Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ZAWQ_Lvgc5bhS7AKF1AUIIa989g.roa
File: ZAWQ_Lvgc5bhS7AKF1AUIIa989g.roa (raw, json)
Hash identifier: SOo+C9TMQzrYzab8LFoZtidKTL+o1Pu8ZZOV4nbIzJM=
Subject key identifier: 64:05:90:FC:BB:E0:73:96:E1:4B:B0:0A:17:50:14:20:86:BD:F3:D8
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019EB63169AEEEAE231A708B5062A115A6BD
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ZAWQ_Lvgc5bhS7AKF1AUIIa989g.roa
Signing time: Thu 11 Jun 2026 10:19:12 +0000
ROA not before: Thu 11 Jun 2026 10:19:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198487
IP address blocks: 188.255.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:31:69:ae:ee:ae:23:1a:70:8b:50:62:a1:15:a6:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jun 11 10:19:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=640590fcbbe07396e14bb00a1750142086bdf3d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:dd:37:6f:04:42:17:37:69:8b:67:e3:3c:15:
a9:d4:40:e2:41:5d:2f:42:86:3a:8e:4e:90:fc:2f:
9a:bd:eb:b7:b9:83:5e:ca:35:de:08:bb:3a:23:a8:
b7:f5:04:98:a8:80:cf:b6:d2:b6:06:2d:e0:e7:ec:
c0:05:90:d2:f6:99:3c:89:5f:d4:5b:01:42:fb:ad:
34:fc:db:91:df:6e:4a:53:45:1f:f3:b7:50:b7:06:
4f:9e:f6:85:6d:c8:2e:16:ce:74:16:16:23:c7:eb:
de:9a:34:fd:95:d1:4b:47:79:49:31:40:f1:45:0e:
2f:31:e6:6d:85:be:39:94:5c:3a:71:a6:32:8a:d3:
a8:31:96:35:31:5a:78:be:7b:d0:6f:c7:87:9d:33:
da:a0:37:77:38:75:d4:ea:0a:69:51:e1:63:60:79:
d8:0f:e7:b4:3a:b5:fd:bd:9e:01:ac:19:35:94:b5:
6d:f8:60:c3:a1:05:d5:7f:46:4a:ac:d7:7c:da:7c:
28:1e:16:01:1d:bb:e1:c8:d8:22:ed:f8:9e:03:f4:
47:df:c9:d6:72:ba:c4:0f:de:09:7d:4d:27:bf:c3:
e5:f4:51:ee:60:d9:06:4c:2f:22:3f:e8:ae:51:5e:
e1:8e:a4:51:10:45:5f:5a:7a:15:f3:49:43:57:37:
2d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:05:90:FC:BB:E0:73:96:E1:4B:B0:0A:17:50:14:20:86:BD:F3:D8
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ZAWQ_Lvgc5bhS7AKF1AUIIa989g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.255.175.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:b2:0d:19:8a:88:f1:e3:cf:e8:16:3b:05:64:1b:00:d6:7c:
99:80:dc:b2:b6:d0:33:6f:7a:e2:86:a6:01:9b:5a:1c:75:5b:
66:51:15:3f:75:03:28:f0:1f:39:7d:6f:b9:29:0e:1a:04:ad:
d9:99:59:88:69:ff:58:5d:e2:64:ca:62:b9:29:a9:8f:c4:8a:
b0:21:6b:3d:88:55:05:6c:ec:0f:bc:40:e4:4e:de:08:f9:72:
dc:91:d5:56:b1:59:13:c0:a2:82:76:5b:4c:5d:65:e4:e5:67:
b0:d3:4f:79:1a:9c:27:b0:ab:6a:d0:d4:fb:4c:d1:bc:a0:04:
29:72:86:e6:9a:e6:fb:62:35:4a:06:e2:38:49:88:ec:6f:bc:
6e:e7:c1:30:81:ec:fc:4c:bc:a6:c6:99:1b:4e:65:da:9e:52:
4e:64:79:3d:02:bf:9b:5f:42:80:23:fa:1f:66:bb:d9:8e:8f:
fc:0c:60:0c:e9:8b:60:16:26:82:77:8c:cd:2f:c7:c2:79:9a:
86:d6:d9:0a:5a:99:89:71:96:02:c7:85:db:46:0f:18:16:91:
41:fb:ab:25:85:a9:a6:9b:31:06:3e:aa:a7:93:e9:35:ee:b3:
c1:50:44:e9:20:b9:a3:fd:29:b5:8d:e7:01:13:2e:3a:ec:9e:
db:d3:0b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:52:00 2026 by rpki-client