Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/69daa8-bd55-4629-b5d6-0d784ac7c0b5/1/zk7MjylnCvn-B1kvRqqmUutpFj4.roa
File: zk7MjylnCvn-B1kvRqqmUutpFj4.roa (raw, json)
Hash identifier: T/X9zuBsRb/KQOzAd2jNr3MosQ+HVKXq0FztU7ekrQI=
Subject key identifier: CE:4E:CC:8F:29:67:0A:F9:FE:07:59:2F:46:AA:A6:52:EB:69:16:3E
Certificate issuer: /CN=d536c56e9438566a67a51a55a7f64d1ec03e188c
Certificate serial: 01A06C62A9025A0F00C6F497D27C7B1FC7C7
Authority key identifier: D5:36:C5:6E:94:38:56:6A:67:A5:1A:55:A7:F6:4D:1E:C0:3E:18:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TbFbpQ4VmpnpRpVp_ZNHsA-GIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/69daa8-bd55-4629-b5d6-0d784ac7c0b5/1/zk7MjylnCvn-B1kvRqqmUutpFj4.roa
Signing time: Fri 04 Sep 2026 12:26:40 +0000
ROA not before: Fri 04 Sep 2026 12:26:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214412
IP address blocks: 185.142.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/69daa8-bd55-4629-b5d6-0d784ac7c0b5/1/1TbFbpQ4VmpnpRpVp_ZNHsA-GIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/69daa8-bd55-4629-b5d6-0d784ac7c0b5/1/1TbFbpQ4VmpnpRpVp_ZNHsA-GIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1TbFbpQ4VmpnpRpVp_ZNHsA-GIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 18:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:62:a9:02:5a:0f:00:c6:f4:97:d2:7c:7b:1f:c7:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d536c56e9438566a67a51a55a7f64d1ec03e188c
Validity
Not Before: Sep 4 12:26:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ce4ecc8f29670af9fe07592f46aaa652eb69163e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b5:23:dd:31:e2:d6:ee:b5:70:e9:cb:e9:e3:
a6:f2:81:61:f7:b7:44:9b:40:b8:18:11:f8:95:8d:
53:6f:60:d6:7c:29:1f:7c:1f:53:6c:0f:d1:10:79:
eb:31:b6:a9:04:4c:5e:58:fc:f5:0f:88:dc:ca:d5:
1f:a3:f7:37:ef:d8:c1:9c:0c:ac:26:63:7c:b6:e5:
ca:14:63:33:35:4f:e3:67:49:0d:43:88:c1:61:0d:
6c:40:93:df:c0:25:e2:7c:8d:e2:28:a8:af:c6:d6:
90:a9:33:86:91:fa:d8:04:a0:8f:79:8c:d6:4a:94:
2e:ac:6d:9a:d8:96:66:97:4e:43:8a:47:48:3c:70:
7a:6a:49:bb:ce:2a:86:0d:e2:8d:a4:ab:16:2e:59:
7b:d0:8e:92:c2:c9:c8:af:02:67:10:d2:cc:9e:d5:
6e:2a:c7:83:e6:5f:7d:ae:b3:e5:4d:ca:e4:db:6a:
20:c4:2d:2c:f7:fd:f9:de:a3:1a:2d:d4:d7:1e:c0:
6f:22:7d:b1:f7:bf:bc:17:55:25:4d:3b:2f:8b:7c:
83:10:71:95:c5:f5:de:87:c7:a9:1f:67:f4:aa:09:
72:df:14:83:33:3e:86:82:0c:44:bd:27:9b:c6:f8:
2f:85:ca:79:71:e9:27:09:d2:33:ed:c0:21:35:82:
4e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:4E:CC:8F:29:67:0A:F9:FE:07:59:2F:46:AA:A6:52:EB:69:16:3E
X509v3 Authority Key Identifier:
keyid:D5:36:C5:6E:94:38:56:6A:67:A5:1A:55:A7:F6:4D:1E:C0:3E:18:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TbFbpQ4VmpnpRpVp_ZNHsA-GIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/69daa8-bd55-4629-b5d6-0d784ac7c0b5/1/zk7MjylnCvn-B1kvRqqmUutpFj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/69daa8-bd55-4629-b5d6-0d784ac7c0b5/1/1TbFbpQ4VmpnpRpVp_ZNHsA-GIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.88.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:6c:76:6e:9b:54:75:14:7f:33:58:64:8e:7e:ed:bc:bf:9a:
6f:06:33:8e:38:34:d7:e2:c0:a2:a5:a0:ef:55:ab:c8:d3:dc:
ad:58:9b:ba:c5:ba:c6:c0:fc:8f:29:00:75:40:bc:2d:19:09:
ea:2d:21:4b:a5:a1:6f:0b:38:51:c1:e1:0b:d9:8f:9b:bd:3f:
3d:98:74:2a:53:e1:a3:a8:08:dd:5a:ba:d2:ed:bb:bc:83:a3:
9f:bd:2c:ed:d3:48:a0:c2:4a:c3:c2:b6:2b:ac:be:33:40:af:
df:a9:8e:7c:32:0b:d6:71:4e:1e:a8:06:87:16:9d:c6:39:0e:
47:c0:ce:4b:f8:53:7b:20:07:d0:ab:c0:76:4f:89:d5:16:d6:
41:55:01:1c:f7:4f:44:50:ce:4e:58:87:68:2e:49:7a:b6:3d:
f9:b0:91:fa:47:ea:34:16:82:7f:d7:d0:b3:d5:36:8c:e6:36:
a3:91:2a:a6:d1:e6:83:74:34:a5:53:65:62:30:d4:7f:ad:f6:
37:6e:ee:a9:d6:65:c1:c0:37:68:26:87:a2:b0:32:67:6e:8f:
b9:02:21:bd:01:0e:a3:57:ff:f9:03:06:0d:94:33:ae:65:33:
90:33:dc:64:c7:94:72:fa:e0:24:b6:52:de:20:fd:18:ee:b5:
32:03:43:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:37:46 2026 by rpki-client