Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/zZSPbowCLV7m9V4dHxLr55BXjQQ.roa
File: zZSPbowCLV7m9V4dHxLr55BXjQQ.roa (raw, json)
Hash identifier: 5SJCkkz6Xo2+FRkOwD0U38U5XfxuTGLM93GaaXrXgEU=
Subject key identifier: CD:94:8F:6E:8C:02:2D:5E:E6:F5:5E:1D:1F:12:EB:E7:90:57:8D:04
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 019F8E0BEE2CDDAD3E5C9C2AF2FF1D40D54E
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/zZSPbowCLV7m9V4dHxLr55BXjQQ.roa
Signing time: Thu 23 Jul 2026 08:16:14 +0000
ROA not before: Thu 23 Jul 2026 08:16:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 139791
IP address blocks: 213.214.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:0b:ee:2c:dd:ad:3e:5c:9c:2a:f2:ff:1d:40:d5:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Jul 23 08:16:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cd948f6e8c022d5ee6f55e1d1f12ebe790578d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e6:90:c5:3b:8b:df:1c:a8:fc:69:67:71:a2:
06:11:7b:bf:69:e5:e5:2a:c1:1b:6e:63:e8:b9:69:
c8:ac:b1:e1:7b:f8:e4:4d:72:d7:b7:fe:3d:da:57:
15:ca:19:f1:02:10:35:31:43:0f:2d:be:24:45:e9:
2e:09:f8:65:5a:38:54:6b:3d:ea:a6:12:af:11:00:
99:9a:3d:e7:8c:1f:cc:2f:9c:4e:73:00:9a:71:7c:
c6:a8:66:26:14:0e:83:18:d6:72:9e:de:3d:ee:34:
1e:31:67:81:84:e3:17:0a:ae:84:04:3e:4d:3f:07:
5c:ec:2c:86:93:d0:ff:b3:92:75:8e:04:19:f7:57:
c8:4c:03:85:a4:9c:9f:71:6a:d7:c0:c1:ec:fd:b0:
a6:c0:de:1f:0b:cf:3a:92:81:7e:e1:6a:83:48:26:
3e:0b:6c:52:ed:d6:d4:db:e5:bb:65:88:01:e0:f6:
1f:62:b5:1f:69:f2:c3:dc:09:6a:13:dc:f3:f6:58:
ab:c0:a3:12:68:b6:e7:7c:36:02:98:cb:bd:09:38:
73:fd:8f:93:bf:39:1f:4d:9c:7c:40:dd:6a:aa:03:
7d:4e:b9:2c:ef:79:52:47:cf:bf:a8:36:88:b8:aa:
8a:0f:c6:84:e2:7d:e4:e1:b8:5c:43:60:43:c4:84:
43:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:94:8F:6E:8C:02:2D:5E:E6:F5:5E:1D:1F:12:EB:E7:90:57:8D:04
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/zZSPbowCLV7m9V4dHxLr55BXjQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.214.110.0/24
Signature Algorithm: sha256WithRSAEncryption
35:dd:29:af:39:3d:50:19:09:c2:f2:fa:12:f0:81:7b:95:0e:
66:5a:39:e9:62:75:3a:77:62:f9:dd:68:79:14:b3:6f:63:a5:
e9:c8:b1:51:e9:a6:9c:e7:6f:f5:82:ff:77:6d:52:a3:df:0c:
75:5c:86:fa:07:14:03:c3:51:63:ec:75:b7:0a:74:c3:61:30:
f1:21:5c:17:66:8e:c5:21:48:bb:d7:89:a9:71:dd:99:3a:5e:
99:e0:04:6e:31:33:12:14:89:b0:b1:34:7f:d7:78:a3:e3:d5:
f5:87:90:ad:13:4c:2d:ce:70:90:4b:c4:04:ea:69:32:ef:03:
6d:d9:52:41:8b:7f:d0:84:b8:f2:16:28:c9:11:a0:36:2c:97:
28:33:24:e6:ad:5d:db:4e:66:20:e0:e6:8b:2f:e7:37:d9:97:
79:58:60:d1:40:d1:73:48:4e:7f:6f:be:7f:e6:eb:9b:4e:c3:
d3:c4:cc:49:e3:a8:bf:7a:4c:40:22:f0:46:ee:0b:a9:d9:72:
c6:4e:ab:2f:01:25:4a:d5:eb:69:3f:20:79:af:cd:e2:20:98:
9c:c3:4f:5f:07:c3:6f:aa:10:59:2c:08:ed:07:b0:e2:f4:d5:
5c:bb:44:aa:8d:ac:40:be:a9:bd:67:53:ca:86:74:ec:5e:3f:
bc:0a:b5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:46:33 2026 by rpki-client