Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/9669c9-7351-4994-89ec-68b068a65736/1/ZlUIsrFC2j1d-YDeXH_zCWv5H4Y.roa
File: ZlUIsrFC2j1d-YDeXH_zCWv5H4Y.roa (raw, json)
Hash identifier: 4BEpnsqfl5QQeBL7aPSyKok9k4urK3XFWl7PnjDeyOI=
Subject key identifier: 66:55:08:B2:B1:42:DA:3D:5D:F9:80:DE:5C:7F:F3:09:6B:F9:1F:86
Certificate issuer: /CN=d1796cb137021998651f2ac41112cb8f05b2a0a0
Certificate serial: 01A0341535673A0B591183446D227585CA95
Authority key identifier: D1:79:6C:B1:37:02:19:98:65:1F:2A:C4:11:12:CB:8F:05:B2:A0:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0XlssTcCGZhlHyrEERLLjwWyoKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9669c9-7351-4994-89ec-68b068a65736/1/ZlUIsrFC2j1d-YDeXH_zCWv5H4Y.roa
Signing time: Mon 24 Aug 2026 14:03:20 +0000
ROA not before: Mon 24 Aug 2026 14:03:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39551
IP address blocks: 83.247.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/9669c9-7351-4994-89ec-68b068a65736/1/0XlssTcCGZhlHyrEERLLjwWyoKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/9669c9-7351-4994-89ec-68b068a65736/1/0XlssTcCGZhlHyrEERLLjwWyoKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0XlssTcCGZhlHyrEERLLjwWyoKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:34:15:35:67:3a:0b:59:11:83:44:6d:22:75:85:ca:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1796cb137021998651f2ac41112cb8f05b2a0a0
Validity
Not Before: Aug 24 14:03:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=665508b2b142da3d5df980de5c7ff3096bf91f86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:af:1e:b3:a3:3d:89:0e:eb:ba:d1:44:65:e3:
51:3d:78:c4:0d:d9:44:81:e9:45:01:08:77:76:61:
0a:93:67:8a:68:35:3c:8c:6c:37:77:4f:0e:1b:12:
e8:42:16:c1:44:39:2a:ee:52:7a:46:c1:d3:e9:b4:
ae:21:3f:63:e0:ee:ed:92:b6:f7:ca:4b:35:26:1f:
b0:a0:4e:e7:48:0b:fd:00:4a:9e:5f:0a:92:5c:75:
b3:1e:72:7c:ad:59:29:24:b7:ab:58:eb:e7:e4:93:
1d:08:c3:ff:f3:6d:52:d1:93:2a:9f:c1:1e:9d:60:
f1:5d:f5:4a:a6:de:cc:5d:50:d1:85:ff:5f:59:74:
c0:07:d1:68:91:4d:98:4b:e2:53:de:9f:4b:4a:a6:
ea:13:15:db:1c:46:4d:05:5a:ad:e4:8a:0a:8c:a5:
20:ff:bd:c1:50:a8:ff:4a:fb:39:9f:c9:ef:37:1d:
72:b7:98:61:21:9d:41:d9:6a:36:8d:02:df:0b:8b:
2e:6f:60:93:c4:89:be:a9:70:38:ad:ab:9d:f8:82:
28:40:9c:f1:37:1a:eb:d2:fb:a7:13:14:c7:09:5a:
da:64:15:58:b7:ef:ac:f4:6d:dd:3f:fe:5f:b9:c2:
dc:ea:71:56:3a:e2:0e:43:03:94:33:88:bc:67:1a:
51:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:55:08:B2:B1:42:DA:3D:5D:F9:80:DE:5C:7F:F3:09:6B:F9:1F:86
X509v3 Authority Key Identifier:
keyid:D1:79:6C:B1:37:02:19:98:65:1F:2A:C4:11:12:CB:8F:05:B2:A0:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0XlssTcCGZhlHyrEERLLjwWyoKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9669c9-7351-4994-89ec-68b068a65736/1/ZlUIsrFC2j1d-YDeXH_zCWv5H4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9669c9-7351-4994-89ec-68b068a65736/1/0XlssTcCGZhlHyrEERLLjwWyoKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.247.184.0/24
Signature Algorithm: sha256WithRSAEncryption
88:1e:b0:74:8c:a3:b4:3d:ac:9c:2e:01:ea:e6:3b:a3:9b:eb:
a3:16:c1:93:77:3b:e4:f4:aa:e3:a7:7a:08:19:20:e7:60:88:
84:4e:0a:05:d8:7e:86:64:20:90:22:cf:bf:c1:2a:a1:0a:7e:
52:7d:ec:90:ce:09:f4:d3:35:6f:11:c1:fb:83:7a:2f:bb:a8:
df:08:f8:e9:58:1f:db:bc:9d:e5:3e:25:a9:88:ac:dd:ec:05:
48:9a:a4:b8:a0:e3:96:5c:2c:18:be:12:90:3e:22:4a:b0:20:
aa:3b:ac:6c:44:dc:11:3b:cc:6b:60:26:9f:37:19:36:5d:0f:
0d:27:9e:bb:37:c1:3d:4f:b8:45:32:82:4b:ab:94:c7:fc:f5:
e7:5c:67:1d:61:c3:f1:ed:eb:49:e3:22:bf:cc:bb:fd:c2:4b:
53:64:f0:53:c6:54:9d:b1:98:54:80:2a:4f:4d:33:4d:92:a5:
86:fb:35:11:46:c4:24:c8:47:fa:eb:82:3a:f1:dd:1b:c4:04:
0f:7e:c8:88:17:03:15:e7:a6:77:19:9c:4b:1f:74:6c:a9:c3:
fc:97:27:d7:cb:da:52:12:1c:64:3d:24:1e:12:01:88:b4:8c:
01:33:a1:a3:a3:95:bd:5b:2a:f8:5e:c0:19:6e:fd:69:7f:43:
85:72:14:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 08:19:02 2026 by rpki-client