Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/RzhQnFCBjP6fXMyWFyjxVBLk_Pw.roa
File: RzhQnFCBjP6fXMyWFyjxVBLk_Pw.roa (raw, json)
Hash identifier: PnaFr/cPsAStkiYYSN33yKuZHaFQbY+u59NQef06H0E=
Subject key identifier: 47:38:50:9C:50:81:8C:FE:9F:5C:CC:96:17:28:F1:54:12:E4:FC:FC
Certificate issuer: /CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Certificate serial: 019EAAFA4FDCE45AC291EED94C59C7D35B63
Authority key identifier: 59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/RzhQnFCBjP6fXMyWFyjxVBLk_Pw.roa
Signing time: Tue 09 Jun 2026 06:03:11 +0000
ROA not before: Tue 09 Jun 2026 06:03:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206766
IP address blocks: 212.180.122.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.mft
rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:aa:fa:4f:dc:e4:5a:c2:91:ee:d9:4c:59:c7:d3:5b:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Validity
Not Before: Jun 9 06:03:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4738509c50818cfe9f5ccc961728f15412e4fcfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:9e:65:67:56:88:b4:70:fd:a0:cd:55:22:91:
b9:7d:28:a7:cf:6b:e8:96:09:9c:c5:37:d3:8d:07:
dd:12:e7:01:48:40:02:c7:82:52:0b:aa:e0:b0:fc:
6d:ce:8b:9f:fe:86:54:71:de:14:29:7e:da:a2:65:
a8:d9:47:1d:75:18:71:87:39:58:d3:ca:69:17:20:
ea:81:25:5a:e2:63:12:0c:40:7a:cf:30:cb:fd:7b:
aa:c4:f2:a0:e8:12:f2:a5:5d:76:36:3d:b3:ff:e6:
94:3a:1c:4b:e7:95:4a:69:12:c3:82:df:ae:29:9a:
88:d9:9d:07:b2:1a:27:24:1d:ae:ce:4d:e1:0e:80:
f9:ce:33:b8:81:62:1c:e8:6a:ed:9f:8d:91:9a:4b:
bd:53:9f:24:50:96:b4:e7:3f:81:6b:15:4b:5d:6f:
60:9b:1c:de:21:6f:e8:02:c3:85:fa:95:62:d1:97:
f5:75:2e:79:e7:f4:88:fb:81:69:a1:f0:dd:34:b6:
e5:ef:11:ef:2f:5a:a8:2a:2d:bc:89:03:eb:57:48:
78:02:8d:7a:ea:3f:38:82:eb:df:71:7b:8c:f8:49:
ca:99:3b:4f:03:7b:f3:d5:0e:b7:fc:8b:b8:93:10:
c6:3f:80:b1:26:c9:ca:63:39:9a:d2:81:be:e5:78:
6f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:38:50:9C:50:81:8C:FE:9F:5C:CC:96:17:28:F1:54:12:E4:FC:FC
X509v3 Authority Key Identifier:
keyid:59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/RzhQnFCBjP6fXMyWFyjxVBLk_Pw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.180.122.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:d7:7b:07:ea:03:ae:bf:ba:c4:87:9d:8c:ce:f3:8e:cd:7f:
5d:bc:7a:ed:17:96:e8:1c:b3:9d:14:e2:2f:73:a0:68:d7:30:
26:82:00:40:c4:42:c1:60:e0:99:63:12:42:5f:94:6c:a1:4e:
f9:82:b6:04:57:12:37:5e:e8:d3:4f:d6:36:17:c9:cb:7f:1a:
e4:90:c9:4b:65:f5:87:b6:48:c6:25:ab:d7:f0:ce:15:6d:eb:
5e:5d:bf:78:fa:d9:f9:b8:8f:db:0e:0a:f9:a3:6a:b1:f7:e4:
90:bd:8d:f9:17:f0:92:94:c2:77:f0:64:6a:3b:df:7e:d6:f1:
c7:2a:8b:6f:60:94:45:97:a4:4d:50:8d:a3:fe:4c:d7:75:b5:
75:f6:43:bd:df:9b:51:5c:85:8d:96:ed:ae:22:65:05:28:d0:
2d:f8:f2:df:d0:fa:96:5e:4b:80:e5:65:05:24:ed:85:2f:81:
20:ad:18:05:6e:65:00:8b:74:2b:de:f7:1e:a6:98:be:9b:30:
19:a3:36:d3:dc:36:2e:dd:d7:93:d0:b7:46:27:7b:74:c8:be:
42:f2:83:6a:7e:1d:41:4e:0f:96:01:0c:35:6c:45:a6:2e:56:
3d:d2:5a:e3:bd:b3:91:0c:a4:a9:4f:5b:51:50:0b:eb:e6:82:
4b:72:8f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:50:35 2026 by rpki-client