Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/109d53-4164-4168-afb6-08076924777d/1/zuGcw_WT5p62xS2JE_SiF3vkRtY.roa
File: zuGcw_WT5p62xS2JE_SiF3vkRtY.roa (raw, json)
Hash identifier: 2EMrZPbz80p0xTGA51Sh6lHd46B1fhzDFjo+P/eDtD8=
Subject key identifier: CE:E1:9C:C3:F5:93:E6:9E:B6:C5:2D:89:13:F4:A2:17:7B:E4:46:D6
Certificate issuer: /CN=b493b5937c637ec24ff9fbeb43ad588cd4c8cebf
Certificate serial: 01A08527DE4D0F905C46843DC78DF524812C
Authority key identifier: B4:93:B5:93:7C:63:7E:C2:4F:F9:FB:EB:43:AD:58:8C:D4:C8:CE:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJO1k3xjfsJP-fvrQ61YjNTIzr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/109d53-4164-4168-afb6-08076924777d/1/zuGcw_WT5p62xS2JE_SiF3vkRtY.roa
Signing time: Wed 09 Sep 2026 07:52:57 +0000
ROA not before: Wed 09 Sep 2026 07:52:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60781
IP address blocks: 79.170.241.0/24 maxlen: 24
79.170.242.0/24 maxlen: 24
79.170.244.0/24 maxlen: 24
79.170.245.0/24 maxlen: 24
79.170.246.0/24 maxlen: 24
79.170.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/109d53-4164-4168-afb6-08076924777d/1/tJO1k3xjfsJP-fvrQ61YjNTIzr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/109d53-4164-4168-afb6-08076924777d/1/tJO1k3xjfsJP-fvrQ61YjNTIzr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tJO1k3xjfsJP-fvrQ61YjNTIzr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 04:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:85:27:de:4d:0f:90:5c:46:84:3d:c7:8d:f5:24:81:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b493b5937c637ec24ff9fbeb43ad588cd4c8cebf
Validity
Not Before: Sep 9 07:52:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cee19cc3f593e69eb6c52d8913f4a2177be446d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:77:b1:72:f8:8a:31:c0:f3:4e:0b:54:61:c2:
b5:10:f5:76:10:22:90:2d:92:6f:76:ca:10:f8:ef:
d2:f9:dc:6c:d4:36:f6:4d:2d:6e:21:47:55:d8:dd:
19:c5:e8:f2:d1:16:62:75:c7:82:2d:09:32:fe:77:
44:0f:b3:36:db:df:69:d9:ad:f3:82:5f:eb:59:52:
a3:d6:b5:ae:30:b5:41:67:20:4b:fa:bd:e8:b9:d4:
52:94:8d:b6:00:d0:a8:ef:31:a6:fd:8d:07:91:52:
6e:8f:0c:f0:da:59:53:e4:d0:21:2b:a6:53:30:e1:
08:2e:dc:d4:b2:5d:63:fa:29:f2:c1:09:65:30:2a:
cc:ea:71:91:73:a8:2a:c1:21:4d:5e:d5:c0:9b:01:
6c:e2:5e:be:37:2e:8e:f9:1d:a7:72:49:db:c7:d5:
7e:36:c1:8d:0b:64:4a:ab:0e:c4:0b:62:c1:44:89:
f2:7f:00:56:d0:b0:5e:29:9a:c6:8c:4b:44:e1:d7:
6a:ff:1e:2e:62:ef:7a:91:29:69:15:8a:0e:d9:cc:
97:67:41:bf:52:76:23:ea:3c:a8:ba:2d:ed:e2:5c:
f0:78:7a:ac:fe:73:9c:5f:43:f0:40:b8:a1:52:bf:
8a:70:fc:56:e2:7c:8f:e0:58:2a:1b:62:01:07:48:
35:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E1:9C:C3:F5:93:E6:9E:B6:C5:2D:89:13:F4:A2:17:7B:E4:46:D6
X509v3 Authority Key Identifier:
keyid:B4:93:B5:93:7C:63:7E:C2:4F:F9:FB:EB:43:AD:58:8C:D4:C8:CE:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJO1k3xjfsJP-fvrQ61YjNTIzr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/109d53-4164-4168-afb6-08076924777d/1/zuGcw_WT5p62xS2JE_SiF3vkRtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/109d53-4164-4168-afb6-08076924777d/1/tJO1k3xjfsJP-fvrQ61YjNTIzr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.170.241.0-79.170.242.255
79.170.244.0/22
Signature Algorithm: sha256WithRSAEncryption
43:14:87:f5:40:92:38:c3:92:ec:a5:dc:11:69:7a:48:5e:bc:
c8:9c:4c:bc:a6:f5:6d:c5:60:4d:12:b2:bf:9c:f3:fc:3d:aa:
0c:e5:15:c1:63:78:a7:d0:e2:41:3a:7a:3b:f0:e4:7f:6b:00:
d7:68:a2:7f:89:a2:f2:b2:78:e3:dd:76:f0:5a:44:7f:88:21:
23:60:5f:e9:cb:c8:16:eb:8b:50:57:4d:6c:0c:09:59:7d:63:
0b:0a:c5:c4:b7:79:7c:78:67:3a:59:bc:ab:0a:e7:bb:5c:1b:
94:e5:60:bc:cf:6c:77:3d:3c:44:bc:64:94:7b:b3:e3:5d:7d:
36:ec:0b:e9:41:62:1c:d2:20:9d:23:11:ff:0d:79:32:de:1b:
bf:ae:0c:8f:c5:29:2f:47:2a:9c:7e:e5:8b:f0:7b:09:7e:2a:
3b:88:dd:33:df:13:63:1b:37:7b:1c:43:00:90:1a:54:f5:5f:
6d:5b:26:cd:47:83:c0:34:97:29:2e:44:0a:58:94:36:7f:f3:
ad:30:27:4d:0a:9c:75:2a:f2:78:5d:23:90:96:69:5f:2b:71:
a1:11:80:be:8f:a2:48:05:82:37:af:6a:2e:18:d8:98:23:56:
73:3a:96:56:6a:83:ce:ad:d3:24:42:4a:dd:96:aa:d1:3e:c3:
12:d9:0e:39
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Sep 26 16:18:46 2026 by rpki-client