Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/ZtAP-sqXxprB7qayO8WzqZrr6hA.roa
File: ZtAP-sqXxprB7qayO8WzqZrr6hA.roa (raw, json)
Hash identifier: sZEYUE/H2etUbCKxcFJR/Y+ot7QchMxAJIsADiK6WOE=
Subject key identifier: 66:D0:0F:FA:CA:97:C6:9A:C1:EE:A6:B2:3B:C5:B3:A9:9A:EB:EA:10
Certificate issuer: /CN=27c007e5082b8e8d8289018718cfd527a7893e5e
Certificate serial: 019F73ABEB4ED2428B179328C6ED610C2480
Authority key identifier: 27:C0:07:E5:08:2B:8E:8D:82:89:01:87:18:CF:D5:27:A7:89:3E:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/ZtAP-sqXxprB7qayO8WzqZrr6hA.roa
Signing time: Sat 18 Jul 2026 05:21:14 +0000
ROA not before: Sat 18 Jul 2026 05:21:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44066
IP address blocks: 45.10.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:73:ab:eb:4e:d2:42:8b:17:93:28:c6:ed:61:0c:24:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c007e5082b8e8d8289018718cfd527a7893e5e
Validity
Not Before: Jul 18 05:21:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=66d00ffaca97c69ac1eea6b23bc5b3a99aebea10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b1:7c:45:b4:cf:7e:cd:f1:ff:96:29:83:29:
10:fe:b3:d6:9e:f1:01:06:d1:68:45:8c:cb:04:bd:
06:6d:86:c7:60:af:92:da:ce:9d:36:31:f4:5c:04:
f0:55:fb:35:1c:b4:95:3c:6c:22:90:ab:0c:39:31:
98:ca:33:e6:33:e0:68:2f:32:75:28:09:55:bb:35:
de:1a:d6:55:09:c6:c1:26:fe:58:10:c0:06:40:56:
b2:67:84:27:ac:62:b6:b6:9c:79:a6:41:4c:8c:8e:
5a:17:59:1b:70:b9:42:0d:4d:ab:73:e2:23:40:f4:
93:f7:3c:c2:53:60:c9:e5:40:66:4d:b2:ed:16:29:
44:cb:c8:9d:c2:e3:34:8d:2a:32:ed:4b:fc:d3:dc:
16:88:80:f1:29:de:5d:5a:7c:2c:00:af:ab:5d:d7:
6c:99:1c:67:81:9b:b4:e4:6a:70:cc:75:fc:fe:34:
bd:9c:02:b6:ac:1e:c2:40:98:10:8b:61:1b:f9:f2:
e8:08:63:73:1d:71:21:b8:51:2a:b5:ad:d0:59:af:
9e:c5:ba:b1:46:3c:0f:92:43:f1:cc:93:57:76:e7:
66:e8:42:0b:f0:31:d9:aa:1b:a1:14:1b:2f:0d:44:
cd:5c:22:e8:ac:54:17:cf:a3:65:b6:7f:83:3c:a1:
0d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D0:0F:FA:CA:97:C6:9A:C1:EE:A6:B2:3B:C5:B3:A9:9A:EB:EA:10
X509v3 Authority Key Identifier:
keyid:27:C0:07:E5:08:2B:8E:8D:82:89:01:87:18:CF:D5:27:A7:89:3E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/ZtAP-sqXxprB7qayO8WzqZrr6hA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.25.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:48:5e:20:31:89:49:6d:5b:58:a5:4d:40:97:df:e9:42:7b:
87:33:ad:11:2f:c0:4f:5a:e0:af:92:43:2f:cf:f5:24:91:22:
fb:2b:7d:2d:61:ec:8f:08:ae:51:e0:f4:52:0b:50:d0:d7:bd:
2b:c1:49:1f:0a:d0:e2:cb:2c:95:64:00:4d:18:3d:2f:ef:0e:
03:e2:04:14:d6:57:b6:f4:ac:eb:ab:53:f8:ff:96:9f:39:20:
e6:24:54:1c:18:cb:e8:b3:da:31:25:2e:70:6e:67:c2:91:6b:
1b:f3:54:70:9b:0c:43:5c:12:68:6d:e1:89:81:93:ac:f2:93:
24:0e:f4:fc:ee:7a:73:7f:3c:59:8d:26:36:d6:e3:c8:20:ca:
19:a3:e3:63:b5:82:6f:4d:a1:b8:b8:ac:7d:0e:3e:63:29:cd:
42:de:52:84:a3:7a:cf:ea:fe:82:52:41:3c:ac:6e:e0:b6:b3:
71:ea:84:c7:16:58:4f:94:5c:0c:28:00:5f:3a:2f:77:9c:6a:
e0:90:db:3a:ae:e1:ec:a2:ad:31:d6:59:c4:51:f4:7c:29:88:
af:a8:82:80:44:8f:32:13:6a:1d:ab:a2:8a:54:cf:dc:90:94:
4c:d4:49:82:a1:14:38:09:08:12:3b:5e:0e:5b:2f:9f:6e:35:
31:b6:89:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:37:51 2026 by rpki-client