Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ZZLdT9OqaHhbufmn3yePI8M3GOo.roa
File: ZZLdT9OqaHhbufmn3yePI8M3GOo.roa (raw, json)
Hash identifier: aHLvBRUljLuTqe4n6izNcmIks3bzIGaNNxKg13/etWk=
Subject key identifier: 65:92:DD:4F:D3:AA:68:78:5B:B9:F9:A7:DF:27:8F:23:C3:37:18:EA
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A0C52DCD585DF6EC6956D359E7894B808E
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ZZLdT9OqaHhbufmn3yePI8M3GOo.roa
Signing time: Mon 21 Sep 2026 18:15:08 +0000
ROA not before: Mon 21 Sep 2026 18:15:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198180
IP address blocks: 9.247.6.0/24 maxlen: 24
89.125.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 11:32:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:2d:cd:58:5d:f6:ec:69:56:d3:59:e7:89:4b:80:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 21 18:15:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6592dd4fd3aa68785bb9f9a7df278f23c33718ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1b:ad:a1:b2:5d:a7:6c:cb:c4:f5:52:25:73:
8a:8b:3b:5c:ef:b5:40:e5:19:2a:d9:0b:8e:b2:ec:
c3:e3:b2:fa:e9:e4:99:1c:f9:89:7f:e3:8e:ce:62:
a4:19:e0:1b:e0:ad:82:ee:13:5b:15:8b:89:16:5e:
3b:b6:7b:b0:ad:f6:c9:6e:16:cd:f8:10:75:2b:68:
bb:79:e7:6f:b9:8e:5c:ef:69:20:40:89:5a:e3:39:
7e:ad:67:1f:b3:54:dc:5a:44:2b:f6:b8:9b:ea:39:
9c:49:28:8c:a3:59:52:82:b6:d0:54:72:2b:ab:56:
72:25:a9:8d:6a:0f:91:89:6b:6a:ec:47:97:8c:11:
28:d9:7d:d0:95:af:22:92:f5:20:e6:df:2d:ed:c3:
cd:1e:a2:8e:58:12:48:3d:37:c4:ea:0d:b1:13:fc:
4d:45:c4:71:e2:a7:bc:21:d9:2f:e9:a6:a0:3d:31:
f2:77:d9:b8:e0:bb:45:bd:1b:c0:f5:3c:c0:be:98:
49:63:59:50:55:9d:9c:33:52:88:f2:0c:e7:c8:17:
cd:3c:da:23:f9:68:f5:88:64:a1:89:f8:62:54:d5:
a5:87:4e:19:d8:a1:95:9b:bc:72:20:63:fa:59:f1:
12:0b:ca:af:52:5c:fe:8a:1a:f9:50:d6:60:2d:a8:
0d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:92:DD:4F:D3:AA:68:78:5B:B9:F9:A7:DF:27:8F:23:C3:37:18:EA
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ZZLdT9OqaHhbufmn3yePI8M3GOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.247.6.0/24
89.125.112.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:1f:60:2d:84:a7:11:2d:8d:f1:5b:db:3a:3e:49:f3:bd:50:
1b:c6:e5:20:24:5b:b4:9a:b4:5d:d3:f7:ef:2f:d4:30:9a:2f:
be:31:55:b6:a3:1b:d8:a5:b3:7f:de:4e:5b:ed:f9:47:7e:67:
1f:6e:03:b9:7e:bd:fa:c8:10:28:5c:6d:8c:bf:a9:9c:f8:dc:
b8:ff:21:7c:b8:f7:da:7f:1e:c3:d4:51:17:2f:4e:0b:df:4b:
5c:76:69:84:e8:a7:1f:0b:89:2f:4d:14:06:df:b8:ac:c6:97:
c8:98:0e:ad:44:20:79:fc:55:9e:f9:9e:5d:22:32:72:fd:86:
11:a7:c1:ec:d2:c3:ea:93:cd:76:31:a7:51:25:8c:a3:f3:6b:
96:92:71:d5:29:c3:57:14:1d:ac:ee:68:f3:59:16:79:fa:cd:
a5:f1:5a:05:27:af:c8:be:3a:ce:5e:38:25:9f:7c:2d:eb:67:
16:71:d9:29:bb:02:ce:69:1f:a6:31:82:ec:28:2a:35:49:3c:
02:d4:6f:75:97:da:40:cc:4b:82:f4:63:d8:11:d5:7a:2e:45:
cf:4d:6f:7e:84:16:6f:9b:2d:74:85:1b:29:48:ce:e7:82:67:
ef:ce:81:39:17:14:a6:f7:ba:0a:fc:2a:c2:55:c7:d3:82:40:
84:ec:3e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:10:13 2026 by rpki-client