Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/ZdscDi7k3s-l8tQbTqMWAWHs5II.roa
File: ZdscDi7k3s-l8tQbTqMWAWHs5II.roa (raw, json)
Hash identifier: eeoRhg3sdIGOUoadbwJoyONU4sTmK4Oedx1/lFBfwT8=
Subject key identifier: 65:DB:1C:0E:2E:E4:DE:CF:A5:F2:D4:1B:4E:A3:16:01:61:EC:E4:82
Certificate issuer: /CN=08af091858bb99651764399c6565df7a0834dbad
Certificate serial: 01A019B5501EE7F7C32C0AA3E79A00C03746
Authority key identifier: 08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/ZdscDi7k3s-l8tQbTqMWAWHs5II.roa
Signing time: Wed 19 Aug 2026 11:08:27 +0000
ROA not before: Wed 19 Aug 2026 11:08:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50263
IP address blocks: 185.239.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft
rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:19:b5:50:1e:e7:f7:c3:2c:0a:a3:e7:9a:00:c0:37:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08af091858bb99651764399c6565df7a0834dbad
Validity
Not Before: Aug 19 11:08:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=65db1c0e2ee4decfa5f2d41b4ea3160161ece482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d2:23:e0:6a:d7:74:8e:10:bd:ce:61:be:61:
ff:d8:ac:e2:2f:39:3d:b3:98:43:38:be:f8:8f:6c:
9f:84:98:8a:17:ac:3a:96:20:c1:78:8e:59:79:28:
9c:81:cb:a8:1b:cd:06:34:54:38:39:f4:50:ba:ee:
d8:5a:b8:41:a4:ae:16:9c:2f:7f:a6:8c:45:52:0f:
3e:cf:23:f8:4a:aa:e9:95:c0:a6:ea:66:93:ec:5e:
00:4e:f0:f2:d6:ef:f0:f7:52:b4:fe:ab:31:c7:0c:
07:9a:43:8a:4f:24:6b:4f:16:7e:82:ee:64:08:62:
a2:c6:a4:32:5a:64:a7:dc:51:2d:a9:52:2e:1a:fa:
3a:25:21:0c:a6:e8:e0:62:5a:34:00:9f:4b:a8:83:
71:22:2a:91:d9:35:75:c9:68:10:1f:4a:48:50:88:
a2:3d:34:b6:b5:d5:45:a3:c8:e8:62:cb:f1:b5:89:
e7:ad:3b:4b:44:08:6e:6c:56:b9:a9:92:07:02:04:
82:ee:0b:53:cf:36:a9:ff:bc:da:a0:ee:65:d9:3a:
f5:a4:96:5c:52:6b:02:2f:99:72:6b:bc:8d:29:cd:
ba:06:0b:4d:a1:91:3b:58:c6:3c:9a:fb:4c:98:de:
4a:51:13:2e:b3:3f:8a:4f:aa:bc:52:b7:92:6c:83:
1e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:DB:1C:0E:2E:E4:DE:CF:A5:F2:D4:1B:4E:A3:16:01:61:EC:E4:82
X509v3 Authority Key Identifier:
keyid:08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/ZdscDi7k3s-l8tQbTqMWAWHs5II.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.27.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:ee:f4:8d:17:f3:9f:01:10:e7:9e:91:2b:87:34:71:02:ac:
e3:46:e8:fe:b1:80:e7:f0:52:59:06:ec:97:03:b4:db:a2:35:
38:45:3c:cc:77:09:ad:45:4f:25:03:9c:65:7b:67:a3:aa:93:
a6:6e:63:09:9c:e1:57:da:0d:e1:11:dd:65:60:dd:d7:d6:09:
ae:79:e5:e3:e9:f3:23:e3:13:ed:01:dd:a3:08:62:0f:7e:be:
22:51:01:23:c7:ec:0d:af:b8:2c:cf:37:2a:6c:8a:60:94:54:
71:de:ef:ee:de:26:5f:3f:29:d5:f2:7c:5f:06:36:b5:e2:d1:
b9:02:b2:64:1f:d1:92:e5:db:11:ed:cc:fe:51:d5:27:09:a0:
50:b7:c0:98:1e:70:a1:30:c1:f6:db:44:2a:54:d7:60:b6:fa:
02:f5:2b:41:81:f3:0d:5b:d2:ba:3a:f0:3e:57:a6:2d:57:38:
05:0b:76:63:9c:15:d7:f9:bc:2c:b9:7b:40:79:5e:38:93:a1:
8a:fc:59:9f:e2:c0:45:cc:05:00:57:05:30:2e:e5:3d:5f:14:
a8:b4:c7:82:da:50:d5:9e:29:80:42:f3:5f:ac:9f:a0:db:bf:
93:e5:81:8a:bd:f4:1c:f6:a7:73:8c:1a:62:c4:9f:00:58:7b:
6e:22:57:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:01:43 2026 by rpki-client