Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/zbeKXEtBHivuXewjvv-PutuCHTI.roa
File: zbeKXEtBHivuXewjvv-PutuCHTI.roa (raw, json)
Hash identifier: cARCYTy36klUolDqP5aOrJ3kV5YBXwe6iec5qzqNP8Q=
Subject key identifier: CD:B7:8A:5C:4B:41:1E:2B:EE:5D:EC:23:BE:FF:8F:BA:DB:82:1D:32
Certificate issuer: /CN=e2d8c587319e3acc21df0a3341e5125e374dba22
Certificate serial: 019F2368E0EB4488B430E53964ACA67F7387
Authority key identifier: E2:D8:C5:87:31:9E:3A:CC:21:DF:0A:33:41:E5:12:5E:37:4D:BA:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tjFhzGeOswh3wozQeUSXjdNuiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/zbeKXEtBHivuXewjvv-PutuCHTI.roa
Signing time: Thu 02 Jul 2026 15:18:23 +0000
ROA not before: Thu 02 Jul 2026 15:18:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204326
IP address blocks: 31.132.40.0/22 maxlen: 24
171.22.92.0/22 maxlen: 24
185.18.240.0/22 maxlen: 24
2a04:d00::/29 maxlen: 48
2a09:3cc0::/29 maxlen: 48
2a0d:9f40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/4tjFhzGeOswh3wozQeUSXjdNuiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/4tjFhzGeOswh3wozQeUSXjdNuiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tjFhzGeOswh3wozQeUSXjdNuiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e0:eb:44:88:b4:30:e5:39:64:ac:a6:7f:73:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d8c587319e3acc21df0a3341e5125e374dba22
Validity
Not Before: Jul 2 15:18:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cdb78a5c4b411e2bee5dec23beff8fbadb821d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1a:67:cb:1f:a1:61:10:81:7e:20:1b:7d:a3:
3b:44:f9:82:84:3e:27:39:81:4b:7c:ab:ca:77:34:
cc:6c:a7:0b:49:a4:b3:26:d6:d6:11:d5:26:52:af:
a8:17:9e:73:27:43:83:9d:c0:9a:50:66:1f:aa:43:
a7:e2:32:cc:55:60:15:a5:83:8b:b1:a6:08:a0:5b:
15:dc:fe:86:ac:48:a1:c7:17:78:45:d8:8c:bd:55:
79:75:43:9f:9a:3b:e3:2d:b5:f5:d4:c4:f3:c3:20:
31:2d:22:a3:54:f1:51:5c:53:6e:5b:15:11:f4:bb:
70:90:55:ab:69:af:01:2b:14:37:df:3a:7a:4d:16:
70:90:d6:07:e1:f8:3e:73:d8:f7:ee:a7:cd:14:07:
09:50:a8:2b:5e:00:db:aa:d7:e4:2e:22:bc:13:df:
2a:32:dd:ea:6b:08:82:08:d2:20:a0:82:50:92:3f:
c6:df:3d:3e:f9:25:2f:75:eb:b6:d9:c6:d6:36:e7:
85:b7:3e:24:1f:1e:32:53:19:88:67:8b:b7:6d:3b:
b4:ed:35:8c:9f:71:4b:79:df:08:7e:07:6c:24:2e:
c4:72:cb:eb:ec:25:d5:b9:60:f6:19:d8:f1:3c:21:
f6:3a:a5:32:cf:f8:fb:29:82:3d:cf:57:f9:cf:79:
90:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B7:8A:5C:4B:41:1E:2B:EE:5D:EC:23:BE:FF:8F:BA:DB:82:1D:32
X509v3 Authority Key Identifier:
keyid:E2:D8:C5:87:31:9E:3A:CC:21:DF:0A:33:41:E5:12:5E:37:4D:BA:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tjFhzGeOswh3wozQeUSXjdNuiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/zbeKXEtBHivuXewjvv-PutuCHTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/4tjFhzGeOswh3wozQeUSXjdNuiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.132.40.0/22
171.22.92.0/22
185.18.240.0/22
IPv6:
2a04:d00::/29
2a09:3cc0::/29
2a0d:9f40::/29
Signature Algorithm: sha256WithRSAEncryption
0f:60:df:c5:54:2a:f2:53:83:9d:40:b4:9d:cd:ec:0c:8e:da:
68:b8:29:91:a5:31:ca:7c:f7:98:cb:c0:9a:78:41:c9:20:33:
3e:82:51:00:09:cf:34:22:90:9b:b8:de:31:01:5e:31:5c:6c:
48:e1:dd:93:2e:cf:0c:37:e7:20:3f:40:fd:0b:f2:10:0a:68:
68:4e:41:f7:c2:02:b4:ae:13:81:b5:15:2c:15:b8:7e:7c:e6:
5b:87:3f:91:c5:aa:40:9d:11:10:63:5a:fc:6f:6a:06:bb:3a:
16:91:38:b5:56:29:66:52:7f:4a:05:36:6c:84:09:43:0e:39:
df:e1:4c:85:45:7f:85:cd:e2:bf:28:54:de:c2:b4:ff:30:96:
9a:55:9b:d7:f0:d3:d1:dc:a4:78:50:f3:7a:a4:33:1a:f7:60:
b8:bb:d5:37:0e:c8:8a:6e:f9:da:15:c5:3f:b8:d4:09:e0:e9:
21:f8:f1:f9:49:62:19:60:66:1b:6a:23:f2:6d:a8:dc:3d:6f:
3e:fc:99:31:7c:eb:97:d2:0b:c5:94:69:b8:db:39:bb:e8:56:
e3:6a:2e:c8:33:32:14:27:fa:e5:81:ef:26:09:19:45:3a:73:
b6:c7:64:8a:20:ff:d3:7e:2c:32:46:75:e8:f8:73:18:5b:ff:
aa:11:de:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:25:53 2026 by rpki-client