Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Z9NE4xDRikMQBzpMWJACkSG9CQk.roa
File: Z9NE4xDRikMQBzpMWJACkSG9CQk.roa (raw, json)
Hash identifier: Mi0i03hRf9PQLIcgBEaWcpwpiKPhBPGO9vYxyjd2XPk=
Subject key identifier: 67:D3:44:E3:10:D1:8A:43:10:07:3A:4C:58:90:02:91:21:BD:09:09
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0CCE92A6117CCA22C3FDDC9EEC21D0A2D
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Z9NE4xDRikMQBzpMWJACkSG9CQk.roa
Signing time: Wed 23 Sep 2026 06:17:07 +0000
ROA not before: Wed 23 Sep 2026 06:17:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219160
IP address blocks: 87.85.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:e9:2a:61:17:cc:a2:2c:3f:dd:c9:ee:c2:1d:0a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 23 06:17:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=67d344e310d18a4310073a4c5890029121bd0909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:df:b1:bc:a4:85:64:17:a2:48:41:51:c0:45:
e9:32:c8:b1:09:f7:1f:ee:a3:ec:cf:91:0f:98:b7:
44:1f:f2:61:82:10:33:b5:94:38:53:3a:ea:2d:f8:
a9:d2:36:c0:58:d4:d7:8c:85:c6:6e:fa:73:7f:f2:
02:27:51:10:4c:41:07:c4:11:8b:fd:88:58:73:00:
5f:d7:bb:6c:25:e7:44:42:69:bd:bd:9d:8c:a7:56:
df:02:5c:cb:25:ee:83:20:78:dc:39:b1:ca:f6:29:
35:c5:bf:d7:e9:67:6b:6c:9f:dc:25:55:dd:73:c0:
8f:77:b9:46:15:d6:e0:d5:ec:1c:35:e9:ba:0d:8f:
a5:79:e8:a4:2b:98:a3:52:94:44:ac:11:f0:ee:ba:
d5:7f:24:fa:27:31:35:84:80:81:ea:1e:61:5e:65:
fd:50:3c:46:38:0a:d4:f3:25:8c:ed:36:49:e4:3f:
db:4d:fe:83:bc:e0:ed:6c:99:f5:66:71:fc:bd:24:
97:47:05:3c:c6:fd:8e:ce:8f:90:91:c3:6a:1b:38:
8b:6b:c0:3a:ee:e2:e8:99:d3:23:7a:fd:23:c7:73:
8b:7f:28:df:8f:ee:6c:94:86:ec:1e:fd:78:ff:33:
dd:bd:c5:81:ea:b8:80:a0:82:05:13:99:21:c3:68:
e1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D3:44:E3:10:D1:8A:43:10:07:3A:4C:58:90:02:91:21:BD:09:09
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Z9NE4xDRikMQBzpMWJACkSG9CQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.85.246.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:37:30:7c:2b:d6:0d:33:bc:20:ce:cc:97:41:be:42:28:d2:
34:fb:e5:cc:ea:cb:ff:6c:2d:cd:00:b1:70:17:e5:d4:f7:36:
eb:79:99:b2:39:85:45:33:a7:6c:9a:f4:c6:51:dd:ca:29:fa:
a5:a5:99:58:4c:a2:bd:9b:03:e2:95:b2:08:ae:2f:cd:ec:1a:
26:c2:e8:5b:e3:7e:c5:e0:df:da:0b:12:20:2a:c0:74:3a:79:
a0:66:bf:be:4a:0e:43:fb:8e:ad:0a:34:c5:8f:10:ef:61:2e:
f7:49:d4:15:9b:04:7b:b3:f3:e5:41:04:e3:ee:d7:ba:db:4c:
96:6f:d4:06:59:9c:69:c4:30:42:7f:be:cb:fb:0b:52:bc:f1:
a7:dc:8c:14:ae:9e:43:e2:9c:9e:82:51:c7:ef:e9:bc:5f:1b:
7c:e5:94:bb:fd:16:2d:ff:2d:44:59:64:c5:5a:20:25:c9:00:
bc:13:aa:0f:6e:cf:73:b9:6d:b7:2e:58:9a:eb:7b:1e:b1:16:
d9:09:77:a0:5b:0c:c5:63:45:65:cb:96:fa:ab:7c:ab:5e:32:
d5:61:81:8b:53:61:b5:ea:ff:ef:76:ce:70:94:ec:a8:e4:ff:
dd:39:e9:67:37:9a:a7:58:55:e1:dd:df:fe:ef:39:77:61:b4:
3d:35:1b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:23:34 2026 by rpki-client