Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/zoh-NmzuB-8joUrG-CrXbn87KUc.roa
File: zoh-NmzuB-8joUrG-CrXbn87KUc.roa (raw, json)
Hash identifier: /HYLytf7EZaD8R3KHEOrIdU84tOnHzF9dFbeKjpHpLY=
Subject key identifier: CE:88:7E:36:6C:EE:07:EF:23:A1:4A:C6:F8:2A:D7:6E:7F:3B:29:47
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 01A0BA37B2D7516049D1C4252B9955D47D81
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/zoh-NmzuB-8joUrG-CrXbn87KUc.roa
Signing time: Sat 19 Sep 2026 15:10:07 +0000
ROA not before: Sat 19 Sep 2026 15:10:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219463
IP address blocks: 222.167.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ba:37:b2:d7:51:60:49:d1:c4:25:2b:99:55:d4:7d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Sep 19 15:10:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ce887e366cee07ef23a14ac6f82ad76e7f3b2947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b5:b6:ee:4e:95:93:c0:5e:c6:ec:82:8d:3f:
0b:14:7c:7d:8f:28:c1:7d:9d:5d:6e:77:b1:86:13:
93:46:10:80:8b:2c:2a:af:1c:32:0b:e0:d1:15:54:
8a:8f:ac:2b:86:a0:cf:55:7a:d2:a4:f3:8c:23:61:
9e:aa:7c:a6:0a:a0:ab:f6:17:74:fb:7d:1f:77:23:
12:99:18:6c:cd:f8:2e:c5:fc:12:11:3d:64:23:cf:
01:34:ab:30:0e:03:7b:76:2f:af:b2:71:4d:68:67:
62:ce:e2:bf:6e:c0:e7:fe:f5:4e:16:d2:45:33:27:
5b:3d:79:67:70:4f:6a:a7:a4:83:c5:10:ae:c1:29:
71:7e:1d:e2:d4:7a:f2:ea:95:50:e4:6f:c9:ed:41:
2e:7e:85:d8:34:91:b2:fd:2d:45:67:1f:f3:0d:6a:
68:f7:f4:40:15:4e:b0:32:cd:10:89:03:ff:47:f2:
30:66:2c:38:84:b6:33:90:3f:ac:7a:b3:aa:23:86:
58:a1:e1:d0:1d:4f:c0:e7:31:a3:31:24:c5:57:8c:
eb:cb:30:74:4b:92:cb:d8:0f:21:60:62:6e:ca:7c:
b8:b1:d5:8c:54:aa:2b:43:79:1e:83:c0:d8:73:21:
08:6f:32:1f:0a:9e:94:03:22:52:f3:f4:a5:5a:40:
05:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:88:7E:36:6C:EE:07:EF:23:A1:4A:C6:F8:2A:D7:6E:7F:3B:29:47
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/zoh-NmzuB-8joUrG-CrXbn87KUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.195.0/24
Signature Algorithm: sha256WithRSAEncryption
00:a5:bd:31:b0:08:08:11:4a:e2:9b:b9:6a:18:4f:03:2c:05:
89:de:a8:f3:6b:fd:74:d6:0c:24:ef:d4:fd:fc:32:c8:c9:0d:
f5:0a:24:79:1d:eb:11:21:1e:19:72:03:d5:38:63:21:a9:a4:
48:79:a1:63:1e:d1:9f:dd:ad:ee:af:b1:6f:56:02:ea:3f:72:
a8:c0:21:9c:a8:3c:4e:c9:f9:1d:ef:85:10:b6:79:c1:bf:2c:
2d:82:6a:8b:e8:ce:39:45:5a:7e:5d:64:a3:01:9d:47:5a:fa:
23:11:7a:0a:b9:13:60:fb:f0:ac:68:9e:c6:07:27:7b:64:8d:
01:39:17:3b:cb:9f:53:df:ba:ec:d6:32:e7:d4:f1:0f:d2:ab:
f9:10:ad:59:64:ef:05:33:3c:a5:ba:1b:0a:62:7f:18:e8:73:
88:4e:ec:ca:66:c4:74:9b:be:78:70:43:a8:30:59:5a:07:39:
67:97:98:39:9b:a8:25:79:c0:da:6e:b6:2a:ad:e0:ac:61:3d:
a0:aa:63:06:c3:69:25:a9:61:f9:ec:ee:83:24:6b:53:1b:04:
63:a8:ca:3a:27:07:dc:2e:f8:32:31:1d:a8:25:68:11:3f:88:
e1:6d:33:c4:e2:9b:da:7f:05:8d:85:3d:07:7a:6e:54:8b:2d:
0a:d6:98:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:12:56 2026 by rpki-client