Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Pzk8yxVIPhwdb5N5flJ0Zd4OABA.roa
File: Pzk8yxVIPhwdb5N5flJ0Zd4OABA.roa (raw, json)
Hash identifier: L68KEWuvyB7Xrq6MkHZWTp9dGxXomB7soOXUSVLgtFU=
Subject key identifier: 3F:39:3C:CB:15:48:3E:1C:1D:6F:93:79:7E:52:74:65:DE:0E:00:10
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019EFEFB8417C3EDF36B9FDAE24463CC11BC
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Pzk8yxVIPhwdb5N5flJ0Zd4OABA.roa
Signing time: Thu 25 Jun 2026 13:32:36 +0000
ROA not before: Thu 25 Jun 2026 13:32:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154383
IP address blocks: 88.209.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fe:fb:84:17:c3:ed:f3:6b:9f:da:e2:44:63:cc:11:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jun 25 13:32:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3f393ccb15483e1c1d6f93797e527465de0e0010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ae:c7:b4:bf:9a:f2:96:4f:a5:82:23:bd:99:
83:be:ff:0f:88:47:b4:0c:f2:b5:4f:d5:d7:b2:bc:
f5:66:70:78:0b:57:89:af:f3:e2:df:25:6f:4c:50:
86:19:40:07:db:e4:b7:e5:10:4a:d2:c0:51:89:f8:
3d:08:5a:f9:08:5d:35:b3:56:3f:f2:33:3a:53:aa:
af:0b:db:60:ee:55:22:ec:7d:6f:74:c3:34:6b:ad:
43:e4:80:1e:53:9e:51:a3:80:5e:92:40:40:80:8b:
9e:f4:b6:08:94:be:0c:24:63:98:a9:bf:55:73:68:
b8:48:71:4b:db:90:7d:b8:8e:ad:c8:22:cf:7c:68:
92:2e:ad:e2:12:d1:83:6f:d8:8f:13:eb:80:58:24:
d9:fa:08:2c:ff:4d:47:1b:9e:de:b2:fe:2e:96:65:
9f:c5:9c:a2:04:19:a1:16:b2:52:48:c5:ec:d0:b5:
e8:da:65:fe:50:10:06:59:73:4f:96:cd:11:8d:e7:
12:b0:8e:d3:80:02:1e:56:30:34:32:ff:6b:73:84:
38:f9:38:62:33:23:92:77:5b:72:e4:f6:68:c0:b8:
2b:2f:d2:a3:3e:98:e9:3c:7a:11:fe:a4:ad:bc:59:
d7:a9:bb:8b:7d:39:1f:d2:21:e1:aa:d3:24:85:5c:
d9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:39:3C:CB:15:48:3E:1C:1D:6F:93:79:7E:52:74:65:DE:0E:00:10
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Pzk8yxVIPhwdb5N5flJ0Zd4OABA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.227.0/24
Signature Algorithm: sha256WithRSAEncryption
26:0a:ac:4c:a6:59:00:60:60:8e:3a:f0:ba:bd:96:64:67:9e:
c0:68:c3:3f:ca:5a:cb:c2:af:f8:d6:0f:1b:f6:5f:95:6a:e9:
ee:9f:b5:a8:45:1e:bc:44:bf:44:32:0c:db:c6:35:50:42:fc:
d2:ed:cf:8a:ca:58:fa:4e:b5:a9:de:ae:ac:48:a8:d4:53:09:
8a:03:60:6e:3c:c3:f0:9b:51:33:84:56:1f:70:1b:3d:27:c9:
14:4f:96:8e:83:42:08:4d:72:56:c4:34:bc:e1:2c:c2:4b:be:
36:38:ee:44:76:0c:3b:6f:53:a3:f3:58:61:e5:6d:db:30:1c:
98:16:20:5f:74:6c:4d:a3:62:ca:b8:a7:40:58:3e:fb:70:32:
23:d3:d1:38:cd:0d:d0:cf:01:61:59:8d:21:4c:f9:9d:35:d8:
ed:b0:da:28:9f:0c:05:47:86:de:58:37:12:f3:2a:70:0a:1c:
06:ef:b4:0a:d7:86:26:99:4e:27:fb:c0:6b:4e:a3:ef:f4:d9:
9b:18:49:44:08:b0:54:f2:db:c4:c4:92:56:67:a9:96:95:e4:
73:83:53:2d:e7:12:cc:cf:75:f6:8a:6c:a0:2f:03:e2:9c:d9:
52:bc:83:82:66:88:24:ff:f3:b8:3e:b3:fc:5c:b5:61:c8:f1:
a4:1b:44:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 23:59:04 2026 by rpki-client