Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/zIOSTykVc36D8SnbJZHi0FQd05Y.roa
File: zIOSTykVc36D8SnbJZHi0FQd05Y.roa (raw, json)
Hash identifier: qZtcMDx5ye7mHsew9NCTHHuvczJbnZxpM/XrN9SLc9I=
Subject key identifier: CC:83:92:4F:29:15:73:7E:83:F1:29:DB:25:91:E2:D0:54:1D:D3:96
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 01A0E7672FC3D7BD71747C7B9A08E292C423
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/zIOSTykVc36D8SnbJZHi0FQd05Y.roa
Signing time: Mon 28 Sep 2026 09:44:54 +0000
ROA not before: Mon 28 Sep 2026 09:44:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 132.243.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 09:44:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:67:2f:c3:d7:bd:71:74:7c:7b:9a:08:e2:92:c4:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Sep 28 09:44:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cc83924f2915737e83f129db2591e2d0541dd396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:cd:2f:1d:48:8f:81:b2:ae:76:1b:25:8b:6d:
68:49:07:e4:45:8c:52:01:64:e1:c5:cd:f5:c4:e8:
b5:28:8e:64:35:29:88:87:2e:c7:c7:06:d9:29:28:
31:ba:9d:ec:e7:ee:8a:a6:82:e0:7b:fe:c6:41:37:
7a:81:77:2f:8d:d0:0c:a8:73:26:cf:58:c9:a9:e9:
de:9c:dd:a1:49:3d:91:77:c9:c3:20:2a:ec:14:79:
74:00:b7:8a:72:f7:62:9e:60:64:c6:cb:fc:96:56:
82:74:e6:b2:57:88:2a:7d:ae:49:4f:5a:84:df:ff:
ad:d0:4e:21:56:71:52:00:3e:7c:a0:40:6e:04:d5:
9d:21:2d:8a:2c:30:73:ce:ee:11:f8:e0:54:e5:08:
8f:1e:8e:40:28:77:3e:bd:c3:b4:01:0c:c6:67:6d:
a5:e6:58:c0:2a:0d:81:d6:12:05:25:63:5f:43:5b:
8b:75:82:18:ca:04:50:37:63:24:16:27:7f:3c:ac:
6c:ab:24:76:ea:e4:44:3d:16:ae:26:d7:c9:69:9d:
42:39:69:47:8e:12:bd:5c:ee:a7:c6:63:9e:75:ed:
88:59:8f:a1:7d:53:7c:d4:f3:04:37:04:4f:06:0d:
72:90:4c:e7:36:86:89:17:08:38:40:5e:2b:3c:79:
95:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:83:92:4F:29:15:73:7E:83:F1:29:DB:25:91:E2:D0:54:1D:D3:96
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/zIOSTykVc36D8SnbJZHi0FQd05Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.243.64.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:8d:c8:39:28:36:c4:09:74:f7:36:5c:4e:04:64:16:4b:73:
37:57:f3:a1:c9:06:0e:a0:0e:b0:44:f2:ca:f4:b4:86:91:99:
bd:14:fb:98:98:cf:1f:31:cf:c3:38:73:6a:0a:68:a2:77:83:
2f:6d:7a:03:60:cc:8a:f8:90:9c:6d:70:f4:12:09:9a:fd:6f:
09:34:4c:16:75:d5:94:2d:25:f3:26:28:8b:79:81:e8:63:03:
81:01:04:b4:0a:a0:29:c9:29:2a:96:e8:50:5e:d9:a6:f7:3a:
f0:30:a1:46:fd:8d:7f:ff:ef:78:04:84:5c:c7:34:00:a0:15:
ee:32:5e:46:c4:7c:55:40:2d:a5:56:6d:c4:5f:9c:10:af:b9:
15:32:c6:0e:1c:29:92:59:3e:19:c0:64:98:ac:4b:fb:88:c0:
9e:1f:db:62:87:20:d5:87:55:03:5a:cb:47:64:3d:b5:2a:fe:
34:5d:72:f2:7e:3a:12:1f:44:58:d9:99:ae:14:a2:d8:b0:4a:
5f:23:d3:d3:1a:73:0b:3f:d6:77:53:c6:e1:29:8b:6c:c5:92:
9d:d2:de:20:57:26:4a:7e:a6:86:d5:e2:a0:7b:81:67:54:ad:
0f:9c:3d:9d:23:2b:bb:2b:a8:fb:bf:b6:e5:ed:e0:9d:b2:2a:
d1:1a:43:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:22:29 2026 by rpki-client