Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/ZhrQ5IL_6IQjHT_ZzSAvM4xJDIY.roa
File: ZhrQ5IL_6IQjHT_ZzSAvM4xJDIY.roa (raw, json)
Hash identifier: UhHZT4JNbmJP0ZhZOUwhUHh+Glok5HGLptsMbJnbE9A=
Subject key identifier: 66:1A:D0:E4:82:FF:E8:84:23:1D:3F:D9:CD:20:2F:33:8C:49:0C:86
Certificate issuer: /CN=663c7e368d18110a9287fd77a90e89c6736a78ca
Certificate serial: 019F2368CA5C68845B1057E5E996409B4FCE
Authority key identifier: 66:3C:7E:36:8D:18:11:0A:92:87:FD:77:A9:0E:89:C6:73:6A:78:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zjx-No0YEQqSh_13qQ6JxnNqeMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/ZhrQ5IL_6IQjHT_ZzSAvM4xJDIY.roa
Signing time: Thu 02 Jul 2026 15:18:17 +0000
ROA not before: Thu 02 Jul 2026 15:18:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8075
IP address blocks: 45.154.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/Zjx-No0YEQqSh_13qQ6JxnNqeMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/Zjx-No0YEQqSh_13qQ6JxnNqeMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zjx-No0YEQqSh_13qQ6JxnNqeMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ca:5c:68:84:5b:10:57:e5:e9:96:40:9b:4f:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=663c7e368d18110a9287fd77a90e89c6736a78ca
Validity
Not Before: Jul 2 15:18:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=661ad0e482ffe884231d3fd9cd202f338c490c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bd:f2:ca:af:ef:86:f6:0c:82:6b:f6:49:c1:
d6:b5:e4:fb:53:ad:2b:83:67:df:4b:5a:23:5f:b1:
15:bb:44:9b:c2:79:f9:cb:16:80:5c:1d:ae:9c:cb:
c9:76:a1:ca:9e:bc:e3:48:9a:bc:58:df:7b:4e:97:
93:7f:71:14:1c:c1:0c:6c:d0:4e:26:a4:a0:7f:9f:
fb:6a:19:84:55:e2:7a:24:fc:f2:65:68:05:b0:1b:
8e:d3:a1:57:e3:5f:60:93:7b:79:98:f6:0a:68:1f:
7a:ec:ca:79:9c:8f:ca:85:12:91:58:55:3f:b9:6f:
c4:a2:33:0f:70:9e:5c:88:63:f4:06:73:67:85:0b:
e5:64:a0:69:fe:b0:3d:0d:9d:ab:ed:71:35:f3:52:
8e:05:83:47:d3:b2:c6:28:90:9f:50:c9:1b:e5:08:
7e:83:38:3e:88:dc:8a:20:aa:f8:1e:45:11:f9:f1:
d8:e6:3b:a0:72:aa:52:a7:75:c9:f2:c2:c5:9e:9c:
96:56:3b:16:e3:7b:c4:01:6a:8f:11:6d:e1:fd:ce:
d7:7b:cc:d8:98:5b:ff:fa:1a:d2:b7:af:24:0b:68:
e1:e7:c4:63:76:4d:a3:4c:8b:e4:93:1c:03:a5:cf:
d1:a7:af:28:b2:27:9e:fa:b7:52:c1:67:75:fb:34:
4f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:1A:D0:E4:82:FF:E8:84:23:1D:3F:D9:CD:20:2F:33:8C:49:0C:86
X509v3 Authority Key Identifier:
keyid:66:3C:7E:36:8D:18:11:0A:92:87:FD:77:A9:0E:89:C6:73:6A:78:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zjx-No0YEQqSh_13qQ6JxnNqeMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/ZhrQ5IL_6IQjHT_ZzSAvM4xJDIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/Zjx-No0YEQqSh_13qQ6JxnNqeMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.21.0/24
Signature Algorithm: sha256WithRSAEncryption
49:93:68:0e:5f:4f:d1:84:a5:39:98:ba:fe:b1:31:d2:ab:19:
02:9a:4c:6e:f5:71:fd:c7:37:24:17:ed:85:4b:e1:5d:b9:09:
e6:01:6e:c6:41:24:0b:48:30:84:d0:50:65:da:13:85:b3:09:
0b:96:c6:10:81:e6:6f:9f:26:3e:41:67:33:59:60:b3:42:54:
58:b5:b7:02:e9:48:65:e3:d9:dc:b5:ea:b2:3b:9c:e3:ba:8b:
69:33:76:69:86:30:ba:26:73:e2:78:f7:34:43:a7:c6:64:e0:
a3:5f:23:91:12:18:6b:81:33:3a:79:f2:e6:9d:36:0c:87:74:
ce:a1:50:e5:4d:26:fe:8a:76:6e:33:0f:00:30:66:5d:2d:fb:
48:43:05:d5:54:10:c3:77:72:5c:fe:ea:cd:28:ac:1e:51:bc:
b0:5d:17:06:27:f4:b5:42:1d:fd:c9:92:2d:1d:ab:8b:4b:26:
53:b6:0d:7a:7b:b0:3f:67:05:03:a7:74:ec:e2:6c:f4:d2:7f:
52:5e:0b:f1:4a:89:80:81:74:1a:43:14:c6:fb:15:b9:ac:0c:
2c:d2:2e:34:6f:46:f0:da:b3:c5:c0:d7:93:09:85:ef:1b:f0:
78:fb:bb:16:83:cc:a9:c8:47:d4:a4:0d:15:7d:62:96:af:a7:
90:ed:4f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 05:27:26 2026 by rpki-client