Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b92b30-8ada-475c-aa2a-567dc9a79fdd/1/Z4--KUYifq2Y40eCVqxDnJdaP_w.roa
File: Z4--KUYifq2Y40eCVqxDnJdaP_w.roa (raw, json)
Hash identifier: RKffzHIaL53f5qFN2lTaq7PTByMkV+bB8EAdafoiYuk=
Subject key identifier: 67:8F:BE:29:46:22:7E:AD:98:E3:47:82:56:AC:43:9C:97:5A:3F:FC
Certificate issuer: /CN=0c9e212db582eaf413d2b607920fa46edbc172d1
Certificate serial: 019F2368F7FC672012C769A739C7C8255E7B
Authority key identifier: 0C:9E:21:2D:B5:82:EA:F4:13:D2:B6:07:92:0F:A4:6E:DB:C1:72:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJ4hLbWC6vQT0rYHkg-kbtvBctE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b92b30-8ada-475c-aa2a-567dc9a79fdd/1/Z4--KUYifq2Y40eCVqxDnJdaP_w.roa
Signing time: Thu 02 Jul 2026 15:18:29 +0000
ROA not before: Thu 02 Jul 2026 15:18:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48218
IP address blocks: 2a00:d08::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b92b30-8ada-475c-aa2a-567dc9a79fdd/1/DJ4hLbWC6vQT0rYHkg-kbtvBctE.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/b92b30-8ada-475c-aa2a-567dc9a79fdd/1/DJ4hLbWC6vQT0rYHkg-kbtvBctE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DJ4hLbWC6vQT0rYHkg-kbtvBctE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f7:fc:67:20:12:c7:69:a7:39:c7:c8:25:5e:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c9e212db582eaf413d2b607920fa46edbc172d1
Validity
Not Before: Jul 2 15:18:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=678fbe2946227ead98e3478256ac439c975a3ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ba:95:d3:b7:e1:d1:26:70:00:19:28:07:34:
89:36:eb:10:7f:2e:9a:38:42:69:77:e6:61:f8:66:
36:32:2e:1c:3d:d6:b8:cb:be:9f:d4:78:dc:c7:ee:
a1:a6:6d:c2:36:5f:79:d3:0a:c0:37:c1:7e:48:06:
44:1a:95:f8:67:35:a3:95:43:fc:d6:cd:bc:41:a1:
03:18:67:23:9d:e1:ac:18:64:56:c4:57:03:29:61:
30:20:73:60:3e:46:08:44:19:84:2c:50:14:13:96:
fb:42:fe:a7:f8:ac:05:8b:4d:5e:a1:b0:63:4b:85:
ef:91:c0:b6:c2:bd:97:82:9f:af:7d:7a:69:65:be:
d2:aa:0e:fd:b6:3f:12:ef:2d:ef:a1:03:15:5e:c5:
20:8a:e9:6f:4d:34:b2:31:51:b0:0f:2c:ff:4b:17:
c4:2c:f6:4a:15:96:f4:8a:f2:b8:0d:4e:13:58:65:
45:16:ca:88:aa:c4:f1:1a:fe:dc:74:17:88:a2:7b:
b2:70:5d:88:1f:c3:4e:21:3f:c7:1d:61:32:c2:79:
97:5c:f2:52:48:da:ee:f7:01:14:37:57:67:83:38:
4f:41:30:3d:d6:77:1f:d8:37:74:3f:61:9d:f3:91:
b7:cf:7f:b7:7c:75:33:4b:ba:88:4b:ad:37:93:94:
6c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:8F:BE:29:46:22:7E:AD:98:E3:47:82:56:AC:43:9C:97:5A:3F:FC
X509v3 Authority Key Identifier:
keyid:0C:9E:21:2D:B5:82:EA:F4:13:D2:B6:07:92:0F:A4:6E:DB:C1:72:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJ4hLbWC6vQT0rYHkg-kbtvBctE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b92b30-8ada-475c-aa2a-567dc9a79fdd/1/Z4--KUYifq2Y40eCVqxDnJdaP_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b92b30-8ada-475c-aa2a-567dc9a79fdd/1/DJ4hLbWC6vQT0rYHkg-kbtvBctE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:d08::/32
Signature Algorithm: sha256WithRSAEncryption
54:08:15:a9:4b:98:1c:cb:c3:1c:f1:9d:29:a4:46:45:05:fe:
56:22:d8:80:4f:3c:60:1a:71:1d:5b:fb:cc:75:79:ad:8a:49:
c0:90:38:b7:60:39:4d:8b:c4:16:60:8d:1e:7f:30:e9:89:85:
e8:e6:ec:b0:67:a8:75:a9:6c:fe:ad:ab:15:d0:80:0c:5e:c0:
bf:6e:d1:ef:24:d8:30:c5:b5:d9:a0:2f:fb:d0:85:d3:aa:07:
da:74:c5:d2:20:42:67:d6:b2:9a:91:bb:c1:a1:cc:dc:3c:b0:
ca:67:92:6f:a4:df:02:61:02:5a:48:0e:58:04:d2:82:ca:cb:
bc:92:ae:77:c2:db:83:6a:0c:08:96:0a:d0:b7:d8:89:be:17:
b9:ea:c0:2a:54:11:0f:9e:66:fd:22:ff:9a:f1:83:73:df:e8:
d3:38:96:f3:81:7d:76:27:bb:a3:c6:23:0f:72:51:2f:1a:a1:
07:be:cd:71:f1:74:78:db:65:a7:0c:54:62:b7:37:4e:6b:fd:
a9:9c:13:85:cd:ea:db:ac:84:b4:8d:3f:15:65:15:f1:22:66:
bd:ef:79:18:10:7d:bb:39:a7:21:71:ca:56:23:a1:c2:7d:33:
f1:c7:93:7e:47:32:21:f3:eb:2a:02:35:a6:15:6a:2d:39:ff:
ac:ae:0d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:37:51 2026 by rpki-client