Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/CZGpkJFWmIonXqGhWOPrvFBhGY4.roa
File: CZGpkJFWmIonXqGhWOPrvFBhGY4.roa (raw, json)
Hash identifier: lclONJFUlbcxYkNDflI9xQxEY/a8OUrrV1EbI+4Fe1U=
Subject key identifier: 09:91:A9:90:91:56:98:8A:27:5E:A1:A1:58:E3:EB:BC:50:61:19:8E
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01A0A01813D9B4B8AA68A4FB11B877186203
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/CZGpkJFWmIonXqGhWOPrvFBhGY4.roa
Signing time: Mon 14 Sep 2026 13:25:27 +0000
ROA not before: Mon 14 Sep 2026 13:25:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60048
IP address blocks: 45.136.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a0:18:13:d9:b4:b8:aa:68:a4:fb:11:b8:77:18:62:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Sep 14 13:25:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0991a9909156988a275ea1a158e3ebbc5061198e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7e:9a:75:28:5d:e9:d5:76:93:4f:56:20:3a:
aa:54:a4:3c:47:ec:e3:32:08:af:77:54:74:76:11:
63:0c:ce:26:18:32:c5:a0:88:95:39:b5:a6:08:5e:
b8:8b:5e:27:34:66:e2:83:d7:b6:08:6e:c5:a2:d7:
eb:1a:a6:94:20:39:05:45:40:5f:e0:ff:36:2e:76:
83:f2:66:fd:70:4a:78:40:06:d9:b2:d3:4e:9e:7c:
7f:96:f8:18:75:6d:4b:1c:c0:10:f6:4f:e3:b1:7e:
98:9b:e1:38:45:3b:46:05:f6:0b:86:ef:a2:25:08:
e8:af:ff:c0:a3:59:80:3c:3b:d0:ed:94:cd:8f:62:
26:8e:c3:8b:f2:ae:df:ab:a4:8c:4e:96:00:3b:d3:
e8:87:69:d9:46:22:7e:5e:67:69:5c:fb:3b:3f:17:
9d:65:99:41:24:ba:6e:7b:56:8d:49:06:6c:35:47:
f1:6c:80:ec:63:1e:92:33:3c:c2:cb:90:2e:00:51:
42:05:2b:e8:02:3a:06:f3:48:02:c6:9d:b2:93:b6:
5c:02:89:f9:70:55:7e:dc:65:8c:6f:94:56:18:63:
4e:ba:9d:10:57:bc:f5:f4:c9:14:56:59:b7:9f:d7:
4b:0b:e4:4c:43:d5:b4:14:f6:fb:8e:13:54:d5:3e:
5f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:91:A9:90:91:56:98:8A:27:5E:A1:A1:58:E3:EB:BC:50:61:19:8E
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/CZGpkJFWmIonXqGhWOPrvFBhGY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.101.0/24
Signature Algorithm: sha256WithRSAEncryption
91:ff:1e:10:7f:e8:7c:9c:8a:20:21:64:cf:e2:53:e1:c2:b9:
98:7f:ad:73:32:cc:54:4b:ff:d8:aa:72:b0:b7:37:b8:94:02:
06:92:d5:85:cc:b6:91:00:04:fb:08:e5:c9:6e:12:4a:88:de:
32:fb:ba:02:4b:d4:c4:29:0a:22:71:bb:54:1f:3b:a7:81:f5:
88:fc:00:c6:7b:69:ce:04:ad:c0:50:16:80:c5:83:54:2e:65:
09:c8:e8:a0:e0:d2:5e:ce:e6:8e:56:05:c4:68:6b:92:ce:12:
1f:30:60:d6:0d:50:2b:14:68:38:4a:90:e6:2d:dc:52:66:1c:
49:b1:c6:89:67:9c:88:42:0f:ab:0a:ed:56:bc:fe:d0:e1:51:
e9:cc:b0:eb:64:54:8e:45:51:de:d4:03:cc:68:80:c9:3d:eb:
1a:e8:36:b8:0d:f6:74:36:2d:03:29:f0:2d:53:d1:87:7d:6c:
ed:d6:ee:e0:54:69:93:e3:2c:52:07:69:23:dc:71:c0:58:c8:
84:df:b4:b1:44:7f:4c:21:90:78:45:28:1d:a4:e6:61:8b:78:
6d:6d:aa:f9:03:dd:5e:d5:85:b9:69:7f:21:61:ce:0b:65:3d:
f1:0c:97:a9:f6:fe:6f:10:35:42:70:c5:b8:c6:35:07:e1:99:
8c:37:68:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:57:24 2026 by rpki-client