Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/f51972-ab03-460a-9a74-cf1d224185bd/1/z28nNIIRJ-I33jkHuAcL9epzObs.roa
File: z28nNIIRJ-I33jkHuAcL9epzObs.roa (raw, json)
Hash identifier: uoiQ0ENy0WWHs/rpsks+l1eZR/y5bsE8FwsAwqAEXbE=
Subject key identifier: CF:6F:27:34:82:11:27:E2:37:DE:39:07:B8:07:0B:F5:EA:73:39:BB
Certificate issuer: /CN=9d791e13dc046003f5b7e2614fce28a5bdea3a02
Certificate serial: 01A0C7E1EC30CD69AE2B0996FF971D753D5D
Authority key identifier: 9D:79:1E:13:DC:04:60:03:F5:B7:E2:61:4F:CE:28:A5:BD:EA:3A:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nXkeE9wEYAP1t-JhT84opb3qOgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f51972-ab03-460a-9a74-cf1d224185bd/1/z28nNIIRJ-I33jkHuAcL9epzObs.roa
Signing time: Tue 22 Sep 2026 06:51:06 +0000
ROA not before: Tue 22 Sep 2026 06:51:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 786
IP address blocks: 194.35.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f51972-ab03-460a-9a74-cf1d224185bd/1/nXkeE9wEYAP1t-JhT84opb3qOgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f51972-ab03-460a-9a74-cf1d224185bd/1/nXkeE9wEYAP1t-JhT84opb3qOgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nXkeE9wEYAP1t-JhT84opb3qOgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:e1:ec:30:cd:69:ae:2b:09:96:ff:97:1d:75:3d:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d791e13dc046003f5b7e2614fce28a5bdea3a02
Validity
Not Before: Sep 22 06:51:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf6f2734821127e237de3907b8070bf5ea7339bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:75:6a:08:15:a2:b6:e2:83:1f:dc:c4:dc:a4:
31:98:ca:73:4f:54:9a:d4:82:ce:07:88:df:00:a5:
d6:1d:97:28:09:e3:85:52:e2:82:9d:27:9e:4d:5f:
d4:a1:74:18:95:8b:93:e0:c6:79:1a:3e:4a:b7:2c:
52:6d:54:92:cc:88:ca:ec:03:6e:77:e7:bb:c2:de:
7c:1c:19:a2:dc:4b:93:f8:ce:85:91:73:43:3d:f3:
98:e6:2e:85:d4:94:97:c9:9a:84:89:8b:eb:10:42:
cd:a9:82:d3:11:3d:4f:11:e0:59:c6:94:fe:92:07:
ce:c1:aa:b1:83:9c:d7:82:d2:4b:20:50:a7:9e:5b:
21:cd:f5:7d:cf:8c:03:71:be:22:1b:06:30:83:52:
c1:d0:31:fb:46:21:7c:54:d1:55:f4:0b:5f:d6:c1:
28:28:95:69:5c:8a:d0:76:86:e1:3c:e4:03:e4:f8:
b0:1e:1f:0f:b2:1c:63:a7:71:4c:71:33:84:38:1c:
19:90:c0:bc:ff:b0:7c:3c:3a:b0:a3:31:d8:f0:b3:
3b:ae:19:2f:f2:8d:d8:0d:68:c7:ca:29:29:f0:72:
06:8f:86:5a:27:82:8e:e2:d6:a6:4c:5b:bf:54:06:
e3:a2:df:76:a1:5f:ad:64:f9:37:62:f1:18:a0:3e:
99:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:6F:27:34:82:11:27:E2:37:DE:39:07:B8:07:0B:F5:EA:73:39:BB
X509v3 Authority Key Identifier:
keyid:9D:79:1E:13:DC:04:60:03:F5:B7:E2:61:4F:CE:28:A5:BD:EA:3A:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nXkeE9wEYAP1t-JhT84opb3qOgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f51972-ab03-460a-9a74-cf1d224185bd/1/z28nNIIRJ-I33jkHuAcL9epzObs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f51972-ab03-460a-9a74-cf1d224185bd/1/nXkeE9wEYAP1t-JhT84opb3qOgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.35.241.0/24
Signature Algorithm: sha256WithRSAEncryption
91:7c:6d:ae:3a:3f:8c:e3:02:57:01:66:62:23:0b:10:58:04:
6c:db:26:bd:ed:72:4b:72:08:eb:29:bc:a1:33:9d:4a:7e:ec:
98:9a:01:42:da:c1:af:d8:8e:10:53:05:56:11:5f:c3:76:77:
23:bc:ed:b0:ea:70:20:cd:eb:79:f0:27:3c:c6:f9:49:02:b6:
8c:50:3d:ab:ac:43:5d:c4:d1:55:3a:5a:15:52:7d:77:e9:63:
80:7c:55:d2:1a:eb:80:78:16:f5:3b:54:dd:1a:9c:c8:04:74:
76:72:1d:18:04:03:29:78:2c:b6:0d:27:ba:69:64:ac:d0:6b:
30:60:87:ca:3c:c3:1e:bb:e1:82:79:66:1c:9e:1b:f9:81:12:
5f:b6:f5:f5:4b:a0:05:95:70:ab:c4:60:51:01:67:3e:2f:51:
5b:dd:be:a0:83:31:e3:cc:43:09:4d:ee:2e:fd:bf:59:24:ec:
5f:a3:5a:8f:6e:8a:c0:bf:33:a7:33:f8:90:d0:92:d7:d0:79:
0e:1a:37:ef:48:56:da:71:fc:30:3b:f6:87:bd:9a:48:1b:f6:
a6:79:dc:0c:ed:64:da:a4:4b:af:b0:4c:eb:12:e7:7c:a2:86:
09:d4:8c:d1:dd:5d:b1:5c:8f:14:fb:17:18:34:ee:10:ec:6e:
64:c9:07:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:52:30 2026 by rpki-client