Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Z91QgU3zPEvidy5E07FD820SvCE.roa
File: Z91QgU3zPEvidy5E07FD820SvCE.roa (raw, json)
Hash identifier: t1hJ2jxHCBaQ4V6GB9HTa2VYzxo2IJI3xiQVOmOCbuo=
Subject key identifier: 67:DD:50:81:4D:F3:3C:4B:E2:77:2E:44:D3:B1:43:F3:6D:12:BC:21
Certificate issuer: /CN=01f835760e142acea4bf0a7ff8ae76768f5dcdc7
Certificate serial: 019F23685378DE6F45E39B20F315B341C11B
Authority key identifier: 01:F8:35:76:0E:14:2A:CE:A4:BF:0A:7F:F8:AE:76:76:8F:5D:CD:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Afg1dg4UKs6kvwp_-K52do9dzcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Z91QgU3zPEvidy5E07FD820SvCE.roa
Signing time: Thu 02 Jul 2026 15:17:47 +0000
ROA not before: Thu 02 Jul 2026 15:17:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203902
IP address blocks: 198.52.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Afg1dg4UKs6kvwp_-K52do9dzcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:53:78:de:6f:45:e3:9b:20:f3:15:b3:41:c1:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01f835760e142acea4bf0a7ff8ae76768f5dcdc7
Validity
Not Before: Jul 2 15:17:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=67dd50814df33c4be2772e44d3b143f36d12bc21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:43:f9:54:1f:91:dd:95:eb:5d:92:b2:7f:62:
95:0d:12:7d:20:5b:5d:3f:9b:74:1f:bb:a2:6d:ba:
10:ae:44:63:e7:6d:88:d7:f5:19:90:04:80:d0:3e:
14:ab:2b:d1:c5:ec:e7:30:a8:5a:a0:3b:e7:52:61:
c4:b1:83:d7:28:dd:f5:f2:5d:98:aa:72:ed:b5:04:
ea:2f:da:98:6c:90:40:99:e7:74:89:84:1a:8d:9d:
9d:33:6b:51:ab:6c:5a:43:8f:ca:30:d0:35:dd:4c:
04:cb:f2:60:45:18:40:11:83:b8:74:c5:d8:d3:e1:
b2:56:61:74:4c:8a:9e:4a:95:47:52:40:7c:a6:84:
67:63:4b:60:96:67:44:3f:e4:6c:7a:96:8d:6a:b4:
b6:25:7c:68:c2:a8:3b:b1:c1:16:3b:8b:04:b6:ad:
12:ac:1c:b6:9b:13:fb:00:a9:c3:b6:3f:53:d5:b7:
46:bc:f8:28:ac:31:f2:69:80:c1:6e:19:71:7b:e8:
cb:d3:04:9a:96:c8:3a:a5:45:af:09:8b:49:d1:7e:
d3:d9:c4:a6:7e:fc:53:dc:f2:ce:03:dc:8b:1c:0b:
c8:dd:1d:40:f3:53:bf:ea:d9:a5:ea:a0:0c:cf:b1:
18:71:d8:93:f4:16:64:0e:39:c9:69:73:53:2e:b4:
1c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:DD:50:81:4D:F3:3C:4B:E2:77:2E:44:D3:B1:43:F3:6D:12:BC:21
X509v3 Authority Key Identifier:
keyid:01:F8:35:76:0E:14:2A:CE:A4:BF:0A:7F:F8:AE:76:76:8F:5D:CD:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Afg1dg4UKs6kvwp_-K52do9dzcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Z91QgU3zPEvidy5E07FD820SvCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.52.44.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:09:1e:f4:6f:05:a7:1a:b3:4d:ec:fd:52:27:e9:a1:f2:03:
b3:97:b5:8e:18:8c:c0:00:61:d5:b1:aa:a3:e5:66:97:3a:74:
64:ff:1b:3a:2b:e2:1e:5c:73:82:24:d1:5c:d0:27:bb:62:f0:
c2:63:ce:76:ae:67:8e:ef:36:24:49:f5:74:83:83:25:87:73:
9c:8f:fe:60:0b:9d:07:78:c7:d9:a6:17:79:b3:36:72:b3:bc:
25:c2:f7:95:8d:3b:82:b9:18:3a:70:63:83:17:bb:ce:0d:15:
52:48:b8:cb:18:42:89:2d:b6:92:15:26:de:9e:6f:f3:06:a7:
00:b9:83:06:d9:11:17:26:83:84:46:f1:00:7a:aa:60:c0:0b:
9f:dd:95:89:04:58:5b:9d:3d:c5:b7:c3:14:3a:b0:1a:b9:0d:
64:ee:50:90:15:14:c5:76:46:e1:db:5e:08:8a:71:2f:0d:6c:
15:c7:ba:79:e1:22:7f:8e:47:c7:d5:ed:5a:51:e7:bc:1a:0e:
9f:ae:42:75:34:6c:b0:bd:09:47:91:19:ec:da:94:d9:19:65:
31:b4:85:82:7d:c3:0e:e4:ff:c5:72:cd:af:b4:f3:3d:f6:1d:
66:2e:53:b4:7b:2b:9a:b2:f4:2a:eb:4f:2c:37:b7:45:03:00:
98:e2:07:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:46:01 2026 by rpki-client