Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/ZhFhxt2LDmJhiti9ri_3gH9r4JI.roa
File: ZhFhxt2LDmJhiti9ri_3gH9r4JI.roa (raw, json)
Hash identifier: sLFEG0Gg/0vGQTLpwabEBQFWGZR3pbIZPGZq6+BimA8=
Subject key identifier: 66:11:61:C6:DD:8B:0E:62:61:8A:D8:BD:AE:2F:F7:80:7F:6B:E0:92
Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Certificate serial: 01A12F0BB80B48EFCCB936A0436A32390CE0
Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/ZhFhxt2LDmJhiti9ri_3gH9r4JI.roa
Signing time: Mon 12 Oct 2026 07:37:39 +0000
ROA not before: Mon 12 Oct 2026 07:37:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 91.200.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:0b:b8:0b:48:ef:cc:b9:36:a0:43:6a:32:39:0c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Validity
Not Before: Oct 12 07:37:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=661161c6dd8b0e62618ad8bdae2ff7807f6be092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fa:f4:9a:b7:60:a9:0b:28:7f:98:da:06:94:
91:1c:c0:93:52:66:2a:8c:2a:4e:22:6c:4a:4f:a1:
48:a8:90:27:ff:a3:65:0e:28:90:c3:68:93:6c:79:
f0:82:88:38:06:92:cb:16:81:a9:eb:4c:eb:6b:62:
73:85:ef:a2:14:27:54:24:b7:56:63:39:3f:ed:24:
78:24:d7:eb:e9:a9:73:83:c5:3f:c5:04:c7:b7:d2:
a9:54:dc:e2:2c:63:1b:8a:c5:cd:9c:2e:49:18:78:
ed:bd:8b:12:53:70:40:7d:9b:c1:6c:95:0f:67:c3:
18:cc:a9:47:c3:b6:a6:65:ee:6c:f9:c1:d5:5b:d0:
b6:ca:4e:75:15:08:c4:b9:f7:89:96:4e:af:36:06:
22:b8:78:4a:18:e7:b3:12:6d:3c:ec:ff:77:1b:dc:
67:53:5f:b5:43:57:21:88:99:f2:b3:b3:a5:55:c2:
54:49:97:32:aa:e4:8f:d6:85:f0:b4:48:46:66:ef:
a8:7d:14:c8:73:a2:84:49:3f:ba:5d:f7:25:d8:75:
9a:ff:9c:cb:8e:0e:6e:5d:38:84:f1:51:90:d6:0c:
fb:8e:a1:aa:d8:53:c5:5b:77:00:ba:73:4f:19:db:
c3:87:86:cb:12:7e:ae:b3:f1:38:e9:3f:ed:19:ed:
bc:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:11:61:C6:DD:8B:0E:62:61:8A:D8:BD:AE:2F:F7:80:7F:6B:E0:92
X509v3 Authority Key Identifier:
keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/ZhFhxt2LDmJhiti9ri_3gH9r4JI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.253.0/24
Signature Algorithm: sha256WithRSAEncryption
44:a8:4f:9f:fb:22:75:95:f4:ac:a9:c7:74:50:de:f7:78:73:
34:03:31:fe:f3:af:df:56:73:e7:8b:7a:fd:7c:f7:d8:98:a6:
e8:d3:b1:4f:bc:1c:9a:c0:14:3c:81:a4:b5:b9:c8:dc:d0:fb:
61:48:7d:5d:38:2c:c8:b9:6c:2f:fc:6e:83:4e:8e:79:c8:5e:
71:8c:38:8b:cf:be:bb:ed:1b:07:8b:53:f8:51:f7:35:6a:d8:
fd:0d:c9:3b:17:ab:f2:e4:fb:be:08:77:61:f8:ce:91:e6:e7:
ab:20:45:04:32:46:31:9c:cb:e6:57:ae:ed:48:35:85:83:ac:
a2:56:d3:7a:68:b1:69:c3:25:1f:8c:6c:b6:74:7b:2d:f5:c0:
d6:5b:ec:d1:b3:c9:03:13:0a:05:aa:b0:cf:d4:54:33:16:90:
fc:8c:f3:ec:86:24:6c:d6:bc:30:21:76:15:5b:ba:3d:f4:ca:
b7:51:a1:68:17:38:fa:ac:0f:9c:48:ea:f4:dd:04:82:6a:88:
a8:99:93:fe:cb:fc:8c:0f:ea:b8:cb:a6:51:43:62:f3:cf:1a:
58:50:4c:ed:18:ca:36:6e:74:a7:af:36:cc:a6:d4:d9:63:b9:
1a:e1:49:2c:d6:61:0f:71:7d:36:e6:17:8d:1d:c8:01:b0:d5:
a9:97:ee:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 02:28:46 2026 by rpki-client