Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/Z4T7Q0-QJJksCVhVwupiW0UlX7k.roa
File: Z4T7Q0-QJJksCVhVwupiW0UlX7k.roa (raw, json)
Hash identifier: CukIOrDxoOKRWrlt6E9jWHNJXojigZFQyEslPspkR3U=
Subject key identifier: 67:84:FB:43:4F:90:24:99:2C:09:58:55:C2:EA:62:5B:45:25:5F:B9
Certificate issuer: /CN=56e41e2601dc2fae75c686fb2f97fc119a9933d5
Certificate serial: 019F236924327306568CE3A224604EC34BB7
Authority key identifier: 56:E4:1E:26:01:DC:2F:AE:75:C6:86:FB:2F:97:FC:11:9A:99:33:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VuQeJgHcL651xob7L5f8EZqZM9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/Z4T7Q0-QJJksCVhVwupiW0UlX7k.roa
Signing time: Thu 02 Jul 2026 15:18:40 +0000
ROA not before: Thu 02 Jul 2026 15:18:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20836
IP address blocks: 5.253.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/VuQeJgHcL651xob7L5f8EZqZM9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/VuQeJgHcL651xob7L5f8EZqZM9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/VuQeJgHcL651xob7L5f8EZqZM9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:24:32:73:06:56:8c:e3:a2:24:60:4e:c3:4b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56e41e2601dc2fae75c686fb2f97fc119a9933d5
Validity
Not Before: Jul 2 15:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6784fb434f9024992c095855c2ea625b45255fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e4:8c:68:ec:ce:c1:ca:a6:e7:47:98:50:1e:
36:b2:53:e9:31:e3:ee:00:df:9d:1f:58:12:cb:f3:
1c:58:cb:ca:af:ab:81:17:59:a2:ca:c9:26:0f:10:
3e:7c:20:c9:ae:50:cd:77:c9:53:7a:d1:2e:87:fc:
13:a9:3b:bf:7f:0f:68:39:24:80:ed:f9:22:0a:92:
99:f8:b7:03:cf:6c:d2:39:bc:0f:25:91:36:fb:d7:
c3:62:04:93:fa:8f:4c:ec:95:2e:d1:ce:26:53:9c:
ca:d7:40:9b:d1:dd:88:f7:5e:07:34:c1:08:51:0a:
d7:a9:3a:7f:cf:70:2f:b0:89:62:12:cb:f4:a0:01:
2b:56:25:d9:51:98:06:3e:d4:a7:20:ba:65:c0:e0:
d0:c0:06:b2:85:6f:65:19:00:9e:05:3c:f3:73:7a:
db:a1:88:80:e1:bb:2f:6e:7f:88:83:33:2d:29:79:
46:77:42:b6:91:76:86:74:f5:9b:88:a2:2e:d7:5f:
81:57:8b:2a:a6:38:53:e3:9f:94:a1:46:44:0a:18:
f1:93:f8:24:8e:9c:6c:d7:ad:fd:1b:86:0f:65:6a:
42:e2:e9:74:7e:46:f3:b8:26:63:dd:49:aa:1c:7c:
95:57:9a:9e:84:d8:10:f9:53:97:43:ab:5c:10:b1:
62:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:84:FB:43:4F:90:24:99:2C:09:58:55:C2:EA:62:5B:45:25:5F:B9
X509v3 Authority Key Identifier:
keyid:56:E4:1E:26:01:DC:2F:AE:75:C6:86:FB:2F:97:FC:11:9A:99:33:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuQeJgHcL651xob7L5f8EZqZM9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/Z4T7Q0-QJJksCVhVwupiW0UlX7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/VuQeJgHcL651xob7L5f8EZqZM9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.198.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:f1:9d:83:7b:64:74:01:17:4b:9f:73:58:73:fd:8f:9a:86:
36:0b:03:48:71:a3:4f:87:f3:cc:05:8d:a3:95:83:46:99:5b:
36:db:8e:9b:43:ae:9d:b2:a0:1d:cf:ed:2e:b9:7e:f0:b1:b5:
4d:ed:30:53:5a:af:68:ae:7e:21:28:d9:19:a2:5e:c4:71:a0:
09:85:c4:c7:02:98:73:57:df:7c:01:c5:bf:46:5d:21:5d:43:
a0:64:94:4f:5a:e7:66:b2:3d:e4:37:a7:89:70:a3:bb:fb:e3:
fa:40:c1:6a:4c:89:56:99:53:7e:7a:3e:53:9d:3d:f3:d8:b1:
27:29:48:de:95:19:7e:7d:d2:fe:a6:f3:e1:a5:f4:3a:6d:34:
df:9a:3a:4f:18:68:bc:05:f7:5f:06:bd:04:03:57:57:19:31:
fc:cf:fb:b3:ea:41:e0:e1:e7:1f:f4:ae:ea:d1:15:21:ad:0c:
4b:3f:49:0b:f5:a4:44:9d:b9:6e:59:b2:96:cd:22:ba:0e:b6:
49:2d:de:70:eb:22:0b:71:4d:07:23:db:3f:80:ab:8c:6f:ce:
05:af:80:67:0c:c9:d5:36:c0:b0:dc:d1:7f:49:0b:2f:a1:ee:
df:d9:20:7b:ef:62:29:42:70:8d:13:23:b6:d7:56:f5:af:db:
50:02:26:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:13:16 2026 by rpki-client