Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/ZWOTRDJQMD4-rtb-xFUMCAg7gDU.roa
File: ZWOTRDJQMD4-rtb-xFUMCAg7gDU.roa (raw, json)
Hash identifier: 6f38evNyVeY4e3APE9OwAblMTMZ3jvAThwdCqi0P2nU=
Subject key identifier: 65:63:93:44:32:50:30:3E:3E:AE:D6:FE:C4:55:0C:08:08:3B:80:35
Certificate issuer: /CN=deceda98c164c705cc46a8bab74510164a4e5443
Certificate serial: 019F2368B744E0BF71834472C8D2DEA40B24
Authority key identifier: DE:CE:DA:98:C1:64:C7:05:CC:46:A8:BA:B7:45:10:16:4A:4E:54:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3s7amMFkxwXMRqi6t0UQFkpOVEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/ZWOTRDJQMD4-rtb-xFUMCAg7gDU.roa
Signing time: Thu 02 Jul 2026 15:18:13 +0000
ROA not before: Thu 02 Jul 2026 15:18:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50401
IP address blocks: 134.249.4.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/3s7amMFkxwXMRqi6t0UQFkpOVEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/3s7amMFkxwXMRqi6t0UQFkpOVEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3s7amMFkxwXMRqi6t0UQFkpOVEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b7:44:e0:bf:71:83:44:72:c8:d2:de:a4:0b:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deceda98c164c705cc46a8bab74510164a4e5443
Validity
Not Before: Jul 2 15:18:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=656393443250303e3eaed6fec4550c08083b8035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4e:61:b1:50:4a:f2:fb:39:2f:72:1f:20:d4:
b5:da:db:47:3b:a2:c8:5e:76:1d:65:fc:e5:05:0b:
71:92:7c:c0:eb:1b:4b:80:71:95:89:08:b2:a1:f9:
80:c6:e5:9f:41:0f:03:4e:ba:85:a4:84:43:bb:2b:
4f:43:9a:4f:5a:9b:81:8a:d2:16:e2:3c:d7:a8:2a:
b3:24:3f:af:a8:ae:e8:b6:a4:4b:53:5a:43:99:20:
f4:44:36:6f:22:6c:0e:18:19:e3:80:47:b8:bd:39:
9f:13:26:60:9e:32:a0:a0:b5:4e:c3:75:9c:de:85:
23:e2:8c:30:f4:95:89:57:f8:ec:b9:d6:17:ec:da:
44:4c:bc:52:5d:8d:e3:73:9b:ed:8d:1a:e0:99:ea:
76:84:26:73:d4:53:ec:d8:b0:ed:71:c5:fa:6b:ab:
b2:1f:f3:1e:40:d2:f5:f7:71:7f:84:74:47:3e:e7:
6c:b1:24:b2:11:90:94:01:df:2e:3f:dc:90:7b:af:
dd:e9:3c:4f:96:da:a0:49:c2:f8:10:48:5e:de:d6:
3e:12:10:1b:95:0a:23:03:00:0b:78:41:db:29:66:
32:17:a0:3d:8f:cd:25:0f:92:cd:2e:8f:f7:48:05:
ef:2a:43:15:4e:ed:3c:25:de:6a:1f:b8:d2:ac:3e:
bd:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:63:93:44:32:50:30:3E:3E:AE:D6:FE:C4:55:0C:08:08:3B:80:35
X509v3 Authority Key Identifier:
keyid:DE:CE:DA:98:C1:64:C7:05:CC:46:A8:BA:B7:45:10:16:4A:4E:54:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3s7amMFkxwXMRqi6t0UQFkpOVEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/ZWOTRDJQMD4-rtb-xFUMCAg7gDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/3s7amMFkxwXMRqi6t0UQFkpOVEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.249.4.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:fc:ba:c8:61:14:45:dd:81:2a:3a:c4:9f:32:c6:ba:2a:8a:
50:5b:24:a9:07:c1:1c:fc:a8:47:94:85:a4:f3:31:5e:5c:e8:
b3:2e:9b:ac:88:72:6e:83:9a:80:1e:49:c3:cc:9d:74:dc:60:
a9:bd:5d:a7:1f:05:d8:c6:b2:c9:fa:a8:ba:4c:64:2c:55:eb:
55:ef:5a:91:bc:b3:5d:0f:6a:69:54:32:56:43:97:7a:82:16:
47:7e:9c:93:72:bf:63:25:fd:f6:e4:37:9e:c3:e7:7b:28:5e:
98:01:af:79:36:5c:f4:b6:33:33:54:f1:79:f2:b6:a8:65:3e:
85:dc:56:cb:19:8a:cb:b5:0b:4f:d0:0c:03:61:99:78:46:0a:
f4:2f:40:30:e3:b5:ff:4f:e9:9a:a4:82:1d:c8:3d:1a:50:47:
54:b6:68:d9:0c:ec:67:3e:87:dc:a1:f4:cc:7d:a2:d7:da:c0:
0b:41:0d:2a:cd:12:cf:96:d9:39:fd:dc:54:65:42:f0:2e:b6:
ae:f4:47:d1:39:3c:49:83:2b:84:d6:c3:33:1e:89:94:e8:06:
df:7c:a6:41:65:97:60:a6:86:c5:77:12:72:31:f3:da:54:63:
7d:1b:4c:e4:d1:35:06:97:20:bb:4f:c3:6c:64:cb:df:42:cd:
7d:ea:dd:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:45:24 2026 by rpki-client