Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/ZNSvPotou0vBHBi6H7SkSdTt-MI.roa
File: ZNSvPotou0vBHBi6H7SkSdTt-MI.roa (raw, json)
Hash identifier: WHkEf/FZhUvqqryJSMSKe4URbidYWOu8eC1vrizJNjI=
Subject key identifier: 64:D4:AF:3E:8B:68:BB:4B:C1:1C:18:BA:1F:B4:A4:49:D4:ED:F8:C2
Certificate issuer: /CN=edf36b243560346053bc60ced4e98aa48ea1a063
Certificate serial: 01A0A70BDDFCAD39F15BEE58AEB7021EADD6
Authority key identifier: ED:F3:6B:24:35:60:34:60:53:BC:60:CE:D4:E9:8A:A4:8E:A1:A0:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/ZNSvPotou0vBHBi6H7SkSdTt-MI.roa
Signing time: Tue 15 Sep 2026 21:49:27 +0000
ROA not before: Tue 15 Sep 2026 21:49:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5511
IP address blocks: 142.228.240.0/23 maxlen: 23
198.33.94.0/23 maxlen: 23
198.33.140.0/23 maxlen: 23
198.34.74.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a7:0b:dd:fc:ad:39:f1:5b:ee:58:ae:b7:02:1e:ad:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf36b243560346053bc60ced4e98aa48ea1a063
Validity
Not Before: Sep 15 21:49:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=64d4af3e8b68bb4bc11c18ba1fb4a449d4edf8c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e1:71:95:d1:47:80:a7:ee:93:34:44:3a:0c:
41:bd:1f:9f:13:0e:6e:cb:2e:71:1d:00:98:da:9b:
66:f9:9a:1c:bc:99:8e:98:15:96:5c:f0:06:4b:7a:
b0:ab:4a:f7:8e:08:e1:2b:ca:75:c8:6b:ba:f8:de:
de:0c:5c:f7:93:8f:3e:c9:0a:ff:e8:25:a4:69:f0:
f8:bf:3c:0b:99:7b:5b:24:41:d7:f2:9c:ef:2d:4b:
56:6c:79:5d:b4:1f:39:66:43:d3:f6:50:ec:32:20:
38:b7:36:b0:d0:70:51:87:ee:f4:8e:09:f2:3e:b6:
0b:d2:d5:08:3b:ce:5c:97:03:35:fb:33:b4:c3:74:
d4:61:7b:f4:3d:90:b5:b6:16:56:cd:66:71:4e:f0:
e4:da:f4:a9:11:39:60:6a:20:ec:de:6a:4c:ca:0f:
29:1d:1e:af:28:4f:b2:96:e8:57:df:ad:03:97:28:
66:95:d4:ed:3e:fb:8c:28:f5:ad:4e:cc:5a:3c:dc:
8b:dc:f1:2a:06:54:5a:c5:11:62:22:d4:7b:b3:d7:
41:38:fb:c0:34:a3:45:82:ae:45:e2:b6:19:10:d9:
c3:e6:f1:6e:02:12:3a:0c:c2:2f:45:fb:78:14:f0:
0a:cc:c5:a5:10:98:20:9c:c8:ee:7d:05:67:c0:07:
0d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D4:AF:3E:8B:68:BB:4B:C1:1C:18:BA:1F:B4:A4:49:D4:ED:F8:C2
X509v3 Authority Key Identifier:
keyid:ED:F3:6B:24:35:60:34:60:53:BC:60:CE:D4:E9:8A:A4:8E:A1:A0:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/ZNSvPotou0vBHBi6H7SkSdTt-MI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
142.228.240.0/23
198.33.94.0/23
198.33.140.0/23
198.34.74.0/23
Signature Algorithm: sha256WithRSAEncryption
99:bd:d9:1b:b9:20:ec:6d:73:19:00:5e:f2:c3:7d:61:60:04:
43:d2:86:dc:0d:6f:5a:fd:95:86:d7:30:1b:e5:85:9d:eb:80:
1b:29:67:a0:70:bb:8a:86:6c:19:a8:a2:90:ab:e6:08:7c:98:
a1:c1:6e:56:c8:44:f3:08:f7:d9:45:e9:36:47:dd:b7:d6:df:
d3:b8:b0:48:bd:37:98:2c:96:0e:2b:f0:47:c8:0d:f5:c3:bb:
6a:a5:6b:33:7b:de:7b:d6:f1:df:26:35:12:ed:f7:fa:63:61:
f7:e2:a3:aa:a3:5a:c4:6d:64:44:e2:25:74:8e:c9:bb:56:1e:
50:8d:f4:93:98:c1:80:88:4c:07:79:53:94:76:52:0f:9f:f9:
ba:16:43:14:56:77:e3:ee:ea:22:46:90:df:3a:af:0d:48:51:
e5:b6:fb:84:eb:c7:bf:47:ea:19:7e:80:c9:33:ca:cd:d7:82:
6b:c7:cf:29:5a:54:1b:0d:39:a2:b5:d4:d4:6b:0f:4b:64:88:
e6:bf:01:fc:19:a9:50:00:99:02:ef:0f:6b:5a:f3:06:bc:5d:
86:bb:bd:bb:39:10:c2:80:c3:71:94:36:50:23:8f:36:f0:1a:
ef:a3:6e:bf:27:37:a6:63:a1:a4:18:01:72:8b:47:3d:91:1f:
21:9a:4a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 11:43:33 2026 by rpki-client