Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/zLW84Gsa8lyQLXbWcT3Qg3ZGSrQ.roa
File: zLW84Gsa8lyQLXbWcT3Qg3ZGSrQ.roa (raw, json)
Hash identifier: UXTZQOitHqTP9IRhCn98pWCBLuimV0o0vCpqkwYBveU=
Subject key identifier: CC:B5:BC:E0:6B:1A:F2:5C:90:2D:76:D6:71:3D:D0:83:76:46:4A:B4
Certificate issuer: /CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Certificate serial: 01A0CEE53800C727C737C7DB43263A0FFB91
Authority key identifier: 4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/zLW84Gsa8lyQLXbWcT3Qg3ZGSrQ.roa
Signing time: Wed 23 Sep 2026 15:32:03 +0000
ROA not before: Wed 23 Sep 2026 15:32:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 22773
IP address blocks: 9.155.0.0/18 maxlen: 24
135.137.64.0/18 maxlen: 18
153.58.0.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:e5:38:00:c7:27:c7:37:c7:db:43:26:3a:0f:fb:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Validity
Not Before: Sep 23 15:32:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ccb5bce06b1af25c902d76d6713dd08376464ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:91:8c:18:a3:b4:67:54:69:af:63:50:ae:77:
44:8b:f1:3d:10:d9:a7:b4:95:cc:2c:ca:57:a3:ab:
22:a2:53:7f:02:26:7b:74:23:a3:12:8b:2a:c6:a8:
34:40:24:a1:33:ec:4a:2a:8e:92:ba:65:46:27:96:
cf:58:7f:a6:b5:b0:15:58:03:77:cd:f7:f6:55:3f:
0f:64:d4:76:44:d4:14:fa:3b:ab:b5:c5:79:ed:9a:
9f:a9:02:15:9b:ee:64:0d:eb:ce:23:ac:ac:0a:f7:
5e:85:12:4d:4e:0e:34:e4:f9:1d:fb:c7:74:0e:21:
5b:1a:73:d8:0e:e8:37:9a:c2:0a:20:fb:5a:c9:75:
a4:2a:21:40:95:14:cf:55:11:a1:3e:9c:a1:4d:c8:
20:ba:92:f6:8f:d2:5b:56:f5:43:a8:cd:41:af:6b:
41:41:bb:10:f4:89:4c:e1:82:37:1c:24:fb:23:00:
ba:97:39:df:a4:1a:d1:d6:3f:0f:45:52:a3:9a:44:
94:ad:b4:f1:b2:60:dc:e2:93:e5:80:a4:ab:07:06:
02:e7:e0:df:93:97:04:f5:62:07:0a:04:80:92:2d:
4c:b6:2c:59:02:f1:b4:1a:87:23:c8:b8:e2:b5:fb:
9e:1a:f1:29:5e:5c:ca:42:c8:68:85:8d:34:9a:a5:
a8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B5:BC:E0:6B:1A:F2:5C:90:2D:76:D6:71:3D:D0:83:76:46:4A:B4
X509v3 Authority Key Identifier:
keyid:4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/zLW84Gsa8lyQLXbWcT3Qg3ZGSrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.155.0.0/18
135.137.64.0/18
153.58.0.0/18
Signature Algorithm: sha256WithRSAEncryption
39:21:f5:f4:71:d6:b3:10:26:41:3f:82:bf:44:84:a1:a0:7c:
b0:28:2c:d7:44:a5:6b:46:04:61:de:58:50:21:62:87:38:2d:
35:3a:62:2a:6b:04:49:cf:94:c2:96:35:84:5a:ca:ae:a7:8d:
80:23:b4:a0:0d:f0:72:0f:60:f7:91:25:ac:53:fe:d2:80:93:
91:90:32:ef:06:63:91:8d:30:76:00:b5:5e:ad:5c:af:fb:2f:
80:1e:25:4a:5c:a9:8c:b1:96:22:fd:bb:6b:e3:97:f8:43:75:
b0:6c:3b:5f:e8:e9:f3:7c:e4:6e:e1:e3:d6:a9:b3:ed:a2:2a:
e4:3c:99:8e:80:e2:9f:dc:72:55:2c:28:85:4d:f6:d2:77:01:
4f:41:68:c8:35:10:d9:70:19:74:9e:b2:a0:24:6b:bf:be:d4:
e0:90:12:5e:ce:b9:d8:bb:62:cc:22:8b:92:d8:8c:8d:cd:85:
c7:c7:1c:92:d5:31:30:ef:64:7a:e7:4a:9e:8c:d0:54:db:35:
50:fe:9e:d5:bd:9a:9b:95:e3:e3:05:d5:8f:ff:d6:c3:3d:89:
f1:12:66:ef:bc:8b:31:8c:b6:ce:fa:95:51:d6:27:8e:ee:ca:
c2:8f:2d:be:e9:8c:ca:b4:82:67:79:0f:04:cc:6c:cd:9c:d9:
70:b4:c4:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:32:46 2026 by rpki-client