Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/kz88XGl4i-o90qHpgWaNT6qB9F4.roa
File: kz88XGl4i-o90qHpgWaNT6qB9F4.roa (raw, json)
Hash identifier: iFw0bXeL0s+Rwtq0iRLlZLd1+3x1hxhmoVT6WC3MudE=
Subject key identifier: 93:3F:3C:5C:69:78:8B:EA:3D:D2:A1:E9:81:66:8D:4F:AA:81:F4:5E
Certificate issuer: /CN=aebf394e2f1b251c88d988a87161084580786ef5
Certificate serial: 019F14CD2446C2A9B11C995EC9E62D6E57FA
Authority key identifier: AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/kz88XGl4i-o90qHpgWaNT6qB9F4.roa
Signing time: Mon 29 Jun 2026 19:13:36 +0000
ROA not before: Mon 29 Jun 2026 19:13:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 38926
IP address blocks: 5.44.160.0/21 maxlen: 24
185.105.68.0/22 maxlen: 24
193.169.64.0/23 maxlen: 24
195.114.114.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:14:cd:24:46:c2:a9:b1:1c:99:5e:c9:e6:2d:6e:57:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aebf394e2f1b251c88d988a87161084580786ef5
Validity
Not Before: Jun 29 19:13:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=933f3c5c69788bea3dd2a1e981668d4faa81f45e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b1:8f:e3:a7:fa:07:55:3c:b9:34:00:c8:22:
b0:e6:3b:af:76:a6:9f:e2:c5:0a:60:7d:67:f0:0b:
5b:f6:f6:10:27:af:bd:ff:0c:9b:15:cb:77:09:e0:
0c:5e:1c:c6:b5:c5:1a:21:68:a3:01:39:d0:af:92:
b3:9d:33:d5:2d:05:8e:0e:00:3c:75:79:f4:1f:f2:
a4:13:b9:47:20:d8:c9:a6:fa:99:3c:61:b0:60:d7:
bd:19:4c:ab:3b:44:8f:a7:b6:e5:dc:13:33:94:c5:
46:7f:c2:5e:fc:1c:55:d5:f7:f5:83:ce:18:13:fb:
68:a4:3c:08:26:9a:47:50:2f:50:b4:5d:1d:a1:85:
97:2c:c8:cd:a5:cd:03:b8:ec:46:30:a5:64:41:87:
d2:d7:fe:8b:ef:79:7b:8e:e1:d7:46:5a:81:cb:fb:
19:86:f4:e3:78:ca:33:07:41:bf:aa:ff:eb:d2:ff:
3b:73:c3:1f:73:41:ff:8d:6a:77:2c:99:85:f5:74:
fa:ef:e7:90:cd:f2:92:94:ac:54:39:d1:fa:f6:52:
67:df:c7:c9:32:6a:b0:1c:32:e0:9c:99:20:a2:32:
13:78:b0:2c:3e:aa:62:eb:51:50:15:c7:76:c9:50:
55:d3:df:e1:e4:ab:ba:71:61:ac:60:ec:0a:f7:d8:
bd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:3F:3C:5C:69:78:8B:EA:3D:D2:A1:E9:81:66:8D:4F:AA:81:F4:5E
X509v3 Authority Key Identifier:
keyid:AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/kz88XGl4i-o90qHpgWaNT6qB9F4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.160.0/21
185.105.68.0/22
193.169.64.0/23
195.114.114.0/23
Signature Algorithm: sha256WithRSAEncryption
15:2a:06:7e:da:e3:61:33:f2:e0:2b:f4:0d:4e:fb:d5:bb:53:
73:7f:3b:bc:b2:fc:0c:bb:96:c6:e7:78:1b:8e:96:d3:f5:32:
37:e7:94:b6:65:4f:bf:73:85:9f:a5:b8:f4:02:27:10:01:96:
69:cc:64:13:bb:fd:df:58:ab:bd:f2:52:ab:31:01:2e:cf:88:
f2:13:7e:65:8c:63:4e:21:a8:03:6d:a6:f0:ad:a2:b9:05:4d:
eb:64:ce:5a:6b:c0:89:dc:88:39:1b:18:ab:8f:9e:21:de:a5:
30:36:2c:57:0c:12:90:4e:7d:6b:b0:d7:e0:71:8d:07:49:9f:
1d:ed:59:fe:22:c3:61:af:da:9e:b1:8b:0c:75:fe:db:10:52:
0c:e6:6e:16:18:3e:19:a1:50:bb:34:20:d2:eb:89:b9:3f:98:
d2:9b:8c:d3:cf:3c:40:d7:9e:cb:ea:47:92:d7:29:b1:b9:85:
38:f2:5c:a0:59:be:fc:a6:50:ec:83:cc:20:e3:09:23:52:c6:
41:2d:ab:00:79:d4:05:2e:9d:b4:93:6b:72:a2:53:e6:4a:b5:
5d:5e:5e:20:f7:2a:5c:79:dc:3f:92:86:5f:ce:11:80:46:26:
01:8d:31:3b:c7:24:a4:87:e5:ac:ff:61:4d:dc:6d:74:ad:72:
7e:ff:d9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:55:56 2026 by rpki-client