Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zVr-RJJf9eNi4dMhPvt5_uyBe-g.roa
File: zVr-RJJf9eNi4dMhPvt5_uyBe-g.roa (raw, json)
Hash identifier: G1nGzBrhqa8MZm6jdRGIwJxP7cf78lG5IhrA+91QRLQ=
Subject key identifier: CD:5A:FE:44:92:5F:F5:E3:62:E1:D3:21:3E:FB:79:FE:EC:81:7B:E8
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019F36896DC0EB614D452D12F4582DBDDBD7
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zVr-RJJf9eNi4dMhPvt5_uyBe-g.roa
Signing time: Mon 06 Jul 2026 08:26:43 +0000
ROA not before: Mon 06 Jul 2026 08:26:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399870
IP address blocks: 2.58.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Jul 2026 14:28:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:36:89:6d:c0:eb:61:4d:45:2d:12:f4:58:2d:bd:db:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jul 6 08:26:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cd5afe44925ff5e362e1d3213efb79feec817be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:10:70:14:55:3a:58:3e:22:89:f3:70:3a:3c:
5e:ee:e2:ba:38:fc:fe:fb:66:b8:0b:ba:76:2c:92:
ed:61:d0:a4:af:05:4f:8a:82:9c:62:06:13:a9:f3:
50:71:4d:12:27:3c:b8:86:47:d0:85:d9:71:3c:ea:
fc:f0:7c:0c:bc:fa:34:7a:72:ea:dc:db:6f:4f:34:
99:e2:c0:8e:19:f5:c7:79:bd:e8:61:54:fa:ff:65:
a6:38:07:28:e6:fd:44:de:b3:0a:d0:d0:7b:63:04:
28:ff:b9:da:a6:ce:37:fb:9f:19:7a:69:61:a8:05:
e4:3e:3f:f4:51:a7:93:f8:10:22:3b:30:4d:20:31:
af:1c:71:e6:76:d0:75:a0:a8:4b:8c:24:ad:7a:25:
0d:e8:5d:1a:91:1c:89:32:15:96:23:da:e2:31:5e:
bf:50:91:1b:79:bc:7f:0b:84:77:04:93:3b:bb:68:
65:dd:9c:f2:cc:41:1c:21:4b:04:f1:e5:c0:c1:9e:
8f:0b:d3:08:6d:6a:86:3f:f6:1a:85:10:e8:cc:17:
69:46:00:fe:06:4d:f2:ab:5f:93:f8:85:ee:1e:19:
49:9d:62:b4:22:67:65:17:c8:30:d6:51:c5:8f:f0:
a9:15:23:34:f4:09:40:ed:ae:fe:99:38:57:2a:d9:
87:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:5A:FE:44:92:5F:F5:E3:62:E1:D3:21:3E:FB:79:FE:EC:81:7B:E8
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zVr-RJJf9eNi4dMhPvt5_uyBe-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.170.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:d9:0d:bd:c4:aa:d2:dd:d2:4c:da:1a:2e:44:59:f3:b3:d1:
c7:a5:44:f1:03:b5:d3:88:a3:3c:6c:5b:43:12:eb:b7:88:d3:
21:80:a8:bb:89:63:78:98:6a:42:96:ff:b4:e8:3c:0b:52:76:
48:b1:42:9a:45:94:95:7b:ae:6e:73:9f:1d:9c:12:80:ff:6d:
93:1d:7d:28:fd:87:76:b1:f8:80:ea:bc:c6:12:56:a4:37:04:
5d:38:4b:56:77:d3:e2:6e:bb:90:41:dd:71:24:08:b0:5f:1d:
12:73:b7:a0:fb:2e:76:fe:70:46:9e:ce:a5:a0:d7:3c:21:33:
07:9c:63:fd:9b:8f:cd:e8:2f:0b:f1:e8:88:94:c2:c3:ab:90:
5c:e7:d3:5a:7a:e1:17:94:34:7a:f1:64:81:5c:ae:1b:37:52:
1d:bb:df:6f:5f:49:3f:4d:af:a1:95:06:37:14:70:86:c1:6f:
f6:a4:ae:36:75:c4:86:3a:9f:35:22:2d:bc:83:f2:0e:64:0b:
e6:0e:c5:70:83:d6:6b:0d:de:7b:d7:60:0f:96:c8:7e:82:5e:
64:6e:64:34:33:28:ef:95:99:b5:b5:27:8f:88:e4:22:2e:2b:
96:07:42:75:f1:d5:be:3b:38:30:f1:f8:e7:f7:27:31:b3:6a:
91:2c:06:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 16 22:49:41 2026 by rpki-client