Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/zujsGTqKlxqq_gAl8TQMQqPlTN0.roa
File: zujsGTqKlxqq_gAl8TQMQqPlTN0.roa (raw, json)
Hash identifier: /HvPnX5Gir/yo9v3yUV5FLaZkWgMlct5vfyTec41GOc=
Subject key identifier: CE:E8:EC:19:3A:8A:97:1A:AA:FE:00:25:F1:34:0C:42:A3:E5:4C:DD
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019D73149026F76F3E97588A2B8C80C34784
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/zujsGTqKlxqq_gAl8TQMQqPlTN0.roa
Signing time: Thu 09 Apr 2026 16:30:20 +0000
ROA not before: Thu 09 Apr 2026 16:30:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44103
IP address blocks: 194.87.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:73:14:90:26:f7:6f:3e:97:58:8a:2b:8c:80:c3:47:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 9 16:30:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cee8ec193a8a971aaafe0025f1340c42a3e54cdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b6:1e:9f:a4:86:3c:5e:64:d8:96:a1:f8:6d:
fa:ae:53:45:29:5b:79:72:13:38:4a:9e:a1:80:2d:
3f:c2:12:09:3e:02:65:ac:86:3d:fc:7f:07:f7:22:
80:98:f8:a6:9c:0c:f1:96:10:09:e0:40:f0:4d:0e:
3b:76:91:7a:8f:31:8b:40:9a:74:8b:c4:1b:13:7e:
ad:8e:1f:31:e2:8f:7e:a5:4c:d0:aa:59:13:8f:86:
a6:6e:91:b6:53:ff:20:fb:14:9a:b1:97:c8:6d:88:
6d:b1:49:e5:c9:d4:70:e4:41:da:02:9f:55:31:d9:
40:65:4b:98:65:e5:77:3f:69:24:82:9b:2c:7d:a6:
9d:d8:3f:20:a1:a2:19:d3:45:76:86:2f:6a:bd:f1:
96:66:cd:be:e4:d3:9d:15:5e:ac:3b:02:68:52:5b:
40:99:db:47:bb:24:5f:b5:14:93:d0:ce:cc:ee:68:
33:e8:35:53:6c:d7:6d:a1:df:4f:4f:29:7b:c3:6c:
fc:d0:c5:93:c9:39:17:29:72:ee:42:d7:85:04:de:
0b:1f:7e:f0:50:6c:b6:63:8f:34:3c:b6:94:79:30:
7b:0f:4f:f4:fc:ad:52:45:ff:c9:fc:f0:0f:15:a9:
41:12:64:2b:df:8e:41:96:39:cb:5a:2c:00:40:f4:
4c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E8:EC:19:3A:8A:97:1A:AA:FE:00:25:F1:34:0C:42:A3:E5:4C:DD
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/zujsGTqKlxqq_gAl8TQMQqPlTN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.78.0/24
Signature Algorithm: sha256WithRSAEncryption
03:55:c2:84:ae:26:11:a7:de:82:38:56:60:ae:da:83:ba:2c:
73:09:32:32:7d:e7:b4:d8:f6:e7:5b:d5:7c:d8:64:19:f5:18:
36:25:32:41:22:60:11:bd:93:5e:c1:8e:ca:a7:ee:4b:b8:ed:
c5:2d:60:87:4e:78:5b:22:fb:56:a1:30:98:65:cf:5d:22:b3:
83:bb:40:3e:b5:4c:87:ed:11:d7:e8:3c:a2:9c:f5:cb:29:44:
4e:58:dd:27:ed:bf:88:aa:85:64:cd:9a:36:7f:8d:76:6c:9c:
73:b6:e1:2f:c1:6c:0b:c6:97:76:59:96:33:c5:bc:5f:ae:01:
76:e9:1e:16:66:0a:6e:a2:a8:7f:30:c4:46:30:d5:3d:36:fa:
11:6e:3f:ef:20:9c:9d:4b:e6:2b:04:c5:a6:b9:82:5e:0f:fd:
31:e2:1f:05:95:ea:31:38:6e:1e:86:ea:69:39:f3:c4:d0:eb:
2c:11:7c:54:9a:59:e7:b8:82:bc:bc:5e:35:07:3e:6a:7e:af:
a2:dc:05:04:51:39:41:cc:dc:e9:e4:ff:fe:5d:74:22:49:4d:
8d:05:6d:9d:c7:b1:9c:de:c5:04:1d:6f:79:32:e6:62:ab:c2:
f0:5a:9d:57:17:c3:bc:78:a3:08:07:f7:ac:ca:7c:40:b1:f2:
9d:32:ac:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:09:40 2026 by rpki-client