Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/ZsYV7B7rXiV9Sd4d1WORwRKLc0M.roa
File: ZsYV7B7rXiV9Sd4d1WORwRKLc0M.roa (raw, json)
Hash identifier: ZZC9xuQEACqHh/6sNaCAxnay+gwuPiQeRofUXPKfCak=
Subject key identifier: 66:C6:15:EC:1E:EB:5E:25:7D:49:DE:1D:D5:63:91:C1:12:8B:73:43
Certificate issuer: /CN=472721e38d88b4852e2e098277a2fb20ab0c81b3
Certificate serial: 019F2368CE16A3D83D9B07E8BF6445DA5ADF
Authority key identifier: 47:27:21:E3:8D:88:B4:85:2E:2E:09:82:77:A2:FB:20:AB:0C:81:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rych442ItIUuLgmCd6L7IKsMgbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/ZsYV7B7rXiV9Sd4d1WORwRKLc0M.roa
Signing time: Thu 02 Jul 2026 15:18:18 +0000
ROA not before: Thu 02 Jul 2026 15:18:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39704
IP address blocks: 141.98.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/Rych442ItIUuLgmCd6L7IKsMgbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/Rych442ItIUuLgmCd6L7IKsMgbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rych442ItIUuLgmCd6L7IKsMgbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ce:16:a3:d8:3d:9b:07:e8:bf:64:45:da:5a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=472721e38d88b4852e2e098277a2fb20ab0c81b3
Validity
Not Before: Jul 2 15:18:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=66c615ec1eeb5e257d49de1dd56391c1128b7343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:2e:df:c3:3c:1d:92:ea:18:8e:a2:9c:6b:cf:
39:29:06:8f:6a:d2:72:f7:12:fd:02:e1:42:84:68:
9b:63:1b:8b:4f:6a:9c:e9:ee:84:fb:7a:38:95:f0:
77:1a:00:16:df:b7:71:8e:38:eb:65:1a:45:fb:72:
7b:c7:55:09:08:9f:69:7a:5c:e0:1d:2d:5c:be:41:
12:d2:8b:57:0c:27:80:a9:06:2c:0a:90:17:ab:1f:
5f:8e:d9:f3:b5:e3:4e:98:e1:2c:a4:b6:48:92:3c:
04:8b:91:71:c6:ae:27:3a:83:b3:2c:fe:e6:2e:f0:
ec:9a:4f:5c:17:7b:fa:e8:fc:0e:9d:f4:35:31:8c:
62:28:9a:29:b9:ce:bd:d6:12:37:b7:fe:d4:b8:de:
7e:87:db:ad:c7:cf:a2:6b:b5:cc:fb:49:a2:d4:35:
14:05:e0:53:23:9d:79:9f:7f:e1:26:56:c8:1f:c3:
f0:02:8e:94:d7:1c:30:e9:2a:e6:e2:3e:98:c7:70:
c1:3b:2c:18:17:f4:ad:0d:8f:02:bc:f9:4a:67:65:
b7:96:1d:9e:20:9a:c5:1a:3e:85:d5:c6:64:bb:d6:
6e:b5:59:8d:07:b1:81:08:17:6a:bc:3b:2a:ad:db:
75:8a:88:9e:aa:c8:b2:ef:df:8b:08:43:50:94:8d:
f0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C6:15:EC:1E:EB:5E:25:7D:49:DE:1D:D5:63:91:C1:12:8B:73:43
X509v3 Authority Key Identifier:
keyid:47:27:21:E3:8D:88:B4:85:2E:2E:09:82:77:A2:FB:20:AB:0C:81:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rych442ItIUuLgmCd6L7IKsMgbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/ZsYV7B7rXiV9Sd4d1WORwRKLc0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/Rych442ItIUuLgmCd6L7IKsMgbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.228.0/22
Signature Algorithm: sha256WithRSAEncryption
68:6b:a0:5b:7d:8f:00:d2:11:8b:f7:09:1a:a1:00:4e:52:29:
c5:60:f3:7b:5d:49:35:5b:d6:a4:10:b3:bc:a4:c6:89:77:f2:
25:77:1b:d5:fd:18:df:ef:b4:18:57:d9:c7:da:a9:8d:a0:20:
4a:9c:76:0f:ac:a6:41:59:e1:72:b0:ba:0c:b5:cc:3b:96:27:
f2:7a:fd:b9:e4:9f:58:f0:0a:9c:3e:7b:48:11:03:b1:58:01:
27:07:6d:23:1c:7a:d6:d0:62:e8:d9:86:ed:41:5e:76:a4:a3:
00:72:7d:68:0d:e2:21:3f:ed:2c:6a:82:e9:cc:1d:cd:a9:a4:
d4:ff:72:e6:21:f1:6a:46:03:e0:b6:7f:a4:8d:e5:48:c2:2e:
1b:92:4b:eb:82:a2:ed:f4:e8:e7:04:c3:de:ee:c9:18:ed:43:
51:32:86:33:5e:7f:59:61:00:cc:f5:9a:9d:1e:51:a6:c5:b0:
83:f3:ff:64:45:8f:e8:4d:7c:12:a2:66:38:a1:87:98:40:69:
e3:76:1c:e7:be:81:b2:dc:ba:7b:0a:12:ce:bf:60:37:80:c2:
d5:c0:14:0c:52:b1:ab:b9:8c:8a:f4:45:d1:66:28:f1:69:06:
d1:57:9a:5e:3a:82:d0:dc:06:20:cd:d0:e6:b7:12:64:8b:98:
15:57:1a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:23:00 2026 by rpki-client