Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/ZqlAfxfmoTwSe_znYdRElPEfMGw.roa
File: ZqlAfxfmoTwSe_znYdRElPEfMGw.roa (raw, json)
Hash identifier: 8nJy/1s1m1ev3AhPgrV4hrp7rzNzkf3REvATb3BI5pQ=
Subject key identifier: 66:A9:40:7F:17:E6:A1:3C:12:7B:FC:E7:61:D4:44:94:F1:1F:30:6C
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 019EC04F6F73F3F4006BEC2D09C67742B6BD
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/ZqlAfxfmoTwSe_znYdRElPEfMGw.roa
Signing time: Sat 13 Jun 2026 09:28:11 +0000
ROA not before: Sat 13 Jun 2026 09:28:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61209
IP address blocks: 194.225.82.0/23 maxlen: 24
194.225.84.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:4f:6f:73:f3:f4:00:6b:ec:2d:09:c6:77:42:b6:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Jun 13 09:28:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=66a9407f17e6a13c127bfce761d44494f11f306c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5c:1c:6f:d5:0f:4c:12:4a:9f:f5:fc:e4:e1:
38:61:a6:af:37:f4:ed:dc:03:63:19:e8:2f:9b:8c:
3d:a9:18:f6:d3:89:6f:b4:61:ef:fa:6b:2d:c7:dc:
c3:13:ca:2e:1c:42:cd:0b:0f:6a:2d:b6:7d:4d:25:
87:bd:20:48:ea:dc:ad:2d:fb:7e:62:04:d1:32:3d:
9e:7b:25:94:dd:be:31:3f:8a:dd:f8:63:fe:74:1c:
f6:77:6c:e5:67:2c:82:20:36:b8:4b:a4:03:91:03:
67:d0:75:af:12:3c:b7:29:6e:f9:c5:d7:06:74:9d:
2e:4e:89:ab:66:83:47:12:f0:86:05:cf:1f:7e:1f:
21:30:9b:d6:9b:2f:e9:62:1b:ed:2a:c3:16:00:a5:
fc:ab:3c:3d:45:9b:7e:89:d6:31:58:f1:74:35:07:
62:e5:09:2e:cc:d0:cb:7c:c8:6d:ea:b9:89:f3:b8:
2d:4e:2f:dd:a6:d4:f4:d1:55:8b:63:17:57:30:d5:
3b:7c:cf:bb:58:21:a3:79:7b:49:d1:2e:43:83:8c:
38:a3:14:48:02:7b:a0:52:eb:67:16:99:7a:7a:7f:
f9:fb:bd:4a:47:db:18:7e:ab:53:93:b1:8f:8e:3f:
17:80:5a:92:8f:ef:89:b0:fd:79:18:86:e2:f3:ae:
86:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A9:40:7F:17:E6:A1:3C:12:7B:FC:E7:61:D4:44:94:F1:1F:30:6C
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/ZqlAfxfmoTwSe_znYdRElPEfMGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.225.82.0-194.225.85.255
Signature Algorithm: sha256WithRSAEncryption
05:b6:1f:82:04:30:df:c2:f3:b9:a7:98:4a:69:27:0e:c0:a7:
a1:55:1e:cd:1a:c4:2e:9b:04:87:fb:9d:1a:76:16:5d:66:fc:
aa:30:ad:db:ad:65:f3:f0:7a:d5:fd:24:e3:2f:fe:a6:d3:dd:
52:e6:77:36:d5:d4:8b:bf:a8:4f:06:8f:1d:f0:24:e3:82:83:
04:1d:4c:72:75:bd:c2:ca:f0:54:a8:a2:58:52:15:8b:a0:49:
a4:a9:46:ac:df:63:84:fc:b7:f2:60:21:99:87:d6:5e:6a:01:
d7:20:06:46:f3:db:b3:17:f6:6c:ce:13:84:b9:bc:dd:c1:87:
72:2f:d5:57:8e:1b:7b:a2:0c:c1:9f:b2:31:93:c2:b0:e8:36:
3b:89:d2:f6:f5:82:e3:56:61:70:15:f5:fb:43:14:bd:fc:62:
84:34:a7:fd:b2:d6:ca:84:43:b0:96:dc:1f:64:5e:50:a7:c6:
c4:3a:68:a8:60:d5:8f:ee:da:e8:5c:01:d6:2a:9d:c7:d2:90:
77:be:ad:6d:13:9f:8e:70:88:67:05:42:8a:e5:35:99:08:8c:
c2:5b:9b:ad:3c:a3:3e:19:90:d1:d4:88:6f:79:ec:49:2a:2f:
a9:eb:66:9b:1e:44:80:64:4e:86:a8:dc:15:a8:5e:54:72:23:
cd:6e:97:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:39:03 2026 by rpki-client