Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/zl9a2F2XfJaNTOt8qhBiHTQEm7I.roa
File: zl9a2F2XfJaNTOt8qhBiHTQEm7I.roa (raw, json)
Hash identifier: VZiQjj4p8R2MxeseRwU4vGaPWJyrD8qmEk6zhfGY7qs=
Subject key identifier: CE:5F:5A:D8:5D:97:7C:96:8D:4C:EB:7C:AA:10:62:1D:34:04:9B:B2
Certificate issuer: /CN=fc4d06978969a8bdab6d6359062d7781e03449ca
Certificate serial: 019D635FA65C99D677F22EDD8E21588B3601
Authority key identifier: FC:4D:06:97:89:69:A8:BD:AB:6D:63:59:06:2D:77:81:E0:34:49:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/zl9a2F2XfJaNTOt8qhBiHTQEm7I.roa
Signing time: Mon 06 Apr 2026 15:18:26 +0000
ROA not before: Mon 06 Apr 2026 15:18:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401838
IP address blocks: 185.54.14.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.mft
rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:63:5f:a6:5c:99:d6:77:f2:2e:dd:8e:21:58:8b:36:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc4d06978969a8bdab6d6359062d7781e03449ca
Validity
Not Before: Apr 6 15:18:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ce5f5ad85d977c968d4ceb7caa10621d34049bb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:01:5b:31:8c:82:58:7a:87:95:b6:ff:bc:75:
af:a2:90:18:d1:61:99:ee:6a:7a:16:3d:da:ee:b1:
1d:da:0e:e3:29:fb:06:d8:93:9e:d5:4b:c2:cc:7a:
95:fd:4e:af:b8:79:e1:2b:0a:76:c2:72:ee:46:b8:
90:51:1e:17:99:9b:2b:2f:f9:20:95:bf:1a:2c:df:
11:f3:57:e8:76:ed:75:5f:82:f0:2a:75:c6:b9:a0:
29:cc:f9:92:c1:5e:0a:33:b5:63:c8:4c:4f:6b:ee:
db:1a:3c:1b:e9:36:e6:80:0d:88:52:63:23:c7:1c:
d9:2a:8e:e0:49:92:4e:9e:b7:12:01:d3:ef:b6:37:
8a:72:e8:7c:95:98:0b:40:88:10:f0:be:2c:9c:c6:
ce:56:9b:ce:73:3c:9f:1a:77:b6:bc:4b:ac:84:73:
ce:44:0e:3d:7c:a8:4b:35:c5:1f:26:97:83:e5:42:
9a:90:37:fe:d9:7b:62:ab:32:55:a1:4f:50:58:a4:
39:5b:fc:3f:6b:48:0f:49:c1:7f:52:e4:5e:bc:40:
ef:fc:93:7d:45:18:2e:a7:ba:d7:9b:ca:ed:f5:42:
12:d5:7e:8b:4d:98:74:29:5d:18:ea:c8:a3:1c:35:
49:91:8a:f1:18:92:51:b5:1a:04:23:e2:43:2b:86:
78:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:5F:5A:D8:5D:97:7C:96:8D:4C:EB:7C:AA:10:62:1D:34:04:9B:B2
X509v3 Authority Key Identifier:
keyid:FC:4D:06:97:89:69:A8:BD:AB:6D:63:59:06:2D:77:81:E0:34:49:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/zl9a2F2XfJaNTOt8qhBiHTQEm7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.14.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:94:16:50:46:a8:dc:f4:2e:c9:91:bf:d3:6d:97:72:ba:f2:
