Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/Zy3huIOnJv71Y7Kvb-IYIqP5Ib0.roa
File: Zy3huIOnJv71Y7Kvb-IYIqP5Ib0.roa (raw, json)
Hash identifier: UiE8ySnZG8AglxSZLRGVHABCpVAJCHbk9VQcVxi8Tl4=
Subject key identifier: 67:2D:E1:B8:83:A7:26:FE:F5:63:B2:AF:6F:E2:18:22:A3:F9:21:BD
Certificate issuer: /CN=c060d46d1d8046b4d74e4d815818c8e3659edbe9
Certificate serial: 019F23687B6F26B5664227BD765933CABF3A
Authority key identifier: C0:60:D4:6D:1D:80:46:B4:D7:4E:4D:81:58:18:C8:E3:65:9E:DB:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/Zy3huIOnJv71Y7Kvb-IYIqP5Ib0.roa
Signing time: Thu 02 Jul 2026 15:17:57 +0000
ROA not before: Thu 02 Jul 2026 15:17:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211484
IP address blocks: 213.220.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 Jul 2026 15:19:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:7b:6f:26:b5:66:42:27:bd:76:59:33:ca:bf:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c060d46d1d8046b4d74e4d815818c8e3659edbe9
Validity
Not Before: Jul 2 15:17:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=672de1b883a726fef563b2af6fe21822a3f921bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c8:ca:41:b8:1f:e4:76:57:9e:ec:c2:63:e3:
21:42:0f:bc:6c:8e:01:43:a6:93:77:83:d1:84:54:
65:4b:15:46:d2:05:b9:e7:f3:62:8f:82:02:86:9a:
73:15:74:c1:82:c2:e3:48:ed:f8:c8:41:ed:25:2f:
3e:a3:9a:b2:89:c6:96:f0:52:27:01:19:05:04:ad:
22:6a:c6:a7:96:cf:84:8f:2d:09:21:58:a5:bd:f6:
fe:b5:ec:17:7d:d7:9c:6a:b3:1b:6f:61:77:bd:20:
5b:8c:9d:9d:3e:3d:5b:dd:cb:3c:0a:dd:e1:9d:44:
de:be:75:7f:61:c0:88:f6:66:03:a7:fd:2e:a9:71:
fe:f2:04:91:56:ac:22:ad:9b:56:22:30:c7:ac:29:
7b:e7:19:4a:82:3f:13:41:f7:4b:ac:0f:58:aa:65:
e0:f3:b2:82:35:1a:13:f8:03:5c:d8:b0:a4:7b:71:
22:67:41:63:e8:b7:3c:d1:07:01:f9:56:e2:8c:69:
9f:e6:51:c3:e0:1b:55:fd:ee:bb:a2:38:d0:a5:02:
f7:d8:79:ff:57:a3:d9:02:ba:90:73:17:58:86:e0:
09:5b:f1:54:b0:31:79:c6:bf:82:ff:ac:78:3b:f0:
3e:1a:dc:d5:e2:47:fd:74:34:17:d3:de:5e:27:21:
32:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:2D:E1:B8:83:A7:26:FE:F5:63:B2:AF:6F:E2:18:22:A3:F9:21:BD
X509v3 Authority Key Identifier:
keyid:C0:60:D4:6D:1D:80:46:B4:D7:4E:4D:81:58:18:C8:E3:65:9E:DB:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/Zy3huIOnJv71Y7Kvb-IYIqP5Ib0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.220.3.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:59:d5:41:12:40:e4:d1:fc:67:a7:19:27:04:b9:25:2a:7f:
9f:b2:18:33:e9:d9:71:87:ed:61:1f:e0:63:26:65:2e:25:e1:
95:d4:26:01:ee:fb:cc:3f:b5:81:09:b5:85:47:98:57:15:45:
0f:d0:8d:6b:ad:ce:ea:39:31:29:da:00:0b:9d:59:a8:7c:c8:
bb:c5:0a:e3:27:84:6a:fe:da:0b:09:08:a7:5b:6b:0d:f2:96:
30:24:22:80:2f:e2:0d:df:d4:37:c6:74:7e:4c:08:f6:84:c6:
0b:bf:d6:e3:e3:68:87:0f:12:3a:67:0c:e7:75:c5:37:81:98:
5d:cd:36:6a:df:83:40:1c:c0:4d:b0:da:00:80:ee:fe:83:84:
1e:aa:8a:46:ee:fe:51:b9:7b:72:02:44:df:b4:30:c4:10:59:
ca:e0:27:1f:c5:14:a7:b2:f7:de:fb:2d:ae:b5:8d:25:d0:53:
b6:15:55:81:09:a0:83:cd:46:49:ee:f5:a7:3f:4a:62:33:cb:
e0:e9:de:a6:69:67:65:0b:98:6e:a6:db:97:84:62:82:af:be:
06:89:f6:9d:1c:ef:84:79:c6:e4:b1:98:d6:28:e5:5a:6a:58:
4d:d4:bb:75:04:d0:d3:f2:d0:e7:2d:e7:20:87:80:63:e4:1a:
e0:16:c8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 2 23:46:01 2026 by rpki-client