Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/x_RZ35pFC_70oNViYCHn-IKufVM.roa
File: x_RZ35pFC_70oNViYCHn-IKufVM.roa (raw, json)
Hash identifier: aryTWCsqJLNJ0tKQxlCwfkXEmtVS+zAt9/NfJrwXvCc=
Subject key identifier: C7:F4:59:DF:9A:45:0B:FE:F4:A0:D5:62:60:21:E7:F8:82:AE:7D:53
Certificate issuer: /CN=e939540fd16b633501fbf7441a746fc56f9f59bf
Certificate serial: 01A0CCF5F877CA6D428E5C2DFBE88DA1263D
Authority key identifier: E9:39:54:0F:D1:6B:63:35:01:FB:F7:44:1A:74:6F:C5:6F:9F:59:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6TlUD9FrYzUB-_dEGnRvxW-fWb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/x_RZ35pFC_70oNViYCHn-IKufVM.roa
Signing time: Wed 23 Sep 2026 06:31:07 +0000
ROA not before: Wed 23 Sep 2026 06:31:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218732
IP address blocks: 176.120.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/6TlUD9FrYzUB-_dEGnRvxW-fWb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/6TlUD9FrYzUB-_dEGnRvxW-fWb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6TlUD9FrYzUB-_dEGnRvxW-fWb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:f5:f8:77:ca:6d:42:8e:5c:2d:fb:e8:8d:a1:26:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e939540fd16b633501fbf7441a746fc56f9f59bf
Validity
Not Before: Sep 23 06:31:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c7f459df9a450bfef4a0d5626021e7f882ae7d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:eb:38:48:d9:8c:cb:51:f2:e0:31:ea:29:dc:
92:14:e3:a7:5f:57:ae:d5:50:d4:79:63:26:ca:45:
32:28:41:8c:03:37:34:02:d4:ab:19:0d:c0:ca:09:
1f:38:c7:f5:9d:53:18:9e:83:7b:88:f2:d4:a2:53:
21:cb:ac:bc:2f:26:b9:61:1a:e6:5e:0a:a2:cd:ff:
a1:df:2b:eb:70:55:26:69:01:d8:0b:0e:b4:02:0e:
2d:80:4f:a8:a1:09:26:c7:94:f2:b2:3f:2e:29:50:
e3:8e:19:b2:8a:c9:2e:92:47:14:e4:36:9c:69:42:
2b:57:d7:97:5a:5d:c3:e7:a3:fc:c0:cb:45:b9:e1:
c2:9e:a2:6f:0c:95:53:a3:74:c8:78:61:9f:66:05:
c1:20:66:c3:db:fa:bc:1d:20:45:af:bc:a9:8a:07:
ea:f9:da:f4:e9:7f:50:b0:a3:04:88:f3:0e:79:68:
73:8b:43:a5:34:df:65:82:36:40:51:27:b7:4b:fd:
07:88:08:ec:91:5a:96:8f:3e:2c:2c:a4:d0:26:ba:
86:79:92:bd:27:0b:0b:19:b3:01:38:ef:00:77:70:
c7:a8:29:db:d6:d0:16:cc:8f:29:6c:62:f9:f1:db:
94:c2:74:8c:e2:76:e4:b9:9a:a0:92:5e:45:1d:3b:
df:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F4:59:DF:9A:45:0B:FE:F4:A0:D5:62:60:21:E7:F8:82:AE:7D:53
X509v3 Authority Key Identifier:
keyid:E9:39:54:0F:D1:6B:63:35:01:FB:F7:44:1A:74:6F:C5:6F:9F:59:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TlUD9FrYzUB-_dEGnRvxW-fWb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/x_RZ35pFC_70oNViYCHn-IKufVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/6TlUD9FrYzUB-_dEGnRvxW-fWb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.120.17.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:1c:0e:83:99:2f:cf:76:54:1f:28:3e:4f:54:7c:96:ab:8d:
55:2d:b3:2c:85:b6:e3:4c:d5:8f:09:e6:aa:73:4c:94:75:54:
b8:76:ac:87:99:ce:ef:ee:d5:5c:3c:8c:c9:7e:4f:8e:d1:da:
60:04:7d:4c:17:c3:3d:77:3c:f2:c0:a9:05:4a:68:76:f6:9c:
74:c5:57:da:cc:18:4b:d1:ec:66:66:8f:bd:3e:f0:e3:be:ce:
e7:f3:28:ae:1e:f2:88:2e:b6:8e:65:70:a9:bd:91:ee:60:14:
b4:1b:0b:e5:9f:66:c2:a6:8a:80:bc:1a:17:75:e8:c7:f1:53:
12:6a:a0:21:35:c6:c6:96:b7:1a:93:b9:15:ee:66:a1:57:91:
1b:4b:75:ef:2c:84:98:cf:ed:d3:ff:b6:21:8d:86:b3:2f:f4:
d8:1b:c5:c1:48:f6:61:2c:2f:85:40:5f:97:fc:80:ec:39:56:
6f:5f:93:63:30:52:f2:85:93:b2:62:dc:58:96:04:e9:90:c0:
73:d0:4d:60:ff:76:9a:16:42:29:c1:31:6c:94:a9:03:e6:28:
21:4e:2b:bb:96:d9:24:8f:3c:49:22:74:d8:ec:69:e9:92:8c:
17:fa:fe:d2:9f:82:2b:dc:a2:4e:93:3e:18:b8:a6:bc:58:8c:
a0:40:e8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:44:09 2026 by rpki-client