Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/kz2jC2-eYjLav30XZt2qH3nW_T8.roa
File: kz2jC2-eYjLav30XZt2qH3nW_T8.roa (raw, json)
Hash identifier: q4WzBraFqtDEvW1bU/I6/lO7CbkV/QPhBNE+e0HpSUE=
Subject key identifier: 93:3D:A3:0B:6F:9E:62:32:DA:BF:7D:17:66:DD:AA:1F:79:D6:FD:3F
Certificate issuer: /CN=9f1c350cf567345e5d75e6c53e04df4e1241c140
Certificate serial: 019F2368A8F50FB08BAB829F6A43EC591855
Authority key identifier: 9F:1C:35:0C:F5:67:34:5E:5D:75:E6:C5:3E:04:DF:4E:12:41:C1:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxw1DPVnNF5ddebFPgTfThJBwUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/kz2jC2-eYjLav30XZt2qH3nW_T8.roa
Signing time: Thu 02 Jul 2026 15:18:09 +0000
ROA not before: Thu 02 Jul 2026 15:18:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 37480
IP address blocks: 80.89.176.0/24 maxlen: 24
80.89.177.0/24 maxlen: 24
80.89.178.0/24 maxlen: 24
80.89.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/nxw1DPVnNF5ddebFPgTfThJBwUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/nxw1DPVnNF5ddebFPgTfThJBwUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nxw1DPVnNF5ddebFPgTfThJBwUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:a8:f5:0f:b0:8b:ab:82:9f:6a:43:ec:59:18:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f1c350cf567345e5d75e6c53e04df4e1241c140
Validity
Not Before: Jul 2 15:18:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=933da30b6f9e6232dabf7d1766ddaa1f79d6fd3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d7:b1:fc:14:12:e1:28:8a:2f:3c:4b:15:29:
da:f1:60:2b:68:d3:1a:52:32:92:c0:54:99:6d:f8:
0a:f7:01:66:24:f0:a7:f9:67:d6:e7:b0:73:59:56:
f4:32:3e:da:32:aa:64:f8:35:ad:25:ed:a9:e4:91:
40:b3:08:da:5d:bf:cc:b0:2b:59:a9:04:e3:19:ae:
ee:0f:25:ed:17:2a:0d:f2:48:3b:9e:2f:3c:a4:69:
0f:c9:46:7a:77:af:88:2d:33:d6:fb:17:cf:5d:7f:
eb:94:79:81:38:34:ce:07:b6:53:d0:72:89:c1:e9:
1b:35:70:2d:36:43:fb:4e:30:77:66:42:47:47:8d:
cb:a2:28:80:ce:b3:4c:7e:b1:d4:5e:65:dc:59:e6:
c7:8e:bb:49:a2:f7:b0:5b:b3:36:f9:28:6b:02:e9:
b9:56:e6:95:6c:6e:06:90:4a:07:77:d1:c0:2d:b6:
8d:e1:ba:eb:2f:81:88:59:d3:c6:ea:52:74:ac:e1:
e2:67:6e:54:ad:89:4d:6b:68:51:48:33:87:b4:71:
ba:18:ed:78:25:4a:80:aa:66:9d:0f:06:e7:35:0a:
42:ce:fe:0b:d9:36:90:0a:28:8e:d9:c8:f2:ef:a4:
db:55:54:50:06:29:6d:9a:4c:53:7e:c2:fd:d4:98:
74:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:3D:A3:0B:6F:9E:62:32:DA:BF:7D:17:66:DD:AA:1F:79:D6:FD:3F
X509v3 Authority Key Identifier:
keyid:9F:1C:35:0C:F5:67:34:5E:5D:75:E6:C5:3E:04:DF:4E:12:41:C1:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxw1DPVnNF5ddebFPgTfThJBwUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/kz2jC2-eYjLav30XZt2qH3nW_T8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/nxw1DPVnNF5ddebFPgTfThJBwUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.89.176.0/22
Signature Algorithm: sha256WithRSAEncryption
75:61:d7:ed:3e:c7:b3:02:96:84:e5:ae:6b:0e:3a:3f:e4:29:
3b:92:e9:02:f2:a4:d6:4e:b3:3e:1b:ca:e3:30:22:d5:36:cc:
49:9f:d1:cd:64:45:8a:b1:30:7e:b1:9d:0e:c6:c5:42:1c:7a:
c4:1a:0e:f4:3b:63:f0:54:d5:7b:49:b4:4c:41:b9:ba:66:df:
48:2e:ff:d1:0b:44:aa:12:8b:c2:2f:db:75:8d:92:c0:80:69:
0f:fe:8d:02:bf:32:a5:b2:58:49:39:cd:ee:ad:92:f5:26:b6:
9a:ba:ff:b3:ff:dd:61:ba:56:cc:0b:21:b5:e3:95:9b:e8:9c:
0e:31:be:bb:88:a7:ea:cf:a0:8c:6d:11:7e:88:59:8c:ac:0b:
e1:f6:5d:cd:90:90:bd:0d:37:9c:40:21:f9:a4:73:b7:7b:cb:
b8:43:f0:b0:73:5b:54:ea:4c:e4:cd:69:33:7b:45:e2:48:cc:
f7:6e:94:d3:9b:32:f7:e5:61:e7:60:b7:5c:d4:8f:f8:65:b1:
c0:a2:83:ff:f9:72:83:b0:f1:af:ed:6e:a8:12:0c:9e:8b:ac:
48:37:32:31:cb:73:17:2c:6b:99:2c:54:bc:8c:a4:7f:31:03:
12:25:94:f9:a2:61:86:33:27:ee:23:d1:c7:b6:d6:02:97:7e:
0e:be:3e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:59:02 2026 by rpki-client