Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/1d49c4-4111-4136-88c3-9a3954e0667d/1/zQ6JtQe6ANshosjASGiX3HEOrVM.roa
File: zQ6JtQe6ANshosjASGiX3HEOrVM.roa (raw, json)
Hash identifier: K4kNGYoNbxGtFYvRjMbuvsJfpbwJrRENNuvEwmp7Hp8=
Subject key identifier: CD:0E:89:B5:07:BA:00:DB:21:A2:C8:C0:48:68:97:DC:71:0E:AD:53
Certificate issuer: /CN=4b921e33ffba39c6a181dd42ee3c0afa0c2220d0
Certificate serial: 019E431B3414724CAF65A6433CEF6CCF912D
Authority key identifier: 4B:92:1E:33:FF:BA:39:C6:A1:81:DD:42:EE:3C:0A:FA:0C:22:20:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5IeM_-6Ocahgd1C7jwK-gwiINA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/1d49c4-4111-4136-88c3-9a3954e0667d/1/zQ6JtQe6ANshosjASGiX3HEOrVM.roa
Signing time: Wed 20 May 2026 01:58:36 +0000
ROA not before: Wed 20 May 2026 01:58:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210734
IP address blocks: 111.88.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/1d49c4-4111-4136-88c3-9a3954e0667d/1/S5IeM_-6Ocahgd1C7jwK-gwiINA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/1d49c4-4111-4136-88c3-9a3954e0667d/1/S5IeM_-6Ocahgd1C7jwK-gwiINA.mft
rsync://rpki.ripe.net/repository/DEFAULT/S5IeM_-6Ocahgd1C7jwK-gwiINA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 May 2026 04:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:43:1b:34:14:72:4c:af:65:a6:43:3c:ef:6c:cf:91:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b921e33ffba39c6a181dd42ee3c0afa0c2220d0
Validity
Not Before: May 20 01:58:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cd0e89b507ba00db21a2c8c0486897dc710ead53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6d:a2:0e:be:c5:a8:7e:32:6c:86:6b:7a:e9:
a1:4e:4a:9d:f6:9e:9b:ed:d3:b2:5b:b0:41:5a:35:
89:82:4f:4b:0c:d7:e3:a0:f5:14:f7:60:2e:d8:56:
37:46:0a:d8:c5:68:9f:47:5f:11:90:0c:72:b3:53:
c1:c5:b1:af:67:70:1e:9b:83:f7:a5:0f:91:8d:1b:
f5:a5:39:73:18:9c:f2:5a:a7:95:38:8f:b3:18:16:
37:53:52:19:cd:0f:00:50:e7:f4:9f:88:18:47:e5:
1b:7b:92:84:56:02:01:e3:b1:1e:00:70:14:6e:27:
3a:83:55:2e:64:fb:11:f6:e9:b1:5a:cc:db:67:5f:
c5:b7:12:40:70:fa:5e:bb:3c:56:3f:11:d9:5b:51:
78:d4:99:79:34:4a:8d:99:98:92:86:0d:14:a9:69:
54:9e:c1:05:64:21:b7:f3:cb:a1:b4:26:80:51:f2:
d2:02:ae:6e:5e:f8:1c:24:d6:6b:47:41:ba:37:1a:
2e:0c:f4:8c:05:ed:6d:09:88:9b:79:d2:1f:41:98:
3a:82:c0:9b:b9:71:05:d9:59:76:92:46:7d:d1:cb:
7d:82:6a:75:6b:61:f4:14:35:b2:bf:d4:e1:da:40:
af:20:8f:d6:04:0b:f5:e2:9e:5b:25:f8:e2:87:96:
df:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:0E:89:B5:07:BA:00:DB:21:A2:C8:C0:48:68:97:DC:71:0E:AD:53
X509v3 Authority Key Identifier:
keyid:4B:92:1E:33:FF:BA:39:C6:A1:81:DD:42:EE:3C:0A:FA:0C:22:20:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5IeM_-6Ocahgd1C7jwK-gwiINA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1d49c4-4111-4136-88c3-9a3954e0667d/1/zQ6JtQe6ANshosjASGiX3HEOrVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1d49c4-4111-4136-88c3-9a3954e0667d/1/S5IeM_-6Ocahgd1C7jwK-gwiINA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
111.88.74.0/24
Signature Algorithm: sha256WithRSAEncryption
60:c5:2b:1a:71:82:33:e3:46:e0:30:24:05:6d:e6:d5:c3:66:
bb:70:9e:2f:e6:6b:53:b8:83:41:d9:05:35:b5:b0:5e:5e:41:
e0:2a:5a:35:e1:d2:87:6d:c1:13:bd:bf:a9:ba:2c:34:c3:84:
f2:60:62:67:8c:fc:e6:49:02:02:a7:96:c4:20:34:2d:78:c6:
c4:73:b0:0a:00:14:61:d5:7b:63:49:1b:c5:8e:61:b0:cd:ac:
9a:91:17:ff:8e:7f:2c:71:28:d1:e8:29:7b:de:af:e6:37:18:
aa:08:b0:71:c8:aa:7b:fa:68:b7:a7:fd:38:1e:c8:43:2e:6e:
f3:e8:02:7f:4c:19:c5:39:16:e1:4f:93:e5:62:51:eb:75:d7:
dc:1c:a4:28:60:5b:a5:f5:34:ad:24:12:4c:97:b5:5b:af:22:
db:4c:bb:37:bd:7b:d7:94:bc:af:4b:99:44:65:ef:c5:d3:d6:
b6:41:64:1f:43:89:9b:45:a3:71:b8:e6:5e:de:29:10:e5:c3:
9e:5c:84:d0:c4:6f:14:02:50:ee:51:8b:4b:a6:8d:5a:82:0c:
d0:04:9b:1e:9a:45:57:39:83:b7:df:78:32:8b:39:0a:d2:57:
82:89:a4:77:19:bc:b0:62:e9:0f:4f:ff:d1:cb:64:b9:a0:fb:
3a:4b:fd:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 13:09:14 2026 by rpki-client