Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/zhCDh7PbNyBH4tCL69GJAp1Q5tM.roa
File: zhCDh7PbNyBH4tCL69GJAp1Q5tM.roa (raw, json)
Hash identifier: s7/fc2YWtnDS7yNqdRxilowXtZ6B0AButj985U72pvE=
Subject key identifier: CE:10:83:87:B3:DB:37:20:47:E2:D0:8B:EB:D1:89:02:9D:50:E6:D3
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A10CD57098A84FBC51B7C6AEC855777B3B
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/zhCDh7PbNyBH4tCL69GJAp1Q5tM.roa
Signing time: Mon 05 Oct 2026 16:11:16 +0000
ROA not before: Mon 05 Oct 2026 16:11:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25369
IP address blocks: 77.67.26.0/24 maxlen: 24
195.21.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0c:d5:70:98:a8:4f:bc:51:b7:c6:ae:c8:55:77:7b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 5 16:11:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ce108387b3db372047e2d08bebd189029d50e6d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2e:b8:de:9b:20:87:66:98:21:6d:47:f3:56:
af:27:f4:b1:d1:02:71:3b:83:9c:69:bc:bd:92:67:
5d:1a:f1:f7:ce:5b:2f:4d:97:61:a7:cf:91:5f:73:
30:c4:03:ac:99:56:d9:54:a2:5c:fa:a8:76:b1:c5:
3d:37:2d:2f:03:5f:79:9b:e6:b2:35:74:69:e0:1f:
9d:c4:ad:70:61:65:a3:7a:22:a3:df:19:9e:cd:0d:
66:a0:06:28:a5:5e:65:31:b5:b8:42:32:10:f2:90:
2f:82:b6:87:38:4e:a4:ca:ff:27:25:6d:25:aa:43:
55:10:a0:d1:6f:3a:a1:2c:8d:aa:e4:a9:a1:f1:59:
e5:ec:ba:84:b6:d2:cd:a2:a3:2e:c0:58:3d:7b:b1:
d1:6a:d8:01:55:bd:0b:a8:de:3a:07:33:7c:bd:18:
2a:a6:1f:45:72:95:22:7f:1e:14:4f:01:34:ac:f6:
f0:f0:7e:26:9f:37:d3:e5:b7:07:3e:20:a9:9d:aa:
eb:4a:79:81:39:1c:7c:cc:f9:c0:b7:46:f6:71:b8:
b8:d5:25:89:d1:a9:bb:68:30:1b:9b:55:18:2c:3b:
b2:53:b4:74:5a:92:a9:a2:fa:12:e7:bf:e7:1e:f2:
13:66:a8:ae:d2:71:2f:56:49:00:99:da:74:12:6a:
76:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:10:83:87:B3:DB:37:20:47:E2:D0:8B:EB:D1:89:02:9D:50:E6:D3
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/zhCDh7PbNyBH4tCL69GJAp1Q5tM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.67.26.0/24
195.21.149.0/24
Signature Algorithm: sha256WithRSAEncryption
73:66:a0:66:e6:87:56:e6:fa:92:4c:54:b6:13:2a:82:cf:86:
a4:65:6b:ff:33:dd:06:08:ce:12:7f:1a:72:ce:8d:04:2f:5b:
2e:8e:66:05:6e:80:0a:8c:bd:51:68:db:de:c6:eb:4d:e5:ec:
1c:a8:5d:14:20:95:98:5b:83:24:b8:34:0a:57:98:39:dc:f6:
2c:7b:25:0a:b1:57:45:10:dd:82:49:31:1a:8f:55:32:90:19:
ad:1c:4c:29:d4:d4:4f:24:6a:c1:67:52:81:dd:a3:ca:a9:7d:
14:f9:8f:d7:d2:08:39:6c:5c:2a:d2:4b:7e:8f:ba:64:b9:c7:
5d:b8:8d:c2:c1:4a:71:fd:34:43:85:2e:fd:b2:5e:da:c5:ea:
3c:58:72:10:4d:0b:0a:e8:d8:ca:c4:90:24:1d:ae:84:0a:4d:
69:ba:18:1e:5a:5c:d8:de:c3:32:b2:96:dd:5f:76:a4:44:6f:
9f:1f:b6:a9:20:aa:e5:a1:5c:e7:05:91:34:53:3e:e6:44:c2:
a0:4e:90:c8:24:0e:76:ee:49:51:0c:4e:33:9e:b4:6b:1d:3b:
78:62:2f:bf:f6:b0:6f:7e:50:35:c3:79:4a:2f:95:93:15:f0:
1f:fc:d1:12:fb:f9:c2:be:a0:f4:3a:6b:30:76:61:e2:54:ba:
97:82:99:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 16:46:39 2026 by rpki-client