Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/1-zaHjVwrXdDitoh6SDMlLgRUArk.roa
File: 1-zaHjVwrXdDitoh6SDMlLgRUArk.roa (raw, json)
Hash identifier: 2dph5L/a7e013iS7+d1tHym3zVjN1Vn40bBX/w70pXQ=
Subject key identifier: FB:36:87:8D:5C:2B:5D:D0:E2:B6:88:7A:48:33:25:2E:04:54:02:B9
Certificate issuer: /CN=762656c5e66b82c04654be1a25629b1fd6a59456
Certificate serial: 019F6BDB114535305BD5EFE2DD574D296D4D
Authority key identifier: 76:26:56:C5:E6:6B:82:C0:46:54:BE:1A:25:62:9B:1F:D6:A5:94:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/1-zaHjVwrXdDitoh6SDMlLgRUArk.roa
Signing time: Thu 16 Jul 2026 16:55:46 +0000
ROA not before: Thu 16 Jul 2026 16:55:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39520
IP address blocks: 89.255.208.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6b:db:11:45:35:30:5b:d5:ef:e2:dd:57:4d:29:6d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=762656c5e66b82c04654be1a25629b1fd6a59456
Validity
Not Before: Jul 16 16:55:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fb36878d5c2b5dd0e2b6887a4833252e045402b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2b:ce:44:9a:6c:e3:e7:8d:3c:45:48:be:ca:
f8:06:91:36:8c:42:53:43:ad:d2:51:86:55:62:bc:
ad:13:aa:dd:00:88:a2:ac:c6:bc:8e:23:89:f7:2d:
3e:21:ff:1d:0d:51:40:41:fb:ce:73:81:31:95:d6:
c7:17:b8:72:4a:b3:90:13:32:1d:ca:43:3a:23:0c:
56:17:92:6c:d9:ff:45:03:f7:86:9f:98:3c:7a:34:
9a:76:d8:0a:24:d9:e5:4d:03:a8:35:6e:1a:e9:f8:
06:9e:15:32:50:64:d4:6a:42:84:07:1c:96:9c:52:
52:35:62:07:51:ce:1b:6a:72:0a:77:73:d3:7a:5f:
50:37:72:76:16:8a:5a:ed:d8:dd:bb:3f:11:f4:69:
ee:76:3e:0e:84:47:0c:9c:db:ef:c3:d0:a4:c2:11:
22:48:ca:b2:c9:78:62:d1:78:81:95:aa:08:1b:11:
d1:3f:d3:de:9d:21:6f:cc:83:f5:17:55:16:2e:1b:
4c:10:32:65:5f:05:8f:f7:29:94:89:88:5d:c1:16:
3e:d8:c7:aa:24:19:ca:33:d6:5d:63:d3:7c:b6:60:
b9:8d:ef:81:cc:30:d5:ee:93:cf:9a:d2:d7:c8:74:
94:45:7a:2a:e4:f4:5a:b5:4c:c3:40:84:ad:5f:0c:
2b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:36:87:8D:5C:2B:5D:D0:E2:B6:88:7A:48:33:25:2E:04:54:02:B9
X509v3 Authority Key Identifier:
keyid:76:26:56:C5:E6:6B:82:C0:46:54:BE:1A:25:62:9B:1F:D6:A5:94:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/1-zaHjVwrXdDitoh6SDMlLgRUArk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.255.208.0/22
Signature Algorithm: sha256WithRSAEncryption
67:1c:93:b2:f2:a0:be:93:7c:58:26:24:2a:4d:65:f8:90:86:
2a:f1:dc:5a:05:65:c4:db:00:4d:e1:10:0f:20:c2:d0:59:c6:
3b:c6:ba:0c:8e:a5:32:01:c9:bf:38:ad:d8:4c:b8:dc:f2:1e:
ae:e7:8a:d4:1c:4b:06:8d:50:38:4b:e6:80:2b:36:e1:da:81:
c8:b0:66:b2:f8:c1:19:f6:93:37:6a:41:6a:25:77:47:02:36:
dd:c8:f8:72:f9:8a:fc:85:d0:eb:7c:be:43:37:92:fe:8a:86:
64:13:62:aa:bc:5b:0d:f5:ae:82:d6:3d:39:d0:aa:33:19:65:
7d:e8:71:6e:23:b9:cb:42:70:2a:3f:91:78:90:ab:f7:b5:5b:
c1:d8:2b:6e:57:a3:b5:b3:7d:dd:0e:6f:68:00:74:2c:69:8a:
e8:70:22:19:7c:d2:1b:f3:e8:e8:3b:7b:ac:d4:15:b7:96:fe:
e2:87:20:f2:fa:38:a4:6a:88:88:be:f2:c6:28:dc:f5:56:c3:
7e:ec:19:c9:e4:30:f5:14:d2:88:11:53:b2:ea:f2:6c:41:ba:
9c:17:d2:50:5d:b8:b0:7a:7b:97:0f:6f:19:c3:32:06:9d:1a:
37:7c:18:38:07:35:aa:84:a2:fd:c4:06:2b:de:b6:9b:c6:37:
50:9b:29:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:38:49 2026 by rpki-client