Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/Z5cxvZFlDjzfwE4i_kMolcAsxl8.roa
File: Z5cxvZFlDjzfwE4i_kMolcAsxl8.roa (raw, json)
Hash identifier: AxgDzvgQPrThNXdzA3qk3wOZCYqN9mTZ/tZ/flkSJdY=
Subject key identifier: 67:97:31:BD:91:65:0E:3C:DF:C0:4E:22:FE:43:28:95:C0:2C:C6:5F
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 019F1394F3A0027EFE660B99F4A946629B0D
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/Z5cxvZFlDjzfwE4i_kMolcAsxl8.roa
Signing time: Mon 29 Jun 2026 13:32:36 +0000
ROA not before: Mon 29 Jun 2026 13:32:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61992
IP address blocks: 62.76.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:94:f3:a0:02:7e:fe:66:0b:99:f4:a9:46:62:9b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jun 29 13:32:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=679731bd91650e3cdfc04e22fe432895c02cc65f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a6:99:03:4b:cd:d9:4d:c6:80:7f:9c:1f:f1:
e7:f0:5f:26:34:73:69:b4:05:15:f3:07:42:bd:ec:
f7:89:77:e0:c6:78:68:d1:55:9c:90:6a:29:19:c7:
61:4f:77:4e:dd:62:cd:44:9e:d6:f9:c8:96:8e:0f:
14:f5:94:4e:71:37:e6:88:b4:83:fb:b2:c7:5e:55:
d6:46:31:84:ef:96:9b:b3:8f:97:bb:a6:f1:88:a1:
8c:d1:ab:21:f3:89:18:46:24:d4:e0:44:c7:44:bd:
50:c4:79:33:a4:ae:2b:e9:c1:cf:47:41:6c:0c:40:
62:7c:90:91:aa:93:4d:0b:f1:31:11:b6:54:37:c4:
b0:d7:d6:80:88:93:bc:70:f0:a4:c1:e4:ab:82:b3:
41:a7:da:9c:b0:7a:c3:10:16:6d:00:a9:79:b9:42:
23:dd:37:df:a1:58:90:7a:69:cb:7a:0e:35:bf:3c:
ed:d0:ad:97:5c:27:95:50:48:2d:19:3c:87:8c:e2:
25:ab:db:54:e4:6c:69:59:aa:1a:d8:3e:95:bd:64:
ef:c5:74:0b:84:5a:38:90:d4:23:5b:4e:2d:d7:35:
cb:87:87:3e:50:72:90:ca:8a:b2:a7:e7:28:9d:ba:
38:dc:ab:c3:18:2d:5d:90:7a:78:bb:9d:32:7f:20:
e3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:97:31:BD:91:65:0E:3C:DF:C0:4E:22:FE:43:28:95:C0:2C:C6:5F
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/Z5cxvZFlDjzfwE4i_kMolcAsxl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.131.0/24
Signature Algorithm: sha256WithRSAEncryption
08:8d:fe:29:12:ed:08:3e:7c:fb:df:90:96:ba:fd:f0:00:15:
43:bc:79:a1:5e:b4:0f:dd:c8:59:5a:9b:7f:f1:87:ef:16:df:
ef:f4:fc:7e:85:31:cc:11:6f:dd:94:59:2b:23:52:6b:d4:93:
14:20:e3:84:36:e2:56:25:72:30:92:6e:ca:ed:2c:90:97:cb:
e0:e9:c3:74:32:03:c7:80:a7:17:a7:61:5c:e9:86:e6:9b:12:
c0:ed:94:27:02:1c:d4:1a:27:53:19:b0:60:53:e3:ba:95:ac:
4a:17:3a:19:0e:08:20:1d:d1:d9:bc:e0:10:ea:e7:89:55:35:
a4:bb:95:54:ba:80:c0:6f:17:64:d7:c7:ef:06:78:1c:fe:c1:
61:0d:8c:26:94:b8:37:18:f2:78:f3:ca:2c:7d:9f:f1:3a:a0:
5a:9a:0e:b8:a5:05:94:73:6b:1c:67:e3:8b:99:d9:7d:87:61:
d9:70:73:69:66:02:55:91:02:64:8c:fa:b5:9d:93:29:f1:c7:
8f:f0:32:be:df:8a:3c:30:e9:2b:22:7e:a2:a9:2f:32:b8:84:
1f:ae:9b:e4:0e:f7:44:14:e9:34:2f:ef:41:92:60:bc:6e:f3:
10:6a:db:c2:2e:07:77:47:91:eb:30:b1:09:ce:9b:42:e3:c7:
82:52:5e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:52:54 2026 by rpki-client