Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/zNqty2MMMtiYifN34tRpIOVX9sQ.roa
File: zNqty2MMMtiYifN34tRpIOVX9sQ.roa (raw, json)
Hash identifier: yLB5f8Ek8IZkDyn4YFbsPyCUS3Yue+tSUM0kBMSr3B8=
Subject key identifier: CC:DA:AD:CB:63:0C:32:D8:98:89:F3:77:E2:D4:69:20:E5:57:F6:C4
Certificate issuer: /CN=65152e4e6c245c03fecdfa48bf91396cbefed7af
Certificate serial: 019C8FB4A3F48DA42C3F69D99427AD50E439
Authority key identifier: 65:15:2E:4E:6C:24:5C:03:FE:CD:FA:48:BF:91:39:6C:BE:FE:D7:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRUuTmwkXAP-zfpIv5E5bL7-168.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/zNqty2MMMtiYifN34tRpIOVX9sQ.roa
Signing time: Tue 24 Feb 2026 12:51:46 +0000
ROA not before: Tue 24 Feb 2026 12:51:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24961
IP address blocks: 193.192.60.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRUuTmwkXAP-zfpIv5E5bL7-168.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8f:b4:a3:f4:8d:a4:2c:3f:69:d9:94:27:ad:50:e4:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65152e4e6c245c03fecdfa48bf91396cbefed7af
Validity
Not Before: Feb 24 12:51:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ccdaadcb630c32d89889f377e2d46920e557f6c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:94:2e:81:3f:0b:46:f8:1a:a2:33:fc:0a:ab:
fd:7f:41:e4:6e:93:35:4e:b5:42:b6:ee:63:42:31:
39:05:94:68:77:75:58:f9:60:23:4b:1c:2f:96:b4:
ac:0b:3c:81:57:bc:96:45:57:34:2f:e6:3b:4d:4d:
9f:07:1e:f2:95:57:c2:df:90:c4:8f:b6:55:c2:51:
22:fb:5e:2a:ff:ea:59:98:7a:33:68:73:c4:32:99:
62:f9:02:a2:61:eb:e7:df:a5:fe:3f:23:a6:26:b9:
46:06:2f:af:8f:2b:18:f7:c7:94:42:39:45:cd:48:
01:15:75:34:4c:37:c8:4f:ab:06:ba:12:ce:e6:c7:
2e:b9:f8:ee:3f:20:7c:a2:5e:6b:33:48:5b:76:c4:
e6:a3:c0:7f:40:30:6b:b0:47:c7:30:3c:82:9b:09:
dc:d5:d5:16:9e:b6:c8:55:a1:44:73:61:c4:d2:22:
dd:e1:42:e1:8d:aa:6e:6b:a8:61:ea:8c:39:66:97:
ab:d4:7a:db:00:9e:f7:e3:bc:d6:de:39:b2:be:03:
d9:81:bc:22:06:a1:a9:f5:c9:17:38:93:9b:5a:18:
20:be:a3:a3:cd:60:1f:5c:4d:63:9b:07:34:b6:55:
59:4d:cb:7d:d3:31:d7:1a:9b:f8:e8:1c:ca:d0:58:
2b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:DA:AD:CB:63:0C:32:D8:98:89:F3:77:E2:D4:69:20:E5:57:F6:C4
X509v3 Authority Key Identifier:
keyid:65:15:2E:4E:6C:24:5C:03:FE:CD:FA:48:BF:91:39:6C:BE:FE:D7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRUuTmwkXAP-zfpIv5E5bL7-168.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/zNqty2MMMtiYifN34tRpIOVX9sQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.192.60.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:d5:e6:42:8f:5c:80:94:39:83:1f:33:da:27:63:cf:1d:96:
ad:ee:25:99:c3:b8:c6:e1:35:4b:b5:e3:08:57:b4:6b:68:65:
ac:40:ee:c9:75:bb:dd:ac:10:a2:ed:9f:4b:75:73:60:0e:22:
3b:52:48:37:65:aa:f7:a1:77:1d:20:86:82:58:aa:b0:fc:eb:
ca:7c:e8:db:72:7d:f5:38:9d:d7:ba:0e:0a:ce:1a:72:32:d2:
48:20:2e:d1:5a:31:71:e8:73:41:74:74:60:e5:fb:ea:d0:74:
60:cd:51:46:d8:e9:7b:2f:39:18:c4:6b:98:5e:f1:0c:4f:4e:
61:d3:06:c0:d2:03:67:20:11:ca:b1:bc:b3:45:33:25:01:0b:
56:65:78:06:13:f3:4a:c7:80:2f:9b:a8:2a:9a:a7:96:c9:00:
0b:cc:37:2b:9a:4b:4b:d8:31:34:37:bd:ce:30:79:84:39:6a:
fa:78:94:e1:19:2e:0d:da:4e:34:a0:64:90:ea:c3:9f:2b:01:
41:8d:80:cf:38:ed:f0:2d:60:99:1c:4b:5c:67:b0:ae:40:47:
b1:11:aa:7e:1b:d0:6f:2e:4f:46:13:0a:09:2f:0b:12:23:08:
de:52:3c:3d:ad:82:34:5c:55:f9:c4:86:8a:7a:9d:d3:ef:bd:
69:75:bd:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:56:13 2026 by rpki-client