Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ZmU2dSStEk_zeXSWwEBaw5tcl0Q.roa
File: ZmU2dSStEk_zeXSWwEBaw5tcl0Q.roa (raw, json)
Hash identifier: Y1sWpxD5SobS8QA6Ihwhvzg6iQQ+93Pu+DpnTFJR+xM=
Subject key identifier: 66:65:36:75:24:AD:12:4F:F3:79:74:96:C0:40:5A:C3:9B:5C:97:44
Certificate issuer: /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Certificate serial: 019E64DCDDD37212ED3823683AD9C0CDA487
Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ZmU2dSStEk_zeXSWwEBaw5tcl0Q.roa
Signing time: Tue 26 May 2026 15:17:36 +0000
ROA not before: Tue 26 May 2026 15:17:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213114
IP address blocks: 185.69.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:64:dc:dd:d3:72:12:ed:38:23:68:3a:d9:c0:cd:a4:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Validity
Not Before: May 26 15:17:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6665367524ad124ff3797496c0405ac39b5c9744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6b:70:26:e6:6d:35:3d:4f:1e:1e:d7:6a:0d:
bf:f6:65:2d:ec:71:05:f6:9c:36:6b:ab:a3:45:9c:
cc:2d:32:56:f8:29:fb:22:19:5b:c7:6e:8f:bc:60:
50:76:a1:36:36:5c:8e:9b:4f:30:a2:b9:3c:ee:5a:
5c:e0:0a:29:c7:e3:a3:0f:d5:d7:8e:a5:47:6c:7c:
e3:f1:a0:0e:25:fb:ca:3d:6e:e3:56:9c:83:b7:a4:
67:4c:1e:7b:8f:d1:0e:8b:03:50:6c:cc:e4:0a:51:
9b:7f:d5:e9:29:d2:0a:07:38:17:a6:57:8a:fd:21:
55:03:d8:b7:56:5d:50:74:86:91:9d:24:36:c7:e8:
5a:9e:54:10:04:89:97:9c:28:9d:b3:dc:f5:b8:23:
87:4f:bf:43:75:09:1d:46:62:a8:c5:7f:16:e8:4a:
38:30:8e:73:bb:a9:ed:9d:e8:76:9e:0f:4c:0a:39:
b0:46:cd:2c:fc:8c:37:eb:97:8c:11:38:6a:f4:f3:
52:7d:01:af:23:95:33:33:0c:5d:26:c7:0a:50:c6:
d8:9d:dd:cf:7d:a6:21:9b:34:9e:7c:8a:06:81:35:
ff:62:70:df:64:11:21:1f:9c:87:fe:75:e0:8b:02:
bb:1d:75:6c:e9:ad:02:9a:ab:5f:9c:a4:95:0f:22:
fd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:65:36:75:24:AD:12:4F:F3:79:74:96:C0:40:5A:C3:9B:5C:97:44
X509v3 Authority Key Identifier:
keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ZmU2dSStEk_zeXSWwEBaw5tcl0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.222.0/24
Signature Algorithm: sha256WithRSAEncryption
70:6c:a0:fb:bb:62:52:69:3b:09:0c:a1:e5:8b:c0:79:44:b4:
d0:95:ae:b7:ac:76:27:8e:23:06:16:b2:38:b7:b8:c1:ce:13:
70:51:8b:63:81:f1:33:5a:fc:82:02:8d:47:4e:34:19:70:73:
27:e2:79:60:04:ab:7c:c6:5c:5b:0d:b2:10:64:4b:e0:98:65:
05:0e:f4:f4:cf:fc:3c:a1:29:84:ac:05:f9:fc:02:b5:7d:55:
d2:5c:c2:15:9b:6d:76:31:68:7c:1c:9c:ac:8a:fb:34:62:c8:
56:83:67:86:fb:bc:36:3a:7c:2c:e6:33:e0:2b:2f:62:5c:cb:
de:78:9d:6d:e8:93:26:f9:6c:e6:7a:dc:55:70:07:f9:21:62:
2f:a2:00:82:27:e3:0f:1d:48:f3:1e:c1:f3:45:bb:c6:75:f0:
7b:81:23:48:37:10:ba:e6:4d:bb:3a:30:88:41:aa:a0:64:0a:
d3:b9:85:cf:b3:10:02:05:5e:2e:5c:6c:ba:44:ad:11:c7:79:
d2:d0:5f:ad:f6:4e:d7:fa:73:c6:89:5f:f7:54:70:df:e7:0e:
a8:c5:72:10:31:72:b4:14:f1:fb:98:7d:0b:f7:df:c3:fb:9d:
65:23:23:2d:5c:19:6b:2d:16:6f:76:47:f5:4c:f2:4d:fa:54:
96:20:e2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:10:30 2026 by rpki-client