Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a38100-c760-48b8-8b3f-2f7bf704f74a/1/_0PureThoZpu0wiYS4hLDThzBps.roa
File: _0PureThoZpu0wiYS4hLDThzBps.roa (raw, json)
Hash identifier: HCYhOx6I/C8fLwUF2WsIfU0pA0LbncGTBlMLqgJ/pLU=
Subject key identifier: FF:43:EE:AD:E4:E1:A1:9A:6E:D3:08:98:4B:88:4B:0D:38:73:06:9B
Certificate issuer: /CN=65e3e6c847c79bb05aac24d4178178d6f7c04485
Certificate serial: 019B797F2E410CC5FA6620D47D82676017DD
Authority key identifier: 65:E3:E6:C8:47:C7:9B:B0:5A:AC:24:D4:17:81:78:D6:F7:C0:44:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZePmyEfHm7BarCTUF4F41vfARIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a38100-c760-48b8-8b3f-2f7bf704f74a/1/_0PureThoZpu0wiYS4hLDThzBps.roa
Signing time: Thu 01 Jan 2026 12:18:56 +0000
ROA not before: Thu 01 Jan 2026 12:18:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41027
IP address blocks: 195.189.228.0/24 maxlen: 24
195.189.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/a38100-c760-48b8-8b3f-2f7bf704f74a/1/ZePmyEfHm7BarCTUF4F41vfARIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/a38100-c760-48b8-8b3f-2f7bf704f74a/1/ZePmyEfHm7BarCTUF4F41vfARIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZePmyEfHm7BarCTUF4F41vfARIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7f:2e:41:0c:c5:fa:66:20:d4:7d:82:67:60:17:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65e3e6c847c79bb05aac24d4178178d6f7c04485
Validity
Not Before: Jan 1 12:18:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ff43eeade4e1a19a6ed308984b884b0d3873069b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b4:1e:85:54:67:16:f2:d7:95:17:4d:eb:aa:
5d:ab:4e:63:20:6f:54:b7:cf:46:1e:d0:1d:cf:32:
b3:1d:8c:71:c7:b9:12:08:92:af:c6:3b:26:7e:aa:
9d:30:3d:53:e9:2c:5e:5c:42:cf:ca:e4:b8:1b:31:
d7:e5:c1:45:89:de:2c:8d:2c:a8:74:d5:79:9d:85:
56:25:da:6b:30:30:dc:5b:1b:2e:74:30:93:cb:2f:
3a:75:13:97:5f:a0:f4:e2:ca:3c:4c:0f:d8:d3:c1:
48:b8:62:9c:96:4c:60:c0:9c:2c:24:d7:8e:27:66:
33:27:99:36:01:ee:d1:fc:fc:a7:97:43:dc:3e:cd:
8f:8d:63:fd:11:48:54:9c:62:72:9e:46:08:fb:61:
07:f2:6a:5e:9e:4e:70:be:49:7c:03:5b:5f:64:64:
4c:f9:21:ce:78:73:1b:60:98:37:b8:3a:3e:b5:7d:
95:cf:92:c3:a3:93:ae:3a:d3:e1:39:62:28:f4:34:
10:8d:fb:95:97:22:1a:48:4c:9a:12:73:21:23:71:
d2:f5:ae:71:09:5b:50:48:89:66:db:96:2a:98:f3:
0b:ef:4e:8d:6a:df:79:00:46:b4:c4:3a:82:b6:6a:
39:15:e5:e5:ec:27:d1:6f:76:7f:ba:1c:dd:5b:be:
c7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:43:EE:AD:E4:E1:A1:9A:6E:D3:08:98:4B:88:4B:0D:38:73:06:9B
X509v3 Authority Key Identifier:
keyid:65:E3:E6:C8:47:C7:9B:B0:5A:AC:24:D4:17:81:78:D6:F7:C0:44:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZePmyEfHm7BarCTUF4F41vfARIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a38100-c760-48b8-8b3f-2f7bf704f74a/1/_0PureThoZpu0wiYS4hLDThzBps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a38100-c760-48b8-8b3f-2f7bf704f74a/1/ZePmyEfHm7BarCTUF4F41vfARIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.189.228.0/23
Signature Algorithm: sha256WithRSAEncryption
c0:7a:17:c3:0f:39:40:65:b7:85:48:a4:50:12:1c:00:31:8a:
f3:7c:55:33:34:d3:88:26:d0:1b:f9:86:36:1f:db:e8:7d:7d:
e3:cb:89:89:6b:ac:26:5d:7b:3e:ad:e8:52:11:41:32:61:bd:
5e:84:6b:c1:cf:5d:9b:27:09:5e:64:0c:a3:d2:ce:0b:31:a7:
90:4f:c1:f9:9e:b3:93:a0:1d:2f:a1:e1:b9:8f:b6:64:0b:c6:
4a:43:e4:40:b9:86:4a:17:b5:d8:76:9b:c8:e7:7c:9e:50:fa:
87:5d:a1:33:b1:b2:c2:2c:45:57:5f:55:a4:89:ca:4c:fa:8c:
2f:b3:6d:08:11:c5:69:57:d3:30:da:d0:f3:d5:ab:d7:36:2a:
f9:a6:b2:3b:29:af:fa:0b:4d:8f:95:83:30:5b:19:8b:82:a3:
48:6c:22:7d:c9:ab:ae:a2:e1:6d:82:6f:88:0d:a8:46:40:0f:
0e:0c:da:97:78:2d:07:40:cf:4e:71:24:c1:82:65:63:78:7b:
e7:cb:df:4b:06:60:c5:b0:1b:e4:ab:6a:16:8d:bf:aa:ef:d9:
75:90:2b:db:84:d4:77:d4:c8:30:fa:48:eb:3a:da:1b:ea:a1:
7a:76:ac:9a:22:38:9d:a1:90:8e:a7:67:73:9d:10:22:07:26:
2c:22:a3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:04:03 2026 by rpki-client