Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/CzItBfhQLOr19TXshG8xIrAepZo.roa
File: CzItBfhQLOr19TXshG8xIrAepZo.roa (raw, json)
Hash identifier: ZsL/eMEoqm5jb00MeORDPPBuXgnALTUh1B2vg5ljlWY=
Subject key identifier: 0B:32:2D:05:F8:50:2C:EA:F5:F5:35:EC:84:6F:31:22:B0:1E:A5:9A
Certificate issuer: /CN=55610a59ddffbd24ee4b299e9b24b1bf036f8e43
Certificate serial: 019C702CD4223EE5B6C74584F65E142A798C
Authority key identifier: 55:61:0A:59:DD:FF:BD:24:EE:4B:29:9E:9B:24:B1:BF:03:6F:8E:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VWEKWd3_vSTuSymemySxvwNvjkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/CzItBfhQLOr19TXshG8xIrAepZo.roa
Signing time: Wed 18 Feb 2026 09:55:11 +0000
ROA not before: Wed 18 Feb 2026 09:55:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56911
IP address blocks: 195.18.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VWEKWd3_vSTuSymemySxvwNvjkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:70:2c:d4:22:3e:e5:b6:c7:45:84:f6:5e:14:2a:79:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55610a59ddffbd24ee4b299e9b24b1bf036f8e43
Validity
Not Before: Feb 18 09:55:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b322d05f8502ceaf5f535ec846f3122b01ea59a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8f:af:76:b9:13:0e:a6:92:70:01:66:9e:a0:
48:72:18:9c:8c:90:6b:0b:6f:48:38:9f:43:2c:4e:
16:b8:4f:e4:bf:56:58:eb:a7:c4:6e:e1:b2:ff:47:
b5:86:7c:c0:7c:ad:28:8c:f8:6c:79:8e:48:80:5a:
57:ad:09:58:fb:fc:d1:d6:a1:9f:f6:68:8c:95:30:
4e:b5:c8:48:bc:89:71:ce:a8:35:c9:12:60:71:e1:
c4:52:3d:59:8e:7b:b1:de:52:09:41:9f:42:1f:53:
62:fe:2b:c1:41:49:06:b9:f8:e3:b5:7a:6f:eb:94:
0d:a3:74:69:8b:49:37:ac:1c:a2:78:94:3d:ad:00:
ad:92:b0:22:14:ac:e8:2e:78:a9:55:26:68:57:48:
6b:e2:55:d4:4e:61:58:15:88:bd:c0:ad:41:0d:e1:
21:da:b3:6f:77:a1:74:45:ae:49:d7:9a:90:20:bd:
f8:c0:86:3d:0f:22:6b:d0:d1:92:c9:e2:24:b2:42:
9d:6f:f7:ec:3c:d3:4b:f8:8d:28:0b:64:14:d1:b3:
34:d3:95:8a:19:b6:d2:29:eb:ff:8f:5a:a7:62:ed:
a0:06:a2:8b:1a:2f:e0:c7:1a:34:45:b3:86:c6:9e:
90:a6:f2:57:19:25:00:5c:98:3b:76:f6:d5:cf:96:
a4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:32:2D:05:F8:50:2C:EA:F5:F5:35:EC:84:6F:31:22:B0:1E:A5:9A
X509v3 Authority Key Identifier:
keyid:55:61:0A:59:DD:FF:BD:24:EE:4B:29:9E:9B:24:B1:BF:03:6F:8E:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWEKWd3_vSTuSymemySxvwNvjkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/CzItBfhQLOr19TXshG8xIrAepZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.18.11.0/24
Signature Algorithm: sha256WithRSAEncryption
96:80:f6:99:1b:87:52:42:c4:77:2e:88:7d:23:44:48:d2:d0:
04:39:6f:2b:f1:8a:41:8a:d3:0f:f1:81:61:75:bb:47:f1:b5:
34:7e:3e:7e:98:2b:3f:bc:95:38:59:b5:9b:1f:41:4b:48:0d:
0c:02:e2:4a:b0:4f:3e:28:83:96:17:98:ec:74:74:1f:57:b3:
da:2e:87:c6:d7:2a:93:82:97:d0:11:e8:7b:04:0a:f3:cb:b1:
f4:0d:ee:1d:51:87:fe:13:06:45:40:18:ef:5f:e8:c3:b1:da:
96:ed:dd:8e:4c:cf:d5:83:36:6b:a0:ad:3e:fa:c2:ea:7b:5b:
96:2d:18:8a:c9:2f:b5:a6:f0:ac:b5:cc:6e:a5:83:07:ba:e1:
2f:59:a9:fe:7c:b5:fc:ae:0d:f1:23:46:b2:95:f0:38:71:ef:
57:b7:67:33:d3:4e:56:3c:2a:d0:7b:ea:eb:0f:20:c5:79:fb:
2e:05:62:d4:e7:9a:b8:85:99:0c:00:29:53:5a:ac:4b:86:0a:
8f:73:dd:48:23:3a:8c:87:da:d6:68:23:ff:13:30:65:96:e2:
85:de:e9:db:dd:8f:e2:c6:1b:9d:d8:08:95:cf:ad:bf:f3:cd:
e7:a7:ca:21:7e:39:6d:37:fb:c9:0f:78:de:18:e1:5a:b4:5e:
c1:cb:ee:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:34:55 2026 by rpki-client