Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/0zJNP_Zrhzmc5S2W0e83m-7IfBI.roa
File: 0zJNP_Zrhzmc5S2W0e83m-7IfBI.roa (raw, json)
Hash identifier: pWQnInZ9CqxHtxn5Tca4LgLQUf2//UKZQVaoYXa+1S4=
Subject key identifier: D3:32:4D:3F:F6:6B:87:39:9C:E5:2D:96:D1:EF:37:9B:EE:C8:7C:12
Certificate issuer: /CN=fbf8cd5d24a08b5a8afb57c9e604d193bc8cae20
Certificate serial: 019B7CECC54A7E9A72972F74AB4EE8C2D635
Authority key identifier: FB:F8:CD:5D:24:A0:8B:5A:8A:FB:57:C9:E6:04:D1:93:BC:8C:AE:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/0zJNP_Zrhzmc5S2W0e83m-7IfBI.roa
Signing time: Fri 02 Jan 2026 04:17:30 +0000
ROA not before: Fri 02 Jan 2026 04:17:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203316
IP address blocks: 185.138.212.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ec:c5:4a:7e:9a:72:97:2f:74:ab:4e:e8:c2:d6:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf8cd5d24a08b5a8afb57c9e604d193bc8cae20
Validity
Not Before: Jan 2 04:17:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d3324d3ff66b87399ce52d96d1ef379beec87c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:13:90:7a:0a:44:85:92:a5:d2:43:61:77:a7:
41:0a:aa:80:6e:7e:f4:cb:3c:b3:94:ae:2a:7e:66:
c6:12:95:b7:a6:22:42:be:82:d5:5c:d3:ae:2a:69:
0e:1f:fb:f9:8e:ca:1d:5d:75:44:fa:8a:ff:8b:b6:
46:78:ec:29:09:63:b0:1b:5c:4b:ca:25:53:58:fc:
44:1f:20:f5:f1:21:ec:a8:c3:ea:3f:ec:93:59:87:
31:cc:4f:60:c9:10:45:cc:ec:66:33:6c:de:09:3b:
e3:99:a9:00:8e:28:05:77:cb:cf:db:61:a5:3a:3f:
19:8d:f5:07:04:56:2e:a2:7e:8e:f3:d5:50:fc:96:
61:26:86:5e:6c:d6:3c:46:f3:a7:0f:7b:ce:84:60:
6f:cd:93:34:94:a0:36:02:0f:63:81:3b:d8:5a:42:
c8:16:50:00:69:ae:fd:4e:5e:b7:ff:3b:5a:e0:f8:
e1:05:f0:90:16:58:fa:da:71:62:06:8e:4e:92:62:
16:38:99:7c:f1:2a:36:91:20:44:e9:c3:c0:3d:31:
8b:8c:b3:34:28:20:b8:83:96:13:6c:5e:03:24:42:
40:cc:9a:b6:b4:87:e3:bc:ce:91:02:0a:92:da:f4:
33:61:b7:dd:74:88:02:a4:0c:aa:f2:66:0f:a2:f1:
24:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:32:4D:3F:F6:6B:87:39:9C:E5:2D:96:D1:EF:37:9B:EE:C8:7C:12
X509v3 Authority Key Identifier:
keyid:FB:F8:CD:5D:24:A0:8B:5A:8A:FB:57:C9:E6:04:D1:93:BC:8C:AE:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/0zJNP_Zrhzmc5S2W0e83m-7IfBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.212.0/23
Signature Algorithm: sha256WithRSAEncryption
86:a0:99:8d:5e:b6:36:9f:8a:50:5c:db:49:02:01:2c:73:b9:
33:20:8a:df:cd:89:bc:47:7e:b0:ca:0b:bf:fe:a1:61:23:79:
65:ce:68:62:70:f4:15:3e:4e:0c:c7:09:a4:cd:b8:ec:5d:93:
e2:47:5a:4f:24:47:96:8e:bb:1c:82:45:cf:67:13:04:38:2b:
92:86:e9:2a:d6:46:ae:25:76:f1:d7:fe:0e:a1:2d:1d:83:5c:
72:c6:a9:a1:b3:91:6e:31:ce:23:23:eb:ca:d5:3e:17:0c:8d:
bf:79:ce:1a:9a:45:88:64:20:fb:8e:f7:39:fe:17:f1:54:3c:
dc:2b:ce:c7:04:90:97:22:bb:bc:63:18:d1:f5:7d:17:2b:e9:
e8:52:09:7a:70:6c:68:7a:8a:5b:be:3e:4b:8f:b0:f4:fe:45:
0a:10:e8:c8:53:18:95:40:a0:52:76:96:8a:48:9b:a7:43:e0:
0b:e6:64:fb:d0:5b:42:83:a3:4c:0c:a1:26:74:38:7b:38:5f:
74:72:10:da:88:f4:2d:2f:cc:72:3c:c5:e9:d6:6e:26:8e:a5:
57:25:fc:bc:2d:98:12:25:39:77:60:2b:fd:db:55:5e:b2:86:
e9:13:0f:38:ef:87:b4:90:dc:2f:89:d0:59:a3:c1:1f:da:06:
9f:3c:b2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:54:23 2026 by rpki-client