Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/9e6996-2e89-4829-a37b-0734ffba8ca6/1/ZBxHkBcK2oMlGtDosjh9VGHmkqg.roa
File: ZBxHkBcK2oMlGtDosjh9VGHmkqg.roa (raw, json)
Hash identifier: gV8rVYlB+7jAAEqNCaLk0r1iqei/ZFmeHTI/zHMf8g4=
Subject key identifier: 64:1C:47:90:17:0A:DA:83:25:1A:D0:E8:B2:38:7D:54:61:E6:92:A8
Certificate issuer: /CN=d36483e667c9fce8f80f5aaa5ac6e916bc54e654
Certificate serial: 019B7D5D28C0BE0359BE002DAEA822583C1B
Authority key identifier: D3:64:83:E6:67:C9:FC:E8:F8:0F:5A:AA:5A:C6:E9:16:BC:54:E6:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/9e6996-2e89-4829-a37b-0734ffba8ca6/1/ZBxHkBcK2oMlGtDosjh9VGHmkqg.roa
Signing time: Fri 02 Jan 2026 06:20:15 +0000
ROA not before: Fri 02 Jan 2026 06:20:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51367
IP address blocks: 195.191.72.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/9e6996-2e89-4829-a37b-0734ffba8ca6/1/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/9e6996-2e89-4829-a37b-0734ffba8ca6/1/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5d:28:c0:be:03:59:be:00:2d:ae:a8:22:58:3c:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d36483e667c9fce8f80f5aaa5ac6e916bc54e654
Validity
Not Before: Jan 2 06:20:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=641c4790170ada83251ad0e8b2387d5461e692a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:30:8d:38:f3:f1:27:16:3f:ab:96:ed:4e:90:
e9:af:91:e9:9c:87:5d:e8:0c:cc:90:25:57:e9:68:
1b:85:15:fc:f1:6a:8b:8c:8b:77:ac:39:67:27:64:
43:99:ea:92:45:7c:6c:b1:52:3e:5f:6d:3f:ef:6a:
3c:ae:8b:41:dc:86:89:ae:33:85:f1:29:c4:b6:a1:
ab:2b:57:e9:26:38:c7:f9:7c:80:00:9d:ff:7a:33:
dc:ab:de:74:f6:e6:60:9d:9a:33:2a:ea:a4:31:31:
4e:e7:a8:01:fe:5d:0f:ef:86:3a:0c:85:58:28:d7:
ac:61:d4:3a:69:33:85:48:20:50:2f:7e:bd:d4:39:
1d:74:46:43:4a:41:37:aa:69:91:3e:e9:d2:fd:dc:
dd:db:6c:0c:1d:09:fc:52:53:d2:22:fb:a8:0a:28:
e9:97:f8:0f:32:b9:67:72:79:77:a9:49:69:43:3a:
96:a1:40:8f:99:33:4f:9b:19:82:28:ce:ef:3d:3e:
7a:ac:98:0d:30:60:13:38:92:16:b7:42:d2:64:6b:
af:0e:f2:79:7a:94:9f:03:7f:fe:ce:fe:2e:a8:83:
2f:fd:0f:b9:7f:ef:60:ca:80:04:9c:23:20:7d:9b:
4c:39:44:68:f4:58:e1:15:8d:67:fb:8e:37:20:8e:
e2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:1C:47:90:17:0A:DA:83:25:1A:D0:E8:B2:38:7D:54:61:E6:92:A8
X509v3 Authority Key Identifier:
keyid:D3:64:83:E6:67:C9:FC:E8:F8:0F:5A:AA:5A:C6:E9:16:BC:54:E6:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9e6996-2e89-4829-a37b-0734ffba8ca6/1/ZBxHkBcK2oMlGtDosjh9VGHmkqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9e6996-2e89-4829-a37b-0734ffba8ca6/1/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.72.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:aa:86:7c:15:90:89:f8:dd:49:3b:5d:74:7b:a5:f1:56:3c:
98:46:33:62:7e:81:f3:e2:f5:d6:7a:40:77:8f:c8:ba:dc:2c:
4d:44:3b:89:9c:9c:4f:0f:a5:ce:81:1b:bc:26:92:8a:c3:07:
4f:c7:4b:98:66:6c:12:60:20:71:09:af:d2:fb:ec:df:e4:e9:
e0:c6:8f:ae:a7:e2:ca:4c:f0:b2:62:32:8b:c3:01:61:c6:4a:
3f:d5:5c:00:88:80:60:82:cf:7b:19:e8:44:d4:4f:c9:87:20:
4e:21:3e:ea:22:78:0e:f9:13:8f:d7:37:d8:89:94:f9:80:5d:
d4:dd:38:b9:7c:cf:27:8a:bd:ab:e2:c3:58:28:29:fe:8d:ac:
cb:17:bf:3f:6b:47:59:be:a9:06:f2:4b:73:4c:52:78:20:97:
6f:b4:1b:ea:8e:51:d4:6c:03:28:9a:f9:5b:40:50:8f:94:c0:
cf:07:1a:6c:2c:12:65:24:fe:3e:19:a7:18:c4:bc:d6:ce:82:
4a:e4:66:38:5e:da:91:2e:aa:b4:30:2e:1e:eb:db:dc:94:b3:
26:54:b1:36:71:c1:33:f9:59:30:04:89:86:71:9d:7b:08:e8:
13:20:4c:bc:56:aa:76:6f:d3:20:4d:44:8c:a9:5f:53:1a:02:
8c:f5:8f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:00:25 2026 by rpki-client