Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/zDOGvp-54c5DIz8rZDqXtpIogVg.roa
File: zDOGvp-54c5DIz8rZDqXtpIogVg.roa (raw, json)
Hash identifier: 4Aw3hILMm0mcpv1TfZ7Rq5nLkI9ScVMUPUFaf113hZg=
Subject key identifier: CC:33:86:BE:9F:B9:E1:CE:43:23:3F:2B:64:3A:97:B6:92:28:81:58
Certificate issuer: /CN=3b0bf18d6bbdb33da82fe61a28624ba72e235040
Certificate serial: 019F47E391321FCECEDAC0A41BE78DB9BE37
Authority key identifier: 3B:0B:F1:8D:6B:BD:B3:3D:A8:2F:E6:1A:28:62:4B:A7:2E:23:50:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/zDOGvp-54c5DIz8rZDqXtpIogVg.roa
Signing time: Thu 09 Jul 2026 17:18:43 +0000
ROA not before: Thu 09 Jul 2026 17:18:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 38323
IP address blocks: 209.33.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:e3:91:32:1f:ce:ce:da:c0:a4:1b:e7:8d:b9:be:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b0bf18d6bbdb33da82fe61a28624ba72e235040
Validity
Not Before: Jul 9 17:18:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cc3386be9fb9e1ce43233f2b643a97b692288158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2c:5b:b1:d5:0e:4e:52:d8:7e:78:cc:ab:56:
e6:1c:ec:dd:b7:de:55:70:a3:35:a0:ef:b0:11:40:
b9:f5:d0:18:17:f9:e1:c1:38:58:3d:90:74:b6:34:
b6:fd:e2:e9:dd:80:9d:75:40:d7:5c:88:da:04:3a:
05:af:75:26:b6:84:e0:3f:dd:09:52:c8:11:51:25:
1c:1a:2d:da:fc:b5:7b:68:39:0c:c8:32:2a:0d:08:
74:62:f4:50:e0:38:22:c4:d0:e3:4c:97:92:e7:2d:
93:64:9e:68:b3:d3:ed:0d:04:39:0f:1a:6f:a2:72:
05:80:06:44:e3:36:ed:8b:30:50:bb:4d:77:4d:26:
0b:73:63:5b:c3:85:16:0c:cb:36:17:ba:09:ed:af:
76:53:f4:81:69:06:b4:77:45:1a:9d:a8:97:11:81:
90:8b:03:8a:84:be:99:bb:df:1a:2b:40:1e:8d:4e:
7e:51:fa:db:ca:2c:a7:74:fe:55:c0:a7:02:dc:8f:
4e:d1:3b:05:5e:32:7a:5c:93:09:aa:c7:e1:81:3d:
df:2c:72:fb:f0:bb:1a:45:07:6c:b7:0e:2a:4c:c8:
e5:46:ed:3c:fd:a5:82:43:c7:68:ff:0b:ba:fb:67:
60:02:ed:11:46:c1:1d:17:37:da:f8:23:31:22:95:
a6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:33:86:BE:9F:B9:E1:CE:43:23:3F:2B:64:3A:97:B6:92:28:81:58
X509v3 Authority Key Identifier:
keyid:3B:0B:F1:8D:6B:BD:B3:3D:A8:2F:E6:1A:28:62:4B:A7:2E:23:50:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/zDOGvp-54c5DIz8rZDqXtpIogVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.33.177.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:5e:8e:e5:f6:27:e6:5d:5e:95:a2:01:a0:90:2f:98:73:92:
e4:49:82:f0:fc:c5:21:a4:18:e4:ac:2b:c8:64:79:6e:08:57:
5d:fb:2d:c6:4b:72:f2:86:63:ea:b9:b0:e0:43:73:84:ce:3b:
56:0d:af:d6:db:db:b2:94:db:2c:f1:6a:62:03:fb:b2:9c:21:
10:40:60:71:22:ab:19:80:40:4b:bb:90:62:5c:2e:61:cc:d1:
c6:f1:39:f0:ac:0c:12:9a:80:ad:2a:7c:5a:f8:3d:43:0a:e3:
57:8a:78:83:54:6c:1d:49:d2:57:cf:63:4d:19:31:d7:ac:46:
af:83:76:51:29:8e:b0:6f:23:5c:a5:73:c4:ad:d4:63:70:45:
1b:03:64:24:4a:3f:85:02:99:16:8f:f2:3c:71:62:76:7a:6b:
d9:4c:92:9f:ac:20:92:61:21:69:04:b2:7d:da:ea:ec:82:e9:
e3:78:31:b9:f6:5c:e0:3c:5c:b5:84:1e:3c:d2:2b:69:ee:f4:
b1:f4:a8:9a:f2:3b:26:d4:74:80:3e:5f:da:78:6e:6e:75:fc:
f3:1d:4f:82:5c:05:21:20:03:16:da:9a:6b:f3:a1:7c:22:3a:
5c:cb:3c:08:4b:fe:e4:7d:c7:e8:aa:1f:d1:4c:ac:1c:11:aa:
84:be:92:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:20:42 2026 by rpki-client