Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/zA4FobWZmNIMqiu8CPh_wr1WP94.roa
File: zA4FobWZmNIMqiu8CPh_wr1WP94.roa (raw, json)
Hash identifier: +95GZYZ2/hK0vl8jQ38dHcm0uFB9GBRLOhYYtIWjRiQ=
Subject key identifier: CC:0E:05:A1:B5:99:98:D2:0C:AA:2B:BC:08:F8:7F:C2:BD:56:3F:DE
Certificate issuer: /CN=edf36b243560346053bc60ced4e98aa48ea1a063
Certificate serial: 01A0C86D165F19F0B2197E94E1382D064FF6
Authority key identifier: ED:F3:6B:24:35:60:34:60:53:BC:60:CE:D4:E9:8A:A4:8E:A1:A0:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/zA4FobWZmNIMqiu8CPh_wr1WP94.roa
Signing time: Tue 22 Sep 2026 09:23:07 +0000
ROA not before: Tue 22 Sep 2026 09:23:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397423
IP address blocks: 198.34.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:6d:16:5f:19:f0:b2:19:7e:94:e1:38:2d:06:4f:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf36b243560346053bc60ced4e98aa48ea1a063
Validity
Not Before: Sep 22 09:23:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cc0e05a1b59998d20caa2bbc08f87fc2bd563fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4c:5e:4f:3a:65:25:cb:75:0f:eb:32:90:c3:
8e:6f:0a:89:19:cf:23:51:45:d3:92:a1:33:61:ff:
f5:07:19:33:4c:e7:14:ea:af:f6:ce:36:77:62:ee:
05:b1:e9:fc:23:20:ce:94:a3:e5:cd:5b:fa:67:9c:
85:a8:7c:e8:0e:19:bd:5e:73:46:03:e0:81:87:fe:
cc:fa:2d:bf:c6:ee:93:c0:06:8b:f2:07:2d:dc:af:
13:15:bb:2a:67:55:96:9f:2d:dc:74:f6:57:28:54:
89:c0:9b:c9:a9:13:da:63:84:74:f0:0f:de:d6:f4:
7e:7b:86:de:08:fc:2a:0c:d5:90:80:3e:fc:d5:9f:
8a:0d:f2:02:18:d8:1b:89:9d:db:47:c5:b8:cf:df:
bf:1c:0e:ee:40:e1:e0:9f:96:b1:8a:87:29:56:12:
5a:cc:ad:c4:5c:a0:8b:b8:55:32:85:3a:4c:28:fb:
cc:c0:1a:73:a5:d0:99:28:ba:e7:89:00:3c:8d:93:
c2:0f:e7:c6:65:bb:cf:ae:a1:da:16:eb:5e:e1:31:
3d:5a:06:48:aa:12:84:ab:06:fe:45:b1:e5:3e:3f:
3b:b0:b3:da:31:81:37:d8:70:87:6d:17:d6:46:0d:
29:67:d4:dc:af:10:3c:00:61:9f:56:e8:73:86:13:
32:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:0E:05:A1:B5:99:98:D2:0C:AA:2B:BC:08:F8:7F:C2:BD:56:3F:DE
X509v3 Authority Key Identifier:
keyid:ED:F3:6B:24:35:60:34:60:53:BC:60:CE:D4:E9:8A:A4:8E:A1:A0:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/zA4FobWZmNIMqiu8CPh_wr1WP94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.34.218.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:83:4e:e8:28:40:ab:e6:0f:a2:84:db:65:d7:95:aa:24:2c:
f9:f3:58:f3:93:d5:63:6a:87:c4:30:b2:42:f7:54:fa:8a:6a:
46:5a:67:b1:27:dd:44:e8:1c:e6:d2:18:9a:76:3d:82:2a:45:
ec:9f:8d:b6:75:c8:31:bd:ea:9e:fe:ec:dc:bb:2c:68:e5:3e:
a8:50:cd:8c:dd:83:4a:92:4a:8f:aa:b6:38:e5:d6:b2:98:e8:
0d:13:4c:fe:16:ad:72:c0:dd:5f:eb:1f:a5:dd:04:24:a2:cf:
b7:45:6f:c1:2d:76:8b:55:68:64:ec:e2:3f:91:1d:74:0f:2a:
d6:bd:30:72:f3:6c:5a:7e:62:a3:38:78:0e:bd:6e:84:de:0c:
92:90:e0:28:13:64:ec:a1:dc:5e:f0:47:4c:3c:4e:f7:b1:10:
e0:bb:7d:73:69:ad:a9:97:b1:4e:5c:1c:ad:79:12:60:50:86:
bc:67:99:37:bb:56:8f:53:de:ac:f2:5d:85:5a:72:c8:78:e3:
05:a2:15:15:d3:e7:41:14:40:d9:1f:b7:51:dc:77:1a:e3:4b:
b2:32:37:07:68:72:3f:38:a6:a1:bf:58:79:10:60:91:8a:c2:
50:d4:4b:9b:e9:e7:8f:d7:2c:5b:4c:db:ee:f3:8d:4e:c8:80:
21:eb:b0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:31:42 2026 by rpki-client