Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/0zsz-mz3QUq_RZV4eHpIMCvlE2Q.roa
File: 0zsz-mz3QUq_RZV4eHpIMCvlE2Q.roa (raw, json)
Hash identifier: zsKWU4kWBcHffnCldd/6EPM4YqHbeKQgB7/qG1/ysUw=
Subject key identifier: D3:3B:33:FA:6C:F7:41:4A:BF:45:95:78:78:7A:48:30:2B:E5:13:64
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 019DD553750E7FF3ECF5A9A5248B1791BAF9
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/0zsz-mz3QUq_RZV4eHpIMCvlE2Q.roa
Signing time: Tue 28 Apr 2026 18:21:49 +0000
ROA not before: Tue 28 Apr 2026 18:21:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200566
IP address blocks: 46.34.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d5:53:75:0e:7f:f3:ec:f5:a9:a5:24:8b:17:91:ba:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Apr 28 18:21:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d33b33fa6cf7414abf459578787a48302be51364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0c:2b:8f:3c:33:f7:83:54:d9:73:69:c4:fc:
dc:cb:44:43:a6:54:3a:c6:9b:b5:16:3a:1b:2e:7c:
06:f2:f3:52:89:73:59:b4:ec:e0:1c:6c:c1:b3:57:
e2:41:8e:f9:18:35:9c:80:9a:96:06:f0:22:b5:fa:
e3:0b:54:52:85:8c:09:a9:95:ca:10:84:ea:17:80:
46:2b:6f:5e:a3:fb:10:c2:6c:6f:e2:6b:18:28:e4:
8f:83:e2:73:43:bb:5a:2f:be:cd:de:b3:d9:1c:69:
94:06:49:e1:a8:6f:d5:9c:b2:dd:1c:a7:b7:24:61:
49:c4:e3:1a:f2:b8:3b:b5:c2:3f:86:5a:41:27:2d:
b1:d3:ad:e8:7b:6a:89:77:b0:59:87:a6:b0:3e:53:
e0:67:c9:b9:91:81:58:7d:6c:a2:6f:f1:07:50:a4:
37:12:24:2b:ac:0f:d5:1e:51:0b:e0:c9:db:31:91:
42:1a:ae:b0:20:1c:71:2d:40:6c:5a:5f:c4:75:44:
29:5c:6e:05:9b:0c:6f:e1:fb:bc:7a:74:17:13:ac:
d2:ee:a4:f7:6a:b5:6a:d4:d6:da:6f:7f:3c:1d:9a:
b7:f6:ee:0e:02:af:2b:a6:d0:71:3f:12:7e:bd:6b:
81:6b:68:53:b2:84:f8:eb:83:b8:44:48:41:cc:da:
b1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:3B:33:FA:6C:F7:41:4A:BF:45:95:78:78:7A:48:30:2B:E5:13:64
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/0zsz-mz3QUq_RZV4eHpIMCvlE2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.60.0/24
Signature Algorithm: sha256WithRSAEncryption
79:e9:6a:f9:3d:12:19:cc:cf:35:27:08:80:d0:78:fd:cc:d9:
f4:85:f7:31:3d:79:00:0e:14:f9:11:ba:1d:2d:9e:85:34:d2:
45:e9:1f:92:d1:d8:4d:a1:d9:32:c2:6e:61:3a:c1:a5:b8:63:
6e:ad:fa:fe:a8:6b:92:06:62:d2:62:04:91:eb:41:ca:e5:00:
71:5a:a1:91:0f:bd:82:08:c9:45:c1:20:0a:08:a2:7e:9a:20:
ed:fb:71:a8:7a:47:04:49:ba:6d:10:5d:b4:da:44:01:69:67:
f3:ce:20:4b:36:0b:ed:e6:ea:01:2a:15:0f:32:3c:ff:02:2d:
0f:9a:98:f1:29:23:f8:5b:c7:64:bb:79:32:f5:86:27:a5:6c:
7a:d2:f7:fb:d3:92:95:85:f5:c2:67:71:0a:db:28:38:87:b5:
5e:88:0b:0b:eb:1b:2a:96:c8:16:6d:46:12:c8:c7:74:e2:87:
d9:b6:2b:a8:50:5c:28:8d:59:58:26:5d:7f:75:71:4b:c9:e8:
d1:bf:98:0e:29:93:e6:73:d9:7a:28:0f:8b:db:29:22:a0:32:
39:e3:b0:b8:d6:b9:a2:77:f3:21:36:c9:29:51:7a:c1:03:8a:
1c:23:cf:87:f3:8c:39:05:c2:1f:90:d6:31:e9:13:a0:4a:ec:
7a:f1:20:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:54:45 2026 by rpki-client