Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/zSwZXWBfonNyDlrmaSVJFy_DDs8.roa
File: zSwZXWBfonNyDlrmaSVJFy_DDs8.roa (raw, json)
Hash identifier: ZdRom6cVEVjE5mIqo8VcYKi/1dFdLDzlukU7wd06Xbk=
Subject key identifier: CD:2C:19:5D:60:5F:A2:73:72:0E:5A:E6:69:25:49:17:2F:C3:0E:CF
Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad
Certificate serial: 019FC32BCF66F47A32610CFEE23D15A7F033
Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/zSwZXWBfonNyDlrmaSVJFy_DDs8.roa
Signing time: Sun 02 Aug 2026 15:50:55 +0000
ROA not before: Sun 02 Aug 2026 15:50:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9123
IP address blocks: 72.56.0.0/20 maxlen: 32
72.56.32.0/21 maxlen: 32
72.56.232.0/21 maxlen: 32
72.56.240.0/21 maxlen: 32
72.56.248.0/22 maxlen: 32
72.56.252.0/23 maxlen: 32
200.165.224.0/20 maxlen: 32
201.24.112.0/20 maxlen: 32
201.34.128.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 09:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c3:2b:cf:66:f4:7a:32:61:0c:fe:e2:3d:15:a7:f0:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad
Validity
Not Before: Aug 2 15:50:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cd2c195d605fa273720e5ae6692549172fc30ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:35:52:a0:48:d1:8e:de:4a:e7:d9:b5:36:87:
65:b0:42:b3:da:c0:9f:19:99:3f:b9:be:59:c8:2b:
81:1b:41:54:91:ed:19:39:12:f6:48:8c:9d:c9:5b:
c9:4f:96:30:c2:6b:60:f1:3d:8d:1f:49:40:49:de:
39:1e:2b:25:19:c8:4e:03:63:c5:ba:db:90:9f:e5:
9b:eb:b8:1f:42:ba:fd:a3:85:b7:9e:14:01:f4:ea:
6b:c6:3f:76:52:ea:bd:27:e0:1e:01:03:aa:10:c9:
2c:49:93:a5:e8:29:ec:2a:02:ba:75:f2:9b:8d:c6:
15:93:b7:0f:64:f6:b8:0e:81:fd:ce:89:c5:51:2c:
ff:f6:2c:b7:91:be:01:e5:08:70:7e:d8:b9:aa:20:
b8:cd:34:4d:14:d1:2d:29:f3:e9:7e:8f:f0:ed:01:
35:18:42:9a:3d:f2:7a:d8:81:ac:49:31:e5:2c:d8:
b9:db:4c:61:b8:4c:e8:44:f2:d7:40:2c:b7:80:5f:
56:a5:95:e1:cd:3a:59:cb:6c:75:37:6f:35:49:f4:
5c:2d:55:4c:de:e5:33:10:83:27:44:a4:80:8f:50:
16:62:a3:49:db:01:8a:75:23:35:bb:92:dd:32:2d:
60:55:c1:14:12:29:4b:c1:d3:01:89:27:05:7a:4a:
17:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:2C:19:5D:60:5F:A2:73:72:0E:5A:E6:69:25:49:17:2F:C3:0E:CF
X509v3 Authority Key Identifier:
keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/zSwZXWBfonNyDlrmaSVJFy_DDs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
72.56.0.0/20
72.56.32.0/21
72.56.232.0-72.56.253.255
200.165.224.0/20
201.24.112.0/20
201.34.128.0/20
Signature Algorithm: sha256WithRSAEncryption
58:a5:e9:f2:f5:ab:04:43:4b:a5:4c:64:3a:e3:80:8d:82:3c:
5b:90:1b:90:8d:ea:e1:f5:da:f5:d6:88:fe:cc:34:93:1a:28:
63:91:e0:64:bb:14:76:52:08:f6:96:1b:ae:41:c3:a4:67:6f:
f4:05:9b:40:c8:61:66:10:f1:cd:76:98:1f:f4:6f:c3:e0:f9:
3d:95:3b:e4:7d:ae:10:b5:0b:d6:e5:84:46:c5:e1:62:a2:99:
fe:87:ac:3d:92:d4:49:4b:cc:99:27:e5:66:9a:c8:7f:41:47:
b6:1b:c7:44:9c:35:3b:ba:8d:5a:6b:6f:9b:db:de:47:2d:47:
05:9a:a5:16:07:bb:52:d2:53:2f:be:2a:10:15:b9:bd:6d:45:
99:0a:36:63:90:f4:99:35:13:71:a0:2c:42:70:af:9d:d5:a6:
a6:f9:20:45:59:bd:d1:2c:23:b0:c0:d2:b3:92:be:78:9f:8b:
02:35:18:67:7a:65:39:85:f8:cf:33:b2:e9:f3:8a:19:15:25:
3c:58:75:ad:b3:35:34:c3:da:b0:ab:00:5a:aa:28:be:c0:37:
3b:63:12:0f:b9:46:1a:6d:28:9e:0a:bb:2f:11:73:cb:52:20:
98:b5:66:3d:05:fc:21:0e:d0:e4:15:89:fd:50:33:4b:08:4e:
f8:e9:4e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 19:25:46 2026 by rpki-client