Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/za49uQTEKls86bLU1ICfYcOW-DY.roa
File: za49uQTEKls86bLU1ICfYcOW-DY.roa (raw, json)
Hash identifier: ajKjd3mzgNAKIrt/JchAzXA48vfCOds3lEY+LRwyDqw=
Subject key identifier: CD:AE:3D:B9:04:C4:2A:5B:3C:E9:B2:D4:D4:80:9F:61:C3:96:F8:36
Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad
Certificate serial: 01A154AFF120FA972D1FF8794731F26F6860
Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/za49uQTEKls86bLU1ICfYcOW-DY.roa
Signing time: Mon 19 Oct 2026 15:02:58 +0000
ROA not before: Mon 19 Oct 2026 15:02:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209372
IP address blocks: 72.56.128.0/18 maxlen: 24
72.56.192.0/20 maxlen: 24
72.56.208.0/21 maxlen: 21
191.218.144.0/20 maxlen: 24
191.223.16.0/20 maxlen: 24
200.163.80.0/20 maxlen: 32
200.203.0.0/20 maxlen: 32
201.2.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:af:f1:20:fa:97:2d:1f:f8:79:47:31:f2:6f:68:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad
Validity
Not Before: Oct 19 15:02:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cdae3db904c42a5b3ce9b2d4d4809f61c396f836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9b:bc:1a:b6:c1:d5:10:31:d4:90:75:8d:6c:
5a:f4:5e:5e:e9:d0:cc:0d:62:8b:3d:41:8c:dd:d1:
8c:84:8e:7e:57:b9:76:88:0f:32:3b:bb:0f:41:a7:
72:90:02:da:4f:26:e7:f0:c3:1b:e3:ef:74:61:20:
f6:e9:27:48:93:8a:a2:d8:13:35:61:d1:27:40:a4:
20:f8:16:51:39:d0:e4:c4:70:66:57:df:59:4d:d4:
c8:1a:34:d9:e2:8f:56:d7:3f:d4:26:55:4a:04:ab:
ba:4f:ab:71:2b:aa:73:6e:c2:e5:21:8c:a9:68:b1:
32:7d:d7:c2:bf:4a:5c:96:dd:2a:fe:df:ab:8b:c0:
33:11:21:4b:dd:a1:23:0a:d6:da:4a:c8:f7:4d:76:
20:e7:78:f5:67:4d:92:ed:fa:58:50:c0:e1:d8:81:
c7:9b:75:0e:62:77:a2:03:68:7b:1c:53:82:08:4e:
f1:1b:67:ac:44:14:c3:91:a9:5f:1b:f7:5e:04:b3:
ea:42:07:ca:83:a6:95:b8:7a:f2:7b:5f:6a:3b:77:
ce:15:e7:96:27:1c:d1:58:d6:03:3a:0c:70:47:db:
5d:5a:0a:e2:7d:75:eb:d8:33:4d:c3:19:1b:61:fa:
2e:10:9d:75:c7:12:80:32:ea:ee:77:9d:37:45:8b:
17:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:AE:3D:B9:04:C4:2A:5B:3C:E9:B2:D4:D4:80:9F:61:C3:96:F8:36
X509v3 Authority Key Identifier:
keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/za49uQTEKls86bLU1ICfYcOW-DY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
72.56.128.0-72.56.215.255
191.218.144.0/20
191.223.16.0/20
200.163.80.0/20
200.203.0.0/20
201.2.224.0/20
Signature Algorithm: sha256WithRSAEncryption
b8:04:3a:af:31:8d:b8:f1:a1:57:34:ed:9c:33:55:4a:1e:5b:
92:ef:c8:46:76:fa:f9:08:26:e4:e0:26:75:c2:57:40:89:52:
44:2f:74:04:1c:bb:6f:70:f4:3e:9f:d6:d1:f5:c2:3e:20:ef:
39:fc:4d:8d:e1:69:fd:3e:49:e5:62:d5:e7:c8:4d:c0:51:e1:
48:79:d8:60:7f:b9:ab:61:31:87:27:50:8c:45:e2:6c:59:a4:
57:98:a9:24:68:56:96:7f:2c:37:23:a1:a5:a4:af:86:05:4e:
8b:e9:6d:68:33:23:8b:9d:2c:f6:44:b3:7e:5f:60:c2:0e:e3:
bc:cb:a6:0d:13:b0:68:5c:e9:c2:58:70:53:a2:67:61:79:67:
8f:4f:90:58:95:cc:95:ba:30:2e:3b:50:a7:b5:47:91:ed:f7:
55:9a:16:b8:14:f2:76:16:7a:9d:2f:4b:80:34:24:60:fb:16:
46:5f:2b:0c:1b:8d:63:70:11:2d:9c:ed:e1:fb:b7:77:8d:d5:
7a:53:04:17:9f:4f:4a:b5:79:29:42:01:d0:ed:06:d2:53:dc:
a5:08:90:64:99:f0:7f:38:1f:42:3e:22:1d:d8:19:a7:bd:75:
13:c2:22:ad:5f:7b:f4:9d:7f:b8:f9:f3:a0:46:0e:9f:26:65:
d8:f0:5c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:53:59 2026 by rpki-client