33:dc:17:a4:4c:7f:a9:8b:ef:2d:8e:20:2c:bb:62:13:7a:96:
f9:35:96:29:f9:3b:43:a9:79:84:2a:fe:57:0d:b4:04:af:6c:
7c:86:b2:ec:5e:7a:44:65:0d:32:63:9a:9c:c0:e5:ba:29:85:
93:6b:6f:89:d9:f1:81:38:dc:5c:03:3e:64:6b:8a:47:e3:9e:
53:c5:6d:bb:65:9a:cc:19:f0:8c:e1:59:ac:83:18:66:bf:f4:
70:c2:ba:fa:e7:37:8a:02:1f:2b:a0:e5:20:6d:75:a6:b2:b2:
3a:9e:e6:2e:0a:9f:de:e8:76:ee:27:88:a9:0b:1a:7d:a7:23:
81:6a:35:ac:18:b9:ab:f0:8f:76:f6:74:ce:8f:70:3b:57:e6:
6f:92:94:6b:59:31:81:0b:bf:ec:28:ec:17:d7:f3:4f:1b:bc:
8f:e8:19:4a:39:d4:5a:39:07:da:32:ec:f0:3d:37:64:76:9c:
a3:ef:bc:cf:77:03:b7:94:ee:30:36:ab:70:16:0c:88:22:d5:
18:84:a5:57:ac:07:49:81:ae:1d:44:78:69:65:37:83:54:61:
af:5b:18:d9:c4:8d:f7:6e:2b:aa:8b:f7:3e:57:16:83:5e:f8:
29:25:51:64
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ1jX6ZcmdZ38i7djiFYizYBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjNGQwNjk3ODk2OWE4YmRhYjZkNjM1OTA2MmQ3NzgxZTAz
NDQ5Y2EwHhcNMjYwNDA2MTUxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZTVmNWFkODVkOTc3Yzk2OGQ0Y2ViN2NhYTEwNjIxZDM0MDQ5YmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQFbMYyCWHqHlbb/vHWvopAY0WGZ
7mp6Fj3a7rEd2g7jKfsG2JOe1UvCzHqV/U6vuHnhKwp2wnLuRriQUR4XmZsrL/kg
lb8aLN8R81fodu11X4LwKnXGuaApzPmSwV4KM7VjyExPa+7bGjwb6TbmgA2IUmMj
xxzZKo7gSZJOnrcSAdPvtjeKcuh8lZgLQIgQ8L4snMbOVpvOczyfGne2vEushHPO
RA49fKhLNcUfJpeD5UKakDf+2XtiqzJVoU9QWKQ5W/w/a0gPScF/UuRevEDv/JN9
RRgup7rXm8rt9UIS1X6LTZh0KV0Y6sijHDVJkYrxGJJRtRoEI+JDK4Z4WwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM5fWthdl3yWjUzrfKoQYh00BJuyMB8GA1UdIwQY
MBaAFPxNBpeJaai9q21jWQYtd4HgNEnKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0UwR2w0bHBxTDJyYldOWkJpMTNnZUEwU2NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8wODJjMzEtZjRlZi00YWNiLTkwZjEt
ZGEwM2JmN2EyZWMyLzEvemw5YTJGMlhmSmFOVE90OHFoQmlIVFFFbTdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8wODJjMzEtZjRlZi00YWNiLTkwZjEtZGEwM2JmN2EyZWMy
LzEvX0UwR2w0bHBxTDJyYldOWkJpMTNnZUEwU2NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuTYOMA0G
CSqGSIb3DQEBCwUAA4IBAQB7lBZQRqjc9C7Jkb/TbZdyuvIz3BekTH+pi+8tjiAs
u2ITepb5NZYp+TtDqXmEKv5XDbQEr2x8hrLsXnpEZQ0yY5qcwOW6KYWTa2+J2fGB
ONxcAz5ka4pH455TxW27ZZrMGfCM4Vmsgxhmv/Rwwrr65zeKAh8roOUgbXWmsrI6
nuYuCp/e6HbuJ4ipCxp9pyOBajWsGLmr8I929nTOj3A7V+ZvkpRrWTGBC7/sKOwX
1/NPG7yP6BlKOdRaOQfaMuzwPTdkdpyj77zPdwO3lO4wNqtwFgyIItUYhKVXrAdJ
ga4dRHhpZTeDVGGvWxjZxI33biuqi/c+VxaDXvgpJVFk
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:12:16 2026 by rpki-client