Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/2ceefd-d7d4-418d-8443-2960d6ec7b46/1/Z4As5jdK0zqqLdqcEYEpyza0LWU.roa
File: Z4As5jdK0zqqLdqcEYEpyza0LWU.roa (raw, json)
Hash identifier: 57a2i1Qehwj+//Suej0ubTZbtNBhcr4cBpOYAp/+H0s=
Subject key identifier: 67:80:2C:E6:37:4A:D3:3A:AA:2D:DA:9C:11:81:29:CB:36:B4:2D:65
Certificate issuer: /CN=52223deb5c3bd1f59fdeac3ce12bdeec74e7363d
Certificate serial: 01A0CE81AABDE0C56F1E0488AC232E42ACAE
Authority key identifier: 52:22:3D:EB:5C:3B:D1:F5:9F:DE:AC:3C:E1:2B:DE:EC:74:E7:36:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiI961w70fWf3qw84Sve7HTnNj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/2ceefd-d7d4-418d-8443-2960d6ec7b46/1/Z4As5jdK0zqqLdqcEYEpyza0LWU.roa
Signing time: Wed 23 Sep 2026 13:43:19 +0000
ROA not before: Wed 23 Sep 2026 13:43:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59563
IP address blocks: 91.239.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/2ceefd-d7d4-418d-8443-2960d6ec7b46/1/UiI961w70fWf3qw84Sve7HTnNj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/2ceefd-d7d4-418d-8443-2960d6ec7b46/1/UiI961w70fWf3qw84Sve7HTnNj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/UiI961w70fWf3qw84Sve7HTnNj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:81:aa:bd:e0:c5:6f:1e:04:88:ac:23:2e:42:ac:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52223deb5c3bd1f59fdeac3ce12bdeec74e7363d
Validity
Not Before: Sep 23 13:43:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=67802ce6374ad33aaa2dda9c118129cb36b42d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a9:59:f5:1c:1a:5a:3b:45:1c:a6:1b:ef:0e:
d5:17:51:92:0a:83:b4:c2:9e:39:0e:65:93:2f:8b:
7e:e2:be:9f:a1:68:df:2e:88:20:41:04:f1:94:4d:
66:64:90:cc:62:af:88:02:b5:f6:13:40:d5:48:87:
45:13:82:00:90:2e:b6:44:02:36:f3:d0:6d:aa:80:
f6:c0:28:f8:7a:de:d8:16:b9:40:56:42:3e:5a:b2:
8d:89:11:b1:9c:cf:f5:e0:09:76:4c:28:76:8e:62:
05:65:c8:6f:f2:5b:6a:da:f1:6b:65:0a:7c:62:05:
13:14:95:ab:47:ef:61:3f:cd:d6:61:22:7e:8d:59:
89:4e:1b:a0:75:2e:e4:84:bf:86:5a:f1:05:f3:16:
fe:07:95:2f:ce:d0:4a:fb:f4:a9:f6:6d:cc:9e:b0:
7d:6d:99:da:fd:d4:35:ed:ed:e7:b6:5e:75:90:a0:
69:b7:c5:97:73:32:77:b6:a7:2b:b5:5f:d2:38:98:
70:37:e4:18:22:7b:ee:e3:ab:e5:01:57:ce:89:e2:
c2:59:54:bb:56:9b:06:01:1f:a2:e7:aa:e0:87:83:
0d:e0:9a:5b:d8:04:ae:d6:10:06:ba:bb:dd:91:6b:
5b:3f:03:6d:61:48:0d:e0:23:37:17:9c:a4:45:1c:
7c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:80:2C:E6:37:4A:D3:3A:AA:2D:DA:9C:11:81:29:CB:36:B4:2D:65
X509v3 Authority Key Identifier:
keyid:52:22:3D:EB:5C:3B:D1:F5:9F:DE:AC:3C:E1:2B:DE:EC:74:E7:36:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiI961w70fWf3qw84Sve7HTnNj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/2ceefd-d7d4-418d-8443-2960d6ec7b46/1/Z4As5jdK0zqqLdqcEYEpyza0LWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/2ceefd-d7d4-418d-8443-2960d6ec7b46/1/UiI961w70fWf3qw84Sve7HTnNj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.12.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:65:1c:af:e7:77:36:77:cf:2f:0a:2b:b7:84:7a:86:59:c5:
83:b6:7b:72:00:27:b1:27:9f:1c:20:7b:6c:08:2f:53:2e:36:
98:64:48:6a:65:13:98:66:59:21:12:e8:45:f8:8f:9a:61:1f:
5a:0a:47:0c:fd:cf:e6:d7:6b:d1:d7:a0:d4:5b:70:05:2e:71:
d4:dc:ed:1c:63:c1:e7:bb:03:f7:27:72:73:c3:22:00:ba:24:
05:db:bc:61:ab:c3:c8:61:08:7e:41:a8:02:7b:5f:52:01:21:
0b:98:9a:b4:b9:fa:3d:a1:3a:ec:e4:81:40:a4:35:a2:b3:e9:
20:25:55:8e:c2:08:c4:09:58:0d:4e:3a:b3:15:ad:7f:13:e5:
14:9b:08:d9:ba:50:a2:83:f0:ae:f8:40:8b:fb:f0:ad:9f:a8:
c9:d5:93:b4:16:39:ea:ae:a2:18:bf:d6:c8:17:56:5b:d5:a7:
1a:ae:23:9c:8e:b2:83:ee:74:00:f4:a4:9d:bd:52:e7:bc:12:
19:31:b6:e8:15:4d:8d:1d:bb:0a:4a:26:c5:4a:0c:54:3c:6a:
85:97:d0:fa:7e:fb:72:02:b6:57:ef:54:69:ed:8d:6b:62:3b:
4b:be:78:65:f1:48:1b:2c:84:8d:30:ce:90:6f:c8:84:f9:2e:
b0:db:27:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:30:15 2026 by rpki-client