1B9588B865806B95285
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/2ZHH4Q6dG8aXC8ovz7FWqZ4un98.roa
Signing time: Sun 16 Aug 2026 04:22:27 +0000
ROA not before: Sun 16 Aug 2026 04:22:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214432
IP address blocks: 77.242.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:08:ce:87:48:48:e8:f1:b9:58:8b:86:58:06:b9:52:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Aug 16 04:22:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d991c7e10e9d1bc6970bca2fcfb156a99e2e9fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:26:a8:fa:99:0c:88:0f:d0:80:10:92:47:21:
08:b0:91:aa:55:60:ca:5b:cf:4e:2a:9c:f8:a9:7e:
df:bb:3a:ac:89:54:fa:0b:f9:7f:71:6b:da:d7:56:
8d:cc:8a:12:45:cb:c6:1e:32:b2:29:18:7f:30:84:
2f:e0:3c:bf:d5:b9:4b:08:bc:08:95:7b:62:46:c8:
56:a9:af:b7:85:87:d8:58:9c:88:d3:d1:ba:8f:7e:
79:d7:6d:02:45:40:82:af:01:67:a9:31:82:95:12:
01:fa:4f:b5:06:cb:9b:25:47:12:7d:81:40:b0:46:
18:25:3e:74:48:76:e9:35:1e:04:68:8c:b4:d4:d0:
d0:11:42:33:97:d2:75:0b:a1:f7:67:fc:b7:0c:3b:
e5:04:cd:1a:c2:e2:86:5a:6a:4d:21:30:39:c8:85:
b6:6f:07:6e:49:0d:d5:d6:ba:38:dc:2b:72:a2:1b:
83:42:08:f2:1f:a1:a4:7b:8f:73:14:94:5a:72:0e:
df:67:c4:c0:3e:7b:db:fc:28:42:04:98:d9:57:85:
d3:09:f3:c0:79:9d:7b:0c:37:46:00:63:af:6e:be:
97:04:da:af:e0:ac:32:78:ff:aa:81:5b:5e:8e:ad:
48:37:7e:7b:44:c7:45:85:1b:07:d2:db:41:62:03:
89:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:91:C7:E1:0E:9D:1B:C6:97:0B:CA:2F:CF:B1:56:A9:9E:2E:9F:DF
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/2ZHH4Q6dG8aXC8ovz7FWqZ4un98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.242.159.0/24
Signature Algorithm: sha256WithRSAEncryption
84:b8:65:96:d3:e6:a2:70:22:69:d7:8f:5e:d0:a8:85:09:09:
34:ea:7a:be:51:2f:31:7e:fd:2a:83:c0:b8:68:99:41:70:61:
3c:15:ad:1d:e2:26:90:52:77:32:b7:89:a2:d2:ff:55:53:dd:
e8:e8:42:49:ca:05:0f:c7:0e:1d:9f:02:8f:89:87:cd:3d:51:
8e:1c:dc:c3:81:54:50:16:ac:6f:6a:26:e4:cc:fc:0a:c5:ca:
75:8f:5c:22:05:4f:da:8f:d5:10:3f:31:34:f8:8a:0e:14:ad:
48:43:4a:11:1f:44:c5:10:55:f5:e5:0e:c3:fc:a0:31:30:87:
c3:e1:56:5c:70:8a:c1:eb:04:44:ec:ac:e4:e3:8e:d1:a6:cf:
ff:29:cb:d6:64:fc:b4:26:8e:2d:5d:99:55:78:72:9f:ae:55:
07:70:af:98:05:a8:f8:28:91:c9:67:17:76:23:8d:29:35:8e:
97:c6:cf:61:69:91:b5:4a:95:65:a6:ad:14:41:e3:1e:39:29:
a3:73:6f:b3:1f:5a:44:29:00:74:08:d8:27:49:d3:cc:74:4b:
f7:30:01:46:a4:2b:3b:cd:1a:47:d0:a3:80:54:8d:68:0f:18:
2f:9e:df:e3:51:22:ba:9c:0c:15:6c:cb:88:fe:99:93:88:48:
b7:0c:99:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:27:59 2026 by rpki-client