Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d26a1c-1870-4821-bb8a-84f95d33e2c6/1/Z4ZoaORQua51KCRsVg2IUhoDAXo.roa
File: Z4ZoaORQua51KCRsVg2IUhoDAXo.roa (raw, json)
Hash identifier: NCkzuayiCIk++QJTY6wsrqBuJEYrBZjGt9dXQEIDPoM=
Subject key identifier: 67:86:68:68:E4:50:B9:AE:75:28:24:6C:56:0D:88:52:1A:03:01:7A
Certificate issuer: /CN=950453ed485e76870617a0e4f4675144c3192cb2
Certificate serial: 019F519FA07AB2D83A7D6F755BD526CD34D5
Authority key identifier: 95:04:53:ED:48:5E:76:87:06:17:A0:E4:F4:67:51:44:C3:19:2C:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQRT7UhedocGF6Dk9GdRRMMZLLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/d26a1c-1870-4821-bb8a-84f95d33e2c6/1/Z4ZoaORQua51KCRsVg2IUhoDAXo.roa
Signing time: Sat 11 Jul 2026 14:40:43 +0000
ROA not before: Sat 11 Jul 2026 14:40:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64096
IP address blocks: 31.132.44.0/22 maxlen: 22
31.132.44.0/23 maxlen: 23
31.132.44.0/24 maxlen: 24
31.132.45.0/24 maxlen: 24
31.132.46.0/24 maxlen: 24
185.26.84.0/24 maxlen: 24
2a0d:9fc0::/29 maxlen: 29
2a0d:9fc0::/32 maxlen: 32
2a0d:9fc0::/36 maxlen: 36
2a0d:9fc1::/32 maxlen: 32
2a0d:9fc1::/36 maxlen: 36
2a0d:9fc2::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/d26a1c-1870-4821-bb8a-84f95d33e2c6/1/lQRT7UhedocGF6Dk9GdRRMMZLLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/d26a1c-1870-4821-bb8a-84f95d33e2c6/1/lQRT7UhedocGF6Dk9GdRRMMZLLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lQRT7UhedocGF6Dk9GdRRMMZLLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:51:9f:a0:7a:b2:d8:3a:7d:6f:75:5b:d5:26:cd:34:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=950453ed485e76870617a0e4f4675144c3192cb2
Validity
Not Before: Jul 11 14:40:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=67866868e450b9ae7528246c560d88521a03017a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:20:b9:94:aa:36:68:f7:5c:81:e2:89:5a:fe:
1d:b1:e6:4d:b7:e5:9f:7c:f5:4f:d0:98:ad:8d:54:
a3:d3:07:c1:44:6c:ee:0d:87:20:8d:c0:76:ff:41:
0d:e1:d4:16:68:30:95:bc:31:24:99:9c:c3:5a:2f:
fd:0a:cf:5b:1e:de:99:2a:63:ac:24:b1:31:e1:61:
cb:50:3b:24:38:1b:35:7b:a2:a0:95:9c:4e:90:a4:
8b:e8:ce:15:a7:d2:ca:27:36:b4:2a:2d:7a:0f:51:
03:b8:c6:55:bd:20:7a:40:48:b2:af:1e:5e:18:3f:
e9:4b:af:c2:39:25:fb:c7:c8:a2:e3:79:b5:68:14:
65:fc:56:5f:ae:75:4d:7b:ca:b6:72:fb:77:27:98:
98:70:a6:e1:0c:4d:ef:68:fe:dc:a9:b6:dc:59:d3:
a7:e2:bf:86:90:96:77:08:db:db:fd:1b:5d:52:13:
ee:1b:5b:36:ab:0f:1e:1a:fe:51:b6:8f:22:bc:88:
e5:21:0a:12:a8:af:47:8d:9a:0b:b7:1f:23:62:98:
bd:47:00:5d:5f:93:20:88:44:87:73:72:c5:50:c4:
57:70:c8:bb:70:c4:cc:e5:78:ad:76:d7:67:b2:75:
f9:b3:79:b0:2c:18:4f:29:77:7f:1b:67:d7:d7:e6:
9b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:86:68:68:E4:50:B9:AE:75:28:24:6C:56:0D:88:52:1A:03:01:7A
X509v3 Authority Key Identifier:
keyid:95:04:53:ED:48:5E:76:87:06:17:A0:E4:F4:67:51:44:C3:19:2C:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQRT7UhedocGF6Dk9GdRRMMZLLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d26a1c-1870-4821-bb8a-84f95d33e2c6/1/Z4ZoaORQua51KCRsVg2IUhoDAXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d26a1c-1870-4821-bb8a-84f95d33e2c6/1/lQRT7UhedocGF6Dk9GdRRMMZLLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.132.44.0/22
185.26.84.0/24
IPv6:
2a0d:9fc0::/29
Signature Algorithm: sha256WithRSAEncryption
8c:9a:f1:de:63:fd:28:a1:b9:89:fb:eb:6d:7f:e8:11:ed:d8:
ac:2f:2e:b0:8d:f5:59:ff:18:cb:d7:3b:73:57:6f:c6:9c:e6:
98:14:b1:8d:0e:a4:b5:64:4c:de:55:40:84:a4:a3:9a:36:51:
54:6e:56:5c:19:47:b3:0b:c8:ed:34:60:d7:86:b0:84:c3:ca:
7e:cc:83:29:44:9e:4d:80:4f:e1:52:91:96:c2:70:8b:35:3c:
40:79:b5:3d:91:52:74:24:d4:39:91:6a:c7:db:f9:3c:b7:fd:
b7:4d:87:04:80:63:0e:a5:75:ec:f1:03:ab:fb:95:f5:b9:17:
60:80:bf:27:86:e9:45:ac:4a:7f:4a:3a:28:db:46:c5:5e:f4:
ac:2d:2d:b9:97:55:fe:82:43:b7:b2:8b:96:26:fd:06:52:6f:
5a:c5:25:9b:b8:4b:4a:71:03:a5:33:7f:6f:fa:79:33:df:e4:
13:32:4f:da:a6:07:b4:33:ce:47:57:16:0b:7e:ad:23:8a:49:
6b:26:12:1f:0d:8c:78:19:5b:14:c7:95:be:b1:59:9d:d0:65:
7d:85:45:e7:a0:3a:4c:d2:e6:36:a3:81:42:28:43:eb:db:db:
6d:28:60:f7:93:69:0d:b7:53:27:0f:52:6f:2d:c9:20:04:61:
a8:4a:c1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:46:44 2026 by rpki-client