Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/zjvEKiChMvD69qRICfCkNpQv40Y.roa
File: zjvEKiChMvD69qRICfCkNpQv40Y.roa (raw, json)
Hash identifier: Js60cDM4uBQGib4vfYjqpe94HFR3sPFzxFsC8qGgWnA=
Subject key identifier: CE:3B:C4:2A:20:A1:32:F0:FA:F6:A4:48:09:F0:A4:36:94:2F:E3:46
Certificate issuer: /CN=e84d35d4d6459ef5f3553ea310e0c65bb3b0f0d9
Certificate serial: 01A083AB766044608C5FF96CB3E533937C70
Authority key identifier: E8:4D:35:D4:D6:45:9E:F5:F3:55:3E:A3:10:E0:C6:5B:B3:B0:F0:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6E011NZFnvXzVT6jEODGW7Ow8Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/zjvEKiChMvD69qRICfCkNpQv40Y.roa
Signing time: Wed 09 Sep 2026 00:57:27 +0000
ROA not before: Wed 09 Sep 2026 00:57:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34989
IP address blocks: 87.192.48.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/6E011NZFnvXzVT6jEODGW7Ow8Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/6E011NZFnvXzVT6jEODGW7Ow8Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6E011NZFnvXzVT6jEODGW7Ow8Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:83:ab:76:60:44:60:8c:5f:f9:6c:b3:e5:33:93:7c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84d35d4d6459ef5f3553ea310e0c65bb3b0f0d9
Validity
Not Before: Sep 9 00:57:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ce3bc42a20a132f0faf6a44809f0a436942fe346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ce:de:33:1f:0f:68:7e:23:cc:81:76:df:fd:
3d:66:69:69:9b:7b:03:1b:55:c7:f6:0e:58:a1:38:
28:a7:65:ad:f5:57:c0:31:7b:a4:8d:48:22:38:64:
86:09:17:2a:87:15:a4:59:d3:8e:57:3c:07:18:18:
38:e3:6b:d7:c8:d6:a6:13:79:08:87:de:59:f8:c5:
80:92:aa:16:69:e0:85:9d:73:99:07:2b:a7:5d:2c:
65:ef:2a:10:39:db:7d:30:97:58:50:ca:29:a6:e1:
80:07:ab:1c:0d:a2:a4:44:73:7d:4e:30:f0:2b:85:
0d:73:6d:1a:08:92:34:64:8f:64:0e:67:87:8f:0f:
2c:86:54:6d:7a:18:cd:05:23:24:6d:58:39:ac:b4:
69:c3:18:93:ad:22:c5:37:1f:b1:a5:86:cd:83:b4:
f5:f6:c7:bb:74:67:d3:3c:34:92:89:4c:0d:6f:a1:
2f:d9:fa:32:90:ad:ad:20:1e:3c:a3:d4:b6:ef:6a:
bf:6a:5f:79:ef:4b:e9:63:57:a1:c5:cb:0f:2b:9c:
7a:d8:51:b9:1e:ee:bc:f6:5f:0e:cd:33:35:cd:f3:
9f:50:a7:97:f9:43:ad:1f:d7:85:ab:97:f1:ca:b6:
fe:7f:cc:37:0d:25:55:5d:57:f4:07:17:be:00:34:
51:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:3B:C4:2A:20:A1:32:F0:FA:F6:A4:48:09:F0:A4:36:94:2F:E3:46
X509v3 Authority Key Identifier:
keyid:E8:4D:35:D4:D6:45:9E:F5:F3:55:3E:A3:10:E0:C6:5B:B3:B0:F0:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E011NZFnvXzVT6jEODGW7Ow8Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/zjvEKiChMvD69qRICfCkNpQv40Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/6E011NZFnvXzVT6jEODGW7Ow8Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.192.48.0/23
Signature Algorithm: sha256WithRSAEncryption
06:30:a2:c0:f2:42:2c:f7:8f:55:7f:96:1d:44:8a:36:5c:48:
17:a0:90:5f:e0:65:1e:12:0d:fc:f7:16:f9:b0:b9:2b:40:34:
46:ff:6e:b3:56:6d:84:7e:4f:e4:20:be:23:f1:d7:cc:78:5a:
d2:04:cb:ac:a2:97:dc:57:b2:94:3c:84:29:d7:36:7d:28:dc:
12:e0:c2:52:a8:01:17:9d:9e:67:78:61:ce:c1:f4:28:0f:71:
94:10:3f:48:d5:fb:ee:fa:19:9d:2b:1a:ba:35:14:06:22:94:
f9:19:25:2b:67:40:00:e3:0e:bc:4c:97:c5:5c:f5:14:e9:c1:
41:b3:86:98:9f:49:9c:44:f6:13:22:4d:6f:0b:b4:3d:92:2c:
54:9b:9d:ab:25:4e:2d:f5:0d:a1:06:d2:4b:e3:f3:18:e3:a0:
52:a6:c6:f5:28:02:0a:24:87:7e:92:ba:07:50:5c:16:7d:d8:
9c:6f:49:53:b5:40:b7:d6:f1:7d:dd:3d:87:61:51:41:12:6f:
dc:7a:65:6e:b8:bc:b1:50:83:3c:60:21:68:e6:42:d7:7e:05:
27:96:31:51:32:f8:fb:89:5e:4a:34:f9:c9:4a:cc:cd:37:e3:
90:7c:22:2a:0c:eb:3a:1c:dc:9b:9b:48:3f:ef:16:d0:c2:56:
f9:22:7f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:09:44 2026 by rpki-client