Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/e5868b-0e79-4c25-94a9-64264962dcd5/1/Zx8I6BSP-_0J3OmO8E2uY2OmQIk.roa
File: Zx8I6BSP-_0J3OmO8E2uY2OmQIk.roa (raw, json)
Hash identifier: ONR+1hvtbQYcmwb/CpfgwjNWmSDEyPCmRyY0swJVv+0=
Subject key identifier: 67:1F:08:E8:14:8F:FB:FD:09:DC:E9:8E:F0:4D:AE:63:63:A6:40:89
Certificate issuer: /CN=5a979765146fe50bff955fa49ae05b62a962f66b
Certificate serial: 019F7F24EE586D8B0773745CB63D275AD4B8
Authority key identifier: 5A:97:97:65:14:6F:E5:0B:FF:95:5F:A4:9A:E0:5B:62:A9:62:F6:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpeXZRRv5Qv_lV-kmuBbYqli9ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/e5868b-0e79-4c25-94a9-64264962dcd5/1/Zx8I6BSP-_0J3OmO8E2uY2OmQIk.roa
Signing time: Mon 20 Jul 2026 10:49:14 +0000
ROA not before: Mon 20 Jul 2026 10:49:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200457
IP address blocks: 185.106.172.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/e5868b-0e79-4c25-94a9-64264962dcd5/1/WpeXZRRv5Qv_lV-kmuBbYqli9ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/e5868b-0e79-4c25-94a9-64264962dcd5/1/WpeXZRRv5Qv_lV-kmuBbYqli9ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/WpeXZRRv5Qv_lV-kmuBbYqli9ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7f:24:ee:58:6d:8b:07:73:74:5c:b6:3d:27:5a:d4:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a979765146fe50bff955fa49ae05b62a962f66b
Validity
Not Before: Jul 20 10:49:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=671f08e8148ffbfd09dce98ef04dae6363a64089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cd:a1:5e:65:51:f5:15:0b:6c:3a:50:52:0a:
9e:a9:fb:8c:3e:ed:f1:ef:9c:0e:ef:f6:52:7c:b6:
24:48:0f:4d:c8:c5:38:df:4b:22:33:7c:8c:10:eb:
31:f9:55:0d:e4:68:23:78:e0:11:70:79:38:ae:f0:
c6:80:f9:43:5a:e5:04:ca:18:48:50:76:3f:92:0a:
06:55:04:fa:62:88:c9:db:b2:03:9a:3c:1f:58:c3:
b3:5d:c1:1d:59:8b:67:99:d5:17:ee:61:20:e0:b4:
ad:73:e9:1f:c6:29:55:c2:ba:b7:03:be:c1:74:de:
c5:6e:cc:1e:62:69:01:97:78:ec:41:21:be:79:fa:
b6:77:36:b0:c8:83:60:ac:71:e9:16:94:42:f4:be:
f7:db:b1:4b:70:d3:80:09:ea:30:c9:5d:b8:f5:9c:
90:b3:31:57:9e:96:b2:45:23:59:e9:41:2c:e1:df:
88:7f:9b:ab:38:9d:18:03:de:79:ad:b7:72:52:8b:
13:1a:bc:ae:80:e8:f5:99:0c:f9:c4:34:c8:d2:20:
db:d8:f4:1d:6e:12:ba:69:2e:cc:ce:92:99:86:81:
89:c2:ea:56:7f:b5:29:27:89:8e:e8:b5:11:67:67:
d4:cd:17:69:7c:ca:c6:b4:bc:45:35:0f:91:c7:83:
ce:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:1F:08:E8:14:8F:FB:FD:09:DC:E9:8E:F0:4D:AE:63:63:A6:40:89
X509v3 Authority Key Identifier:
keyid:5A:97:97:65:14:6F:E5:0B:FF:95:5F:A4:9A:E0:5B:62:A9:62:F6:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpeXZRRv5Qv_lV-kmuBbYqli9ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e5868b-0e79-4c25-94a9-64264962dcd5/1/Zx8I6BSP-_0J3OmO8E2uY2OmQIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e5868b-0e79-4c25-94a9-64264962dcd5/1/WpeXZRRv5Qv_lV-kmuBbYqli9ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.106.172.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:e1:5b:df:10:c3:d8:39:e7:33:40:78:87:f2:af:17:47:5d:
4f:a5:54:e7:08:07:ed:36:82:5e:19:17:86:69:ba:68:11:2f:
76:fe:4f:bf:fa:ca:41:15:92:03:51:f6:4d:43:63:70:a6:5f:
de:12:15:8a:19:e4:c1:ea:26:ae:96:5a:eb:3b:6f:9a:64:09:
c1:2d:85:81:a6:b5:fd:15:32:9c:5a:70:5b:fb:5a:3a:71:9f:
13:ad:25:0a:a5:76:73:43:ed:d6:4f:25:3c:3d:6f:04:5d:02:
3c:a7:82:ff:a1:bd:16:f2:fa:6f:50:f8:90:82:5c:09:d1:c2:
db:b9:72:88:61:df:e1:6f:71:1a:d6:46:f5:23:5b:67:b1:13:
6a:a3:07:dc:cc:3c:bd:61:80:64:ae:eb:11:4a:ea:57:16:70:
6c:09:4c:fc:74:82:a7:e6:e8:07:b5:f8:67:d6:49:8d:9e:72:
1c:32:c3:52:53:25:9d:97:88:50:0c:de:e8:47:28:98:b0:f5:
c8:dd:d2:78:25:56:4c:44:af:a7:7e:52:a0:52:87:40:2e:30:
e5:ea:f1:38:7f:b7:f5:55:aa:d3:a6:3b:19:b3:eb:90:34:ce:
f1:23:7e:21:8a:3b:9f:ec:95:3b:c1:f8:c6:64:86:ab:b1:e0:
7c:1e:0a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:23:47 2026 by rpki-client