Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/053c6d-6c47-4e31-b36f-406b11c53b85/1/Z-ZOiTUQ7YjrOleV4YlZJzDgCCY.roa
File: Z-ZOiTUQ7YjrOleV4YlZJzDgCCY.roa (raw, json)
Hash identifier: ZM7zbsbbuuEKFxs+0/hoH2Zyr2M+8XmPDASRtn30LXc=
Subject key identifier: 67:E6:4E:89:35:10:ED:88:EB:3A:57:95:E1:89:59:27:30:E0:08:26
Certificate issuer: /CN=d59980995bb11fb1ffabe0c9faa2f766752414d7
Certificate serial: 019F82E1A810BB6F636C497648FA609699E4
Authority key identifier: D5:99:80:99:5B:B1:1F:B1:FF:AB:E0:C9:FA:A2:F7:66:75:24:14:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ZmAmVuxH7H_q-DJ-qL3ZnUkFNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/053c6d-6c47-4e31-b36f-406b11c53b85/1/Z-ZOiTUQ7YjrOleV4YlZJzDgCCY.roa
Signing time: Tue 21 Jul 2026 04:14:14 +0000
ROA not before: Tue 21 Jul 2026 04:14:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219388
IP address blocks: 153.56.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/053c6d-6c47-4e31-b36f-406b11c53b85/1/1ZmAmVuxH7H_q-DJ-qL3ZnUkFNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/053c6d-6c47-4e31-b36f-406b11c53b85/1/1ZmAmVuxH7H_q-DJ-qL3ZnUkFNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ZmAmVuxH7H_q-DJ-qL3ZnUkFNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:82:e1:a8:10:bb:6f:63:6c:49:76:48:fa:60:96:99:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d59980995bb11fb1ffabe0c9faa2f766752414d7
Validity
Not Before: Jul 21 04:14:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=67e64e893510ed88eb3a5795e189592730e00826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:02:04:39:a1:2d:ca:10:d7:0a:25:22:86:e7:
c2:0d:a6:0b:31:2f:61:cd:1e:a9:9e:b4:d5:78:c3:
1c:8c:65:80:0f:2e:6b:99:de:93:cd:a3:6a:a0:f7:
b8:a1:12:b9:c1:c1:7d:7c:6c:54:f3:e8:67:52:71:
fe:af:58:b0:ae:45:c0:69:40:0a:91:ae:2e:9e:d9:
ec:e9:f5:8f:b8:c8:c5:cd:1b:ea:1e:d3:8e:9a:24:
ff:7f:0a:c3:fd:b9:15:36:3a:64:d2:9d:03:d0:43:
a2:7c:a9:64:32:7f:37:14:8e:f1:34:3c:5b:91:2c:
d1:30:cc:4c:cd:6a:cc:ca:6e:25:3b:da:fb:a5:33:
5f:24:33:bc:d2:fd:39:44:8e:23:2f:46:ff:d9:bb:
46:33:3e:eb:83:4e:98:26:a7:04:1b:c4:40:c5:6d:
2c:5f:1f:3b:2d:ba:93:77:7a:39:35:26:dc:e5:6a:
01:d8:be:35:7f:75:02:94:07:88:48:10:d9:4c:c2:
52:7c:05:b8:c4:b5:5e:92:5c:ed:0b:0d:41:8e:12:
e0:7b:5f:3d:08:9f:be:2e:ec:6c:aa:86:2b:15:d1:
99:e0:f0:c2:21:e3:64:f9:13:bb:c1:a5:72:f3:69:
bc:ae:a8:ef:74:68:3e:e4:a3:7a:7a:4d:eb:00:0a:
5c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E6:4E:89:35:10:ED:88:EB:3A:57:95:E1:89:59:27:30:E0:08:26
X509v3 Authority Key Identifier:
keyid:D5:99:80:99:5B:B1:1F:B1:FF:AB:E0:C9:FA:A2:F7:66:75:24:14:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ZmAmVuxH7H_q-DJ-qL3ZnUkFNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/053c6d-6c47-4e31-b36f-406b11c53b85/1/Z-ZOiTUQ7YjrOleV4YlZJzDgCCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/053c6d-6c47-4e31-b36f-406b11c53b85/1/1ZmAmVuxH7H_q-DJ-qL3ZnUkFNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.56.136.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:2c:21:af:26:0c:ef:39:1c:77:3a:08:7b:da:77:3f:bb:d1:
4f:ca:ac:ba:b1:6d:69:f5:11:08:71:44:a5:77:f2:02:68:fa:
98:e8:0c:fa:0d:4a:9c:aa:e0:93:f7:89:1d:07:79:33:50:9b:
7c:87:78:16:d6:5f:80:d2:c0:90:a3:af:76:74:b3:bd:e4:78:
69:22:73:65:9c:54:1a:9a:7e:84:20:30:fa:f4:c1:05:ab:7f:
ee:71:b7:cf:b9:98:83:e2:71:62:ec:4b:3b:36:09:dd:81:84:
4d:76:4c:ed:5a:43:94:f1:08:7b:38:0b:68:62:29:56:28:83:
40:12:c0:9b:15:cf:0b:ad:bc:55:20:f5:ce:33:91:46:f9:d9:
b9:5d:cb:a5:61:b4:11:e0:f6:3c:48:9b:16:bf:00:a3:fe:8a:
2b:54:ac:6f:88:41:14:0a:52:6d:c8:83:c4:b7:7e:44:0d:ed:
83:4c:f9:66:fe:a1:2d:57:12:76:04:ee:08:65:5f:7b:13:3c:
52:55:e2:d8:f0:02:49:e2:ea:ba:96:67:b9:92:c2:1b:a2:4c:
39:9b:8a:0c:28:f6:a6:c3:7a:15:5d:da:cb:4b:0f:d5:87:ae:
cf:17:f7:b9:3f:35:b7:89:0a:c3:d9:31:44:55:7b:59:09:c9:
3c:13:73:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:46:33 2026 by rpki-client