Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/z20v7NWXTSlyldOmDp1NQUYj6l4.roa
File: z20v7NWXTSlyldOmDp1NQUYj6l4.roa (raw, json)
Hash identifier: G/tYDUVliHysO/VJFXRfx5UhmqtCQvAytpWjsJo8LB8=
Subject key identifier: CF:6D:2F:EC:D5:97:4D:29:72:95:D3:A6:0E:9D:4D:41:46:23:EA:5E
Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Certificate serial: 019EB81A69D43626B4E61DA5F3E219D2F456
Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/z20v7NWXTSlyldOmDp1NQUYj6l4.roa
Signing time: Thu 11 Jun 2026 19:13:19 +0000
ROA not before: Thu 11 Jun 2026 19:13:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33842
IP address blocks: 132.243.195.0/24 maxlen: 24
132.243.214.0/24 maxlen: 24
132.243.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:1a:69:d4:36:26:b4:e6:1d:a5:f3:e2:19:d2:f4:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Validity
Not Before: Jun 11 19:13:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf6d2fecd5974d297295d3a60e9d4d414623ea5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:aa:63:54:e4:ed:7c:e4:8a:0f:72:76:fb:75:
84:f1:7d:98:ab:e4:59:fa:bd:7c:16:a3:e0:bc:36:
d6:89:3c:02:6a:a2:48:72:d5:56:36:6a:7a:57:09:
93:a6:bf:1f:b5:2b:26:d4:2b:26:83:91:a5:16:7e:
4e:03:db:1e:82:cc:3d:3b:c9:a7:38:91:d1:21:ad:
10:f5:36:75:f3:23:ea:f3:bb:fe:f8:8e:8a:c4:27:
fb:db:da:03:b7:f3:bb:b8:6b:8d:a4:3a:eb:d3:7c:
0e:a8:6f:e2:a3:45:93:e8:7f:71:62:4f:5f:04:d5:
5e:4a:89:7c:92:6c:a2:ee:83:8f:dd:d5:af:2d:44:
80:50:80:d7:cb:59:b1:38:3c:ac:e1:74:fc:20:06:
7e:0c:41:5b:1d:d5:99:8d:df:91:3d:a2:3f:e1:0a:
bb:98:4e:a5:87:19:bc:23:9b:73:ac:4f:2e:6e:33:
27:e6:54:f9:28:af:f4:75:ad:e3:6c:f2:71:47:9e:
b6:55:6c:b0:8c:f6:d0:9a:68:72:57:23:53:91:f7:
2f:9c:df:94:a2:f8:13:f4:ad:34:95:0f:a6:80:2b:
e6:e3:fa:70:aa:84:97:83:fc:cc:49:57:3b:01:b3:
ed:30:15:c5:90:9d:5c:f8:4d:59:43:e9:22:7a:8c:
61:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:6D:2F:EC:D5:97:4D:29:72:95:D3:A6:0E:9D:4D:41:46:23:EA:5E
X509v3 Authority Key Identifier:
keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/z20v7NWXTSlyldOmDp1NQUYj6l4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.243.195.0/24
132.243.214.0/24
132.243.230.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:f2:3e:6c:6d:e8:4d:76:23:65:a9:d4:fa:ac:cd:7e:fd:06:
35:7f:be:f8:c4:52:4a:3f:91:e8:61:f6:14:76:4c:f0:52:56:
68:8f:8f:87:39:91:8a:ad:6c:34:e6:5f:e7:e3:02:f0:32:48:
8f:e7:ed:30:7f:69:c8:6d:d9:5b:01:6e:37:9d:b2:c6:6e:7d:
e1:a5:ab:a6:18:1a:e3:75:1e:f3:a6:cf:b7:58:26:e1:0e:1f:
37:a6:70:74:cc:4f:02:60:4a:70:e4:a1:cc:00:52:8b:92:ca:
b0:2f:e1:80:2b:d0:0a:1e:22:82:ee:4e:ed:b6:7f:c2:8a:b8:
21:a1:1b:21:72:47:a1:ef:cf:fe:fd:8c:42:08:66:6e:d9:a3:
51:f9:93:58:a0:b4:90:6f:04:91:45:a1:59:35:96:5c:77:5e:
56:a7:99:34:d4:2b:d4:4a:37:ac:33:4d:75:a8:80:74:a9:a4:
a5:3d:33:6c:bf:de:92:65:f8:49:a4:a7:21:d0:56:71:ae:b4:
7f:c5:fe:38:ff:ae:01:b3:48:61:7b:9a:ec:70:39:94:f1:4e:
c7:c5:fb:f9:e2:99:4c:36:d7:82:39:de:0c:be:bc:0d:5e:c5:
fb:47:65:76:83:d0:94:03:ae:d7:4f:3e:06:88:f1:65:d3:c5:
dc:00:6c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:43:52 2026 by rpki-client