Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/1zfgpyx815vfD4GVvCCNDPn_TuY.roa
File: 1zfgpyx815vfD4GVvCCNDPn_TuY.roa (raw, json)
Hash identifier: LofXJ1hl+7nDl1xqw1jI0yHT4U0gqqIbth9bSG/W9uw=
Subject key identifier: D7:37:E0:A7:2C:7C:D7:9B:DF:0F:81:95:BC:20:8D:0C:F9:FF:4E:E6
Certificate issuer: /CN=086438e9889389829fa5f51b6a210731082eac22
Certificate serial: 019E2FBE8999A26F51A029398C746AC9A642
Authority key identifier: 08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/1zfgpyx815vfD4GVvCCNDPn_TuY.roa
Signing time: Sat 16 May 2026 07:44:36 +0000
ROA not before: Sat 16 May 2026 07:44:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198365
IP address blocks: 185.16.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 05:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:be:89:99:a2:6f:51:a0:29:39:8c:74:6a:c9:a6:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=086438e9889389829fa5f51b6a210731082eac22
Validity
Not Before: May 16 07:44:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d737e0a72c7cd79bdf0f8195bc208d0cf9ff4ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:87:62:c8:f0:60:3b:85:75:22:8f:a7:2e:d6:
6b:13:2d:f1:13:a1:d9:83:f2:d5:69:32:5f:75:06:
d5:3a:12:d2:b9:65:a6:4a:a8:93:71:8a:f8:dd:85:
31:64:cb:80:20:74:88:5a:5d:8e:66:fd:88:3c:71:
a1:77:2b:ce:37:35:5e:02:6a:c5:4d:dc:bc:87:53:
ab:d3:c9:b8:39:c6:9b:de:8f:1b:be:7b:a4:0d:df:
ee:24:07:b1:ac:3a:94:17:4c:fe:1f:9e:a9:cd:77:
92:0e:89:5a:9d:d3:90:0e:9e:30:72:a0:5a:f5:38:
fd:47:6e:78:26:68:31:90:44:f8:b2:f0:60:18:9d:
d2:ac:47:6f:a4:8e:c6:ca:a5:fc:3a:88:70:a6:40:
84:97:75:c0:3a:1f:62:35:64:04:4f:b3:e4:f2:1b:
e1:9a:57:0b:a2:27:a5:6f:2a:4b:54:1e:5d:56:34:
25:64:8a:07:cc:85:25:0d:14:32:c5:00:e9:4e:04:
c4:15:7a:0e:50:ee:53:af:98:8e:10:99:cb:08:86:
dd:7e:6c:c8:96:4e:31:25:ce:7e:a4:5b:d5:90:4a:
8e:33:26:af:49:fd:05:9a:66:5c:8f:27:fd:1a:d6:
a3:7d:8b:47:bf:42:79:66:62:84:cc:2b:04:56:15:
73:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:37:E0:A7:2C:7C:D7:9B:DF:0F:81:95:BC:20:8D:0C:F9:FF:4E:E6
X509v3 Authority Key Identifier:
keyid:08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/1zfgpyx815vfD4GVvCCNDPn_TuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.16.0.0/24
Signature Algorithm: sha256WithRSAEncryption
63:8e:53:dd:d1:4f:37:98:f7:34:58:ee:24:9d:d4:e4:a6:48:
e5:e7:07:e4:9a:e3:db:1c:f9:24:1c:c8:4c:97:9f:25:bc:df:
36:20:a1:5f:21:33:7d:6c:e9:c9:a3:9f:66:59:8b:57:93:6d:
45:36:90:f2:0a:d5:29:6e:b9:2a:3d:b7:68:2f:ac:c1:32:a2:
72:7b:09:bd:e1:91:87:b7:12:9d:5e:27:4f:07:df:a7:1b:83:
80:31:f3:89:97:ab:8e:07:6f:a8:13:7b:e7:c4:fb:0d:a5:06:
89:d5:94:35:eb:06:84:c1:21:c6:1e:88:26:47:02:ad:f2:7c:
b6:0f:39:1c:a3:a9:35:45:0a:97:6b:38:41:ad:37:f0:7c:27:
c3:1e:a3:4b:90:10:f1:29:bf:d1:ca:f6:01:3f:49:65:33:11:
b4:d2:d0:7a:6c:0b:d5:08:cf:3e:be:f8:e6:81:78:12:ad:df:
16:af:e0:85:cf:7f:3b:26:dd:5b:1a:9b:ef:04:c2:bb:11:69:
2b:2b:40:d5:9b:d5:c6:97:b0:e5:7b:3e:b6:6b:37:51:27:91:
d2:ff:a8:1e:c8:69:28:91:81:f7:4e:fd:72:fa:0f:a3:63:df:
08:97:b2:a0:7b:ae:3d:4a:51:60:38:5b:e3:3a:7b:42:49:a9:
c9:be:8a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:37:35 2026 by rpki-client