Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/ZRj2hX60XuM05a4vfNo-Pv7YmB0.roa
File: ZRj2hX60XuM05a4vfNo-Pv7YmB0.roa (raw, json)
Hash identifier: InsWciE0zUkS0m+rNOT/nz98wQ4hGtre1IAaZoW7D1g=
Subject key identifier: 65:18:F6:85:7E:B4:5E:E3:34:E5:AE:2F:7C:DA:3E:3E:FE:D8:98:1D
Certificate issuer: /CN=70b190d6f89a434cce5cb8c0d4b38a1669defb59
Certificate serial: 019E2D833F9D973C3523B5906795394FA3E3
Authority key identifier: 70:B1:90:D6:F8:9A:43:4C:CE:5C:B8:C0:D4:B3:8A:16:69:DE:FB:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/ZRj2hX60XuM05a4vfNo-Pv7YmB0.roa
Signing time: Fri 15 May 2026 21:20:36 +0000
ROA not before: Fri 15 May 2026 21:20:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 10753
IP address blocks: 193.203.28.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 21:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2d:83:3f:9d:97:3c:35:23:b5:90:67:95:39:4f:a3:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70b190d6f89a434cce5cb8c0d4b38a1669defb59
Validity
Not Before: May 15 21:20:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6518f6857eb45ee334e5ae2f7cda3e3efed8981d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:03:3e:7c:e3:28:b0:29:69:6d:97:74:f0:50:
85:07:ab:35:17:62:6a:0d:17:20:68:1d:40:14:ed:
76:62:87:d3:36:d1:3a:79:14:67:8a:d7:fb:e8:28:
36:1e:e6:59:40:ab:1d:86:97:0b:37:c6:d6:2c:f4:
57:44:48:fb:4c:bf:83:4b:4f:7a:bb:33:63:b4:fc:
7b:df:67:23:8b:6b:dc:b2:ad:7a:3c:e4:bd:18:32:
9b:56:eb:3b:2b:29:a5:44:31:e1:91:1b:80:ae:0b:
dd:91:d0:9a:ab:f0:bf:d7:04:f4:2d:b9:42:4b:ba:
f2:1b:88:45:03:78:df:6e:a0:a9:ec:a5:a7:bc:02:
ab:25:71:46:f5:31:5a:ab:16:df:77:ea:fe:2d:f1:
e2:17:9f:eb:d2:c3:c4:1b:14:86:29:17:fd:94:a3:
a5:1d:00:dd:0e:17:3d:b0:94:3a:73:0b:a4:1b:b1:
11:c9:06:17:f9:0e:89:43:02:0f:7a:56:b3:28:4f:
02:37:eb:fb:8b:99:d8:b2:0f:34:24:7a:d1:91:cf:
74:ef:92:d7:dd:08:09:97:64:8e:60:e2:26:bd:59:
43:57:9b:fb:2f:ca:c6:79:40:49:b2:be:51:5f:dd:
4c:ed:4a:1c:ce:6c:1e:5b:5d:ad:e6:77:c7:ff:2b:
09:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:18:F6:85:7E:B4:5E:E3:34:E5:AE:2F:7C:DA:3E:3E:FE:D8:98:1D
X509v3 Authority Key Identifier:
keyid:70:B1:90:D6:F8:9A:43:4C:CE:5C:B8:C0:D4:B3:8A:16:69:DE:FB:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/ZRj2hX60XuM05a4vfNo-Pv7YmB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.28.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:ea:a0:52:89:5b:db:e9:9e:57:f4:55:5b:34:de:5d:76:93:
f9:f0:4d:f8:b4:af:55:37:52:92:57:d1:8d:0f:24:37:f0:fa:
67:4c:2d:90:3f:a8:18:eb:e5:24:82:88:83:4e:3d:ae:b9:0c:
87:32:18:16:e1:36:4a:f5:cb:70:67:72:3e:cd:75:45:61:02:
51:c3:7c:41:2b:02:88:35:7c:35:97:b0:8a:5e:b0:30:fe:22:
10:3f:38:88:f7:d9:21:03:81:76:1a:a1:80:57:f3:72:bd:35:
42:c5:9c:1b:29:fd:7a:8f:23:81:58:e2:0f:ab:f5:43:af:72:
dc:9c:9f:ef:88:6e:13:73:2e:71:7c:5c:07:c6:9c:1a:91:13:
9e:b7:eb:cb:1f:fe:a7:2d:1d:0b:f8:1d:42:1d:03:ba:48:a3:
79:bf:49:cc:4e:36:74:54:92:3c:4f:f9:6c:6f:e8:e5:8b:d0:
31:13:2a:44:a5:8d:f2:93:30:6a:21:f5:6c:bb:76:a0:74:79:
06:4e:90:2b:5c:6a:9b:28:0a:3f:da:77:65:68:73:87:b1:7c:
47:91:83:c4:23:c1:29:b6:c1:4f:49:fd:90:2e:0f:90:16:58:
9b:4c:b3:b2:37:ba:26:c4:a1:9d:0c:54:1d:27:6a:5d:dc:fc:
fe:62:70:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:55:39 2026 by rpki-client