Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/z4scIEhsai2SiPvFPY8Jm70JBSM.roa
File: z4scIEhsai2SiPvFPY8Jm70JBSM.roa (raw, json)
Hash identifier: qL/WQ7181fmgrfOQNCVUM/gFKkB/ThaOziSxysnkWrs=
Subject key identifier: CF:8B:1C:20:48:6C:6A:2D:92:88:FB:C5:3D:8F:09:9B:BD:09:05:23
Certificate issuer: /CN=d238416ac8a4c67f0c1d74aa1c5c1efd2982dd98
Certificate serial: 019F2368979E7133B0F0DEB03C9B9C47C8CE
Authority key identifier: D2:38:41:6A:C8:A4:C6:7F:0C:1D:74:AA:1C:5C:1E:FD:29:82:DD:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jhBasikxn8MHXSqHFwe_SmC3Zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/z4scIEhsai2SiPvFPY8Jm70JBSM.roa
Signing time: Thu 02 Jul 2026 15:18:04 +0000
ROA not before: Thu 02 Jul 2026 15:18:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199040
IP address blocks: 91.216.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/0jhBasikxn8MHXSqHFwe_SmC3Zg.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/0jhBasikxn8MHXSqHFwe_SmC3Zg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jhBasikxn8MHXSqHFwe_SmC3Zg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:97:9e:71:33:b0:f0:de:b0:3c:9b:9c:47:c8:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d238416ac8a4c67f0c1d74aa1c5c1efd2982dd98
Validity
Not Before: Jul 2 15:18:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf8b1c20486c6a2d9288fbc53d8f099bbd090523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3d:49:f1:88:72:f5:6d:68:5c:7d:1e:7c:85:
87:a8:42:02:b9:bf:54:10:b1:ad:f6:d5:e4:41:4e:
16:31:a0:a8:8d:2f:65:12:44:1b:11:02:41:6e:4a:
43:f5:bc:cb:d4:d6:7f:6c:88:52:ee:5a:43:b6:df:
26:af:52:5a:07:93:02:39:9d:2d:3e:08:c0:77:aa:
1b:13:58:25:39:55:27:22:8a:ab:25:58:18:9f:06:
40:9a:a0:c9:83:98:c1:76:82:d8:b6:64:43:6a:4c:
2d:7a:e8:27:66:67:70:31:02:f8:8a:16:f8:da:e4:
7b:78:4d:80:58:3a:04:49:32:6f:59:b3:85:e5:1f:
9e:c2:c1:f5:41:07:24:b1:07:01:3b:2a:ff:ac:6f:
96:e3:16:2b:8b:7b:32:dd:5e:b9:9f:c0:3e:fe:3a:
b4:95:b8:36:76:fa:6a:28:ee:eb:2f:06:5c:ec:04:
2a:57:b4:8a:ed:6d:73:94:df:32:52:57:6e:a7:39:
53:52:58:24:01:c3:35:f4:51:dc:9f:96:9f:4c:05:
0a:5a:be:d0:e1:65:d0:58:d9:30:1f:3b:2e:8f:1e:
a5:b3:c4:07:89:4c:90:c1:d7:78:ee:49:6a:fe:8d:
e5:57:df:ee:b2:d2:89:b0:f8:bf:7f:86:6e:8b:43:
de:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:8B:1C:20:48:6C:6A:2D:92:88:FB:C5:3D:8F:09:9B:BD:09:05:23
X509v3 Authority Key Identifier:
keyid:D2:38:41:6A:C8:A4:C6:7F:0C:1D:74:AA:1C:5C:1E:FD:29:82:DD:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jhBasikxn8MHXSqHFwe_SmC3Zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/z4scIEhsai2SiPvFPY8Jm70JBSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/0jhBasikxn8MHXSqHFwe_SmC3Zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.48.0/24
Signature Algorithm: sha256WithRSAEncryption
47:b9:5a:76:16:4c:f6:d8:da:ee:1d:8b:ad:5c:e5:6e:37:e8:
20:d8:ec:6a:42:d5:5c:d8:2c:b8:2e:5e:8b:a0:1f:27:8f:df:
6b:53:c7:e0:02:00:4e:2b:cf:6f:3b:42:9c:d3:47:70:d9:fa:
88:3e:f3:f7:43:71:db:59:87:99:4b:59:53:23:ab:1e:c4:39:
47:e2:a9:e7:7f:ee:69:72:02:a8:1e:90:dc:09:be:3e:43:35:
12:54:ca:0a:19:43:c8:64:42:06:a6:89:6f:f0:d8:54:e7:68:
ef:cb:42:c0:4f:f6:aa:07:35:28:75:b1:49:71:99:e5:62:c1:
40:70:29:f8:9d:e8:e7:82:06:28:0d:c4:13:6e:9c:a4:f8:06:
45:9e:03:5e:6e:e0:7a:f4:84:0e:b7:e4:24:48:e2:19:37:0a:
61:bf:1e:18:79:e3:c8:c7:c7:47:ab:5a:ed:fe:92:05:38:ec:
31:c1:c7:86:a3:49:53:b6:57:94:4c:1e:39:84:5b:bb:74:c1:
95:e7:5f:e2:0f:b9:8c:20:7e:9e:d9:8f:96:9b:ec:f5:ee:f4:
52:49:ee:91:59:db:75:75:f0:f5:16:ff:b9:5e:21:c3:c7:4f:
be:69:c2:93:e4:e0:c7:0d:a3:e3:3d:33:f3:12:b1:a4:92:98:
03:39:ac:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:46:21 2026 by rpki-client