Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/zJvFkKUPRBboidauEf0gBMdPCao.roa
File: zJvFkKUPRBboidauEf0gBMdPCao.roa (raw, json)
Hash identifier: hSig0clWoM8OZs7E1vL3hNkatCEecnrRcxmGn7gNcYk=
Subject key identifier: CC:9B:C5:90:A5:0F:44:16:E8:89:D6:AE:11:FD:20:04:C7:4F:09:AA
Certificate issuer: /CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Certificate serial: 01A0D9260D335E4A00DBC05F329CF1D974CD
Authority key identifier: 4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/zJvFkKUPRBboidauEf0gBMdPCao.roa
Signing time: Fri 25 Sep 2026 15:19:04 +0000
ROA not before: Fri 25 Sep 2026 15:19:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218661
IP address blocks: 79.98.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:26:0d:33:5e:4a:00:db:c0:5f:32:9c:f1:d9:74:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Validity
Not Before: Sep 25 15:19:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cc9bc590a50f4416e889d6ae11fd2004c74f09aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c8:05:53:73:aa:06:81:b1:ca:36:95:6f:7e:
e8:ee:66:bf:17:53:40:8c:8d:53:3d:f0:3e:9f:3e:
45:2e:8a:d3:80:59:0d:c6:7e:2f:4a:2d:27:0f:b2:
95:18:00:19:f1:a9:32:58:64:ff:d6:bc:4a:bf:dc:
fe:8f:2c:d4:8a:8f:34:0d:cc:f9:8b:b3:33:7e:fe:
f3:b7:31:20:f6:ef:f3:77:fd:2a:ab:f6:cb:de:1e:
30:97:5d:f4:39:16:bc:73:db:c1:da:3f:3e:27:68:
78:35:4c:49:02:d0:71:d4:61:69:ab:eb:ff:b7:0b:
5c:ce:aa:8c:af:b5:c5:2d:bb:8d:01:58:38:fb:ad:
5f:ac:26:47:82:18:e3:3a:18:9e:49:c7:54:f8:85:
84:48:b4:e8:70:41:92:11:6d:49:8a:42:64:48:af:
dd:5f:03:c4:38:f5:ae:ea:03:8c:fb:ed:b1:05:42:
76:ea:09:2c:ea:c5:1f:57:4b:24:67:86:a9:dd:50:
9c:54:3f:a4:54:9b:ae:7c:27:a6:d9:48:1a:2e:9b:
b2:93:b1:1d:60:1a:54:67:e2:61:bd:47:de:81:97:
a7:c5:61:bd:ff:2b:d3:ec:3f:e0:31:9e:75:fa:15:
d9:05:75:9b:cb:68:a5:4e:24:e5:fc:13:0b:4d:50:
59:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:9B:C5:90:A5:0F:44:16:E8:89:D6:AE:11:FD:20:04:C7:4F:09:AA
X509v3 Authority Key Identifier:
keyid:4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/zJvFkKUPRBboidauEf0gBMdPCao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.33.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:7c:87:b8:bd:d3:0a:da:45:c6:1f:dd:b9:37:be:b8:41:67:
2a:82:8e:ef:9f:59:8b:2a:38:25:6e:8a:d7:b1:b9:d4:73:06:
bf:42:4b:30:1a:55:1d:e4:56:28:f9:1b:ae:6b:f4:de:c3:c1:
51:53:ff:55:37:d1:3b:7b:ad:fd:af:e5:4e:b1:39:98:c9:60:
aa:a2:b7:8d:30:a2:54:ea:08:08:09:7d:42:27:97:37:22:c2:
f9:06:04:d7:10:6b:5b:09:cc:63:76:1e:49:c5:48:a6:5a:eb:
bb:18:f3:e8:9f:2b:03:38:0b:4e:82:d7:7e:c4:7e:76:1a:69:
c2:98:60:ec:f1:69:14:64:bc:4f:eb:c2:90:13:25:c8:b1:52:
18:a5:99:b6:cc:f8:11:96:38:ce:1a:7a:dc:27:89:b2:f9:f4:
34:9a:7f:b4:c3:64:bf:18:20:b1:30:2d:e5:30:36:7c:68:f3:
4d:6c:4c:b9:2b:21:dc:58:cb:59:76:c2:da:70:04:9c:22:33:
4c:4e:5d:8d:6f:f2:d6:26:8e:d1:af:19:4f:ff:6c:5b:84:38:
2e:49:72:80:d7:4a:34:e6:fb:b6:80:53:20:4b:9f:c2:bb:1a:
4f:c6:f9:f3:16:d3:61:16:b5:f5:6c:b9:64:1e:6d:78:61:43:
92:93:37:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:11:32 2026 by rpki-client