Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZwhBMPf5Ldb5RBs4BzTRlFNHy5E.roa
File: ZwhBMPf5Ldb5RBs4BzTRlFNHy5E.roa (raw, json)
Hash identifier: YcuClHSA2Qirz3mqmIe+Lz9SeZSn78Uqo0WClCfjkN4=
Subject key identifier: 67:08:41:30:F7:F9:2D:D6:F9:44:1B:38:07:34:D1:94:53:47:CB:91
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0BF62A70E880BD0DE7F660571FA54AFB1
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZwhBMPf5Ldb5RBs4BzTRlFNHy5E.roa
Signing time: Sun 20 Sep 2026 15:15:08 +0000
ROA not before: Sun 20 Sep 2026 15:15:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209693
IP address blocks: 217.60.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 21:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:62:a7:0e:88:0b:d0:de:7f:66:05:71:fa:54:af:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 20 15:15:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=67084130f7f92dd6f9441b380734d1945347cb91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d2:c0:17:c1:b0:e3:e1:8f:c4:0b:49:31:fc:
cb:d5:e6:0c:c7:47:55:46:a8:05:32:a8:4e:4b:4f:
82:72:99:94:ce:86:c5:f9:03:0e:bd:04:d8:e9:d2:
17:2b:24:57:02:53:1d:7f:27:65:df:d7:df:20:26:
e8:a8:8e:8e:77:85:f7:3b:92:34:ca:3f:23:ae:85:
17:b4:62:94:f3:e5:8e:9a:c4:84:98:b8:9a:3d:a2:
52:9f:03:be:c0:2a:f6:ca:0a:59:c5:6e:58:f8:e7:
d0:f6:7d:c1:b3:02:6c:6b:4c:88:fc:3e:f9:4e:22:
29:30:6b:b9:dc:b4:19:e9:ff:f0:71:d1:1c:89:39:
af:66:54:04:3d:1e:c1:a1:de:05:9c:cf:9e:8a:ed:
7f:2a:43:92:33:2b:b3:a6:95:c7:d0:ac:cd:d3:1e:
69:78:8e:a6:c0:6c:f1:4a:82:3d:5f:79:d8:4e:ea:
fb:7b:ac:2c:3f:42:45:8c:8c:59:ed:24:a9:34:36:
14:43:f7:47:62:8e:36:8b:ea:2b:60:df:b5:dd:f4:
92:f0:df:73:dd:43:ad:b8:93:bd:d7:ea:80:a2:78:
a1:da:62:f2:e7:84:1e:d0:20:5d:05:5a:b4:c5:fb:
17:5c:04:6a:9a:5d:c8:ea:f3:e0:c0:4c:b4:7e:e6:
50:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:08:41:30:F7:F9:2D:D6:F9:44:1B:38:07:34:D1:94:53:47:CB:91
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZwhBMPf5Ldb5RBs4BzTRlFNHy5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.177.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:e0:f8:88:b0:b1:18:27:8f:5e:10:12:17:6d:03:c4:26:f4:
7f:7e:b5:bb:94:93:e1:4d:57:3a:72:a2:c1:46:2b:e7:de:05:
97:26:8b:90:58:17:13:e5:42:fe:a5:1a:8b:ab:c4:fb:bc:c8:
22:b9:a7:ca:2e:86:87:29:94:3d:db:1b:00:df:5f:b5:ef:34:
49:d9:5c:eb:cb:2c:3f:fd:5a:df:95:a0:cb:d7:3f:3a:0f:ca:
77:35:41:27:28:58:74:75:e0:aa:7d:ac:a3:88:cc:bb:ef:27:
00:0a:9d:97:a1:80:1c:c4:ce:81:72:4c:61:ab:1e:a9:7e:2a:
1f:30:bc:7c:b1:10:05:48:c0:19:69:1c:2a:bc:6c:c5:51:23:
66:10:c4:da:0e:ce:41:36:b5:11:e0:5c:98:eb:f8:a3:05:4b:
7b:08:86:f0:fd:7d:0f:55:35:1c:9f:06:73:ee:0d:67:e8:5e:
7a:96:39:6c:92:4d:8b:93:ec:12:90:b2:ca:a8:55:70:97:37:
cd:3e:2a:e9:b0:92:42:08:e1:d8:ca:bc:3d:f3:1f:25:33:29:
ba:86:c8:c0:23:ec:07:24:a0:b0:09:64:40:6a:d4:fd:d6:81:
0e:52:a6:76:28:53:a9:35:ae:f7:be:a4:12:d0:e9:34:7d:74:
4c:2c:ff:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:19:11 2026 by rpki-client