Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/zrPBo584QAwD8wD1UiOiivzG-lY.roa
File: zrPBo584QAwD8wD1UiOiivzG-lY.roa (raw, json)
Hash identifier: AG1/xkS8rTZ2sL8uSI3tuRloFXAbUoEivjF0J/Yra5A=
Subject key identifier: CE:B3:C1:A3:9F:38:40:0C:03:F3:00:F5:52:23:A2:8A:FC:C6:FA:56
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 01A07AE061633A9130A532E674B2D02D12EF
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/zrPBo584QAwD8wD1UiOiivzG-lY.roa
Signing time: Mon 07 Sep 2026 07:58:40 +0000
ROA not before: Mon 07 Sep 2026 07:58:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 194.152.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7a:e0:61:63:3a:91:30:a5:32:e6:74:b2:d0:2d:12:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Sep 7 07:58:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ceb3c1a39f38400c03f300f55223a28afcc6fa56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e1:bc:65:b0:54:8d:69:af:d4:c3:18:21:b9:
55:bf:50:72:b1:a7:91:a3:87:23:71:c0:6c:b4:38:
91:34:e8:a0:63:6e:16:15:10:46:05:5e:d1:53:8d:
f2:21:61:28:8c:b4:0c:84:eb:e5:ac:82:57:7b:51:
82:43:c4:6c:b6:e7:24:c9:09:a1:79:32:de:42:a7:
54:a0:fb:f0:3d:74:f8:9e:96:54:09:c9:0f:dc:4b:
b4:d1:18:62:7d:47:b0:5b:ff:be:f0:70:b8:d1:e1:
ff:c4:a2:c6:72:31:99:f2:9c:81:61:ad:4f:3f:bc:
66:a7:52:32:da:c6:61:ae:bf:4f:b1:20:ed:e8:15:
f4:e8:a8:fa:a2:12:a0:47:36:e1:79:fc:82:38:6f:
57:1c:c4:97:2a:07:99:1e:80:d0:23:21:b7:87:97:
83:e9:87:dd:dd:8c:4c:dc:16:cd:23:1b:17:46:64:
26:80:24:06:a8:2d:87:b6:02:72:f2:c7:ea:bf:d7:
f9:30:55:10:be:bb:3a:59:aa:93:9b:f7:62:27:3b:
f7:dc:5d:76:1a:e1:6a:a4:e8:95:dd:22:e5:60:00:
61:c8:0e:dd:4b:9e:6c:d2:bb:33:e7:a7:de:3a:f3:
9c:13:72:cd:02:bc:8f:9a:31:4e:5f:0b:e5:bc:99:
d2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B3:C1:A3:9F:38:40:0C:03:F3:00:F5:52:23:A2:8A:FC:C6:FA:56
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/zrPBo584QAwD8wD1UiOiivzG-lY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.152.143.0/24
Signature Algorithm: sha256WithRSAEncryption
12:f1:26:42:a9:88:18:22:9a:e0:8d:4d:0a:64:45:1d:66:bf:
e3:65:c0:48:dd:dd:56:fc:58:50:81:86:1e:29:6a:2d:ec:7c:
62:c9:1a:75:88:e8:9e:7e:e4:ed:1c:2c:b5:34:63:ab:53:06:
72:44:3b:17:41:32:6e:13:ed:4d:38:a5:6b:d8:9d:01:8c:1c:
a8:ba:1f:40:b6:d0:f4:42:5f:cd:5e:9a:1b:51:e2:8a:39:9d:
ad:35:c3:5c:6e:17:09:2b:d8:34:22:85:18:3e:fe:d6:75:33:
12:a3:e1:59:04:13:2d:56:a4:48:03:fe:2c:78:bd:11:bc:14:
c4:d6:b5:83:e6:66:61:fa:7f:07:91:5b:ba:b1:d1:7e:64:8e:
f9:03:8d:29:19:69:c4:1c:a8:29:e8:8e:ba:7f:f0:8e:bb:e1:
88:e1:81:79:2b:d8:2f:a3:f0:d7:da:ad:13:43:3d:b2:d0:78:
31:a8:42:eb:02:ee:40:ab:73:0f:93:42:c1:42:60:61:32:f0:
70:89:4d:cb:2b:f7:dd:8f:da:7c:93:97:52:36:91:ad:82:93:
c0:47:23:ba:59:60:a9:be:26:83:31:76:b5:aa:9b:cf:9e:a6:
8b:e8:dd:43:96:1a:fd:bb:bf:8c:ac:75:8f:68:37:63:80:dc:
c4:65:06:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:31:57 2026 by rpki-client