Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/lZHIjG7NZwuEiIUXn9PLMVcVIzA.roa
File: lZHIjG7NZwuEiIUXn9PLMVcVIzA.roa (raw, json)
Hash identifier: PwjbCusxHYbPcriuRl5QcW2dN5wg11/a1p9YKj/rRnQ=
Subject key identifier: 95:91:C8:8C:6E:CD:67:0B:84:88:85:17:9F:D3:CB:31:57:15:23:30
Certificate issuer: /CN=64262c8337e218bed316b70cc092dd0befe8195b
Certificate serial: 019F236882E973A73CC6A2D2628B8C605738
Authority key identifier: 64:26:2C:83:37:E2:18:BE:D3:16:B7:0C:C0:92:DD:0B:EF:E8:19:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/lZHIjG7NZwuEiIUXn9PLMVcVIzA.roa
Signing time: Thu 02 Jul 2026 15:17:59 +0000
ROA not before: Thu 02 Jul 2026 15:17:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3169
IP address blocks: 37.140.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:82:e9:73:a7:3c:c6:a2:d2:62:8b:8c:60:57:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64262c8337e218bed316b70cc092dd0befe8195b
Validity
Not Before: Jul 2 15:17:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9591c88c6ecd670b848885179fd3cb3157152330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a6:b7:50:68:ae:80:45:87:7c:10:ba:47:1b:
63:c7:b3:43:f3:64:55:55:10:9f:8c:aa:2a:38:ef:
07:25:93:0e:62:b1:cc:06:24:7b:28:89:6e:dc:c5:
28:da:81:e7:9f:6a:8d:a2:78:4b:17:9f:2d:2e:05:
ab:53:18:96:e5:4f:94:26:2d:df:d1:32:0d:42:6a:
2f:f5:a2:78:92:4c:b9:13:d0:de:3c:cc:d7:91:5a:
99:c6:a6:24:99:ef:49:80:42:1f:05:88:6b:27:a6:
4d:9c:5a:6d:78:c9:b5:72:8f:a2:68:a2:31:89:bc:
6e:ac:f0:56:1c:1d:ae:85:96:cd:c6:8d:56:36:19:
a9:ad:56:f6:df:b2:0a:67:84:04:a8:8c:f2:58:50:
28:44:06:d3:b0:ab:11:7d:38:f4:13:8b:8d:83:64:
65:41:26:91:f6:4c:5b:da:37:6a:c6:c0:69:bb:e3:
37:ac:e5:60:00:62:83:f6:e9:ea:47:0e:cd:12:cc:
a8:fa:fb:21:a3:46:55:75:bb:03:a5:2b:43:0c:37:
35:c1:11:2e:ea:40:61:1d:65:40:d6:ff:bf:3e:2d:
f1:df:b0:9c:a6:7a:ca:a2:f6:6a:5b:37:ec:96:08:
1f:77:a1:4e:a4:70:ba:01:a7:ea:46:e3:f1:91:39:
c7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:91:C8:8C:6E:CD:67:0B:84:88:85:17:9F:D3:CB:31:57:15:23:30
X509v3 Authority Key Identifier:
keyid:64:26:2C:83:37:E2:18:BE:D3:16:B7:0C:C0:92:DD:0B:EF:E8:19:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/lZHIjG7NZwuEiIUXn9PLMVcVIzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.217.0/24
Signature Algorithm: sha256WithRSAEncryption
82:09:ea:42:c6:8c:10:56:e1:4e:6a:ce:ec:e3:67:4e:6d:f2:
8c:ed:9a:ac:24:f8:04:6d:21:93:9d:2f:c8:1a:91:af:f9:e1:
4b:73:95:70:a1:4c:2d:11:a9:55:c1:7a:0c:86:56:54:6d:fb:
16:3d:d7:86:79:d3:a2:1e:e2:47:19:1c:dc:be:58:39:26:b1:
55:de:68:f0:49:eb:db:85:4a:fa:78:51:0b:e6:cd:95:56:91:
c4:5d:bf:91:99:58:24:4d:d5:6d:1e:24:c3:40:f2:95:a8:c2:
31:a6:57:4a:12:22:c0:0d:03:f2:9e:eb:9e:6e:ee:2e:f4:0c:
60:2c:02:34:1f:6c:14:06:d0:55:6c:5a:7f:30:78:13:a5:9c:
8e:b1:20:f8:44:20:da:dd:77:00:6a:48:f4:74:e6:e3:de:c9:
92:17:69:e2:6a:01:64:b0:c3:f3:41:25:be:bf:b0:83:38:a1:
16:b7:9d:f0:d7:5b:d5:eb:59:d2:ef:f5:0e:31:f5:a1:80:e0:
13:0c:64:ba:91:c8:5f:64:12:d2:27:8e:4e:fa:28:b3:0b:0a:
de:2b:fc:4d:b1:9c:dd:4d:a2:d4:39:00:e2:4b:42:cf:f8:f3:
3b:50:d1:b5:d0:c1:d6:7d:da:0f:f9:8b:94:09:75:19:cb:29:
69:4b:07:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:07:09 2026 by rpki-client