Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/9e0940-a47f-455f-bb8b-a829305cc1a1/1/zg5WlcC4NX4gmrZjUBDsq1SjIJY.roa
File: zg5WlcC4NX4gmrZjUBDsq1SjIJY.roa (raw, json)
Hash identifier: RBJVe3dHTZ47Sn+AGjBXy4sIQT9e7Zb35xuSCKcJGSU=
Subject key identifier: CE:0E:56:95:C0:B8:35:7E:20:9A:B6:63:50:10:EC:AB:54:A3:20:96
Certificate issuer: /CN=0d91dc30c59eab15305ec3c8be4e52cb4406a92b
Certificate serial: 019FA2930FF60B90876C32D74F194B5C8D0C
Authority key identifier: 0D:91:DC:30:C5:9E:AB:15:30:5E:C3:C8:BE:4E:52:CB:44:06:A9:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/9e0940-a47f-455f-bb8b-a829305cc1a1/1/zg5WlcC4NX4gmrZjUBDsq1SjIJY.roa
Signing time: Mon 27 Jul 2026 07:56:14 +0000
ROA not before: Mon 27 Jul 2026 07:56:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8368
IP address blocks: 185.32.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/9e0940-a47f-455f-bb8b-a829305cc1a1/1/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/9e0940-a47f-455f-bb8b-a829305cc1a1/1/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:93:0f:f6:0b:90:87:6c:32:d7:4f:19:4b:5c:8d:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d91dc30c59eab15305ec3c8be4e52cb4406a92b
Validity
Not Before: Jul 27 07:56:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ce0e5695c0b8357e209ab6635010ecab54a32096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7d:f0:3d:a3:57:ce:c5:3e:46:4b:e5:90:13:
f6:19:de:1a:87:09:26:bb:cd:79:48:50:ae:02:51:
f3:66:a3:d7:e9:d5:4a:e8:f3:be:6d:e2:5e:98:b9:
e6:15:38:a0:40:9e:7f:75:db:7a:0c:c4:4b:ce:97:
8c:ea:85:50:84:25:fc:a2:9e:69:fc:c5:b1:d1:b8:
17:b3:9e:4d:74:40:0a:5d:c9:7c:f4:1e:1e:d4:cb:
12:19:ea:9f:8c:46:e9:90:28:1d:5b:f3:6f:2d:ee:
2e:2e:0e:f0:3e:cb:c4:54:e7:20:17:5f:c4:3e:99:
b5:97:ef:e2:d5:72:39:ea:83:82:39:1f:33:22:5b:
d1:e1:88:ce:96:1d:ee:a0:f7:c9:81:ea:32:30:d4:
5a:da:05:86:96:90:46:65:96:9c:c9:40:8e:1b:17:
22:b4:2d:f8:5a:d2:4f:a8:ef:eb:f4:8f:5f:c9:5a:
ad:1f:e3:87:77:1b:61:22:63:59:c6:f3:20:e5:b1:
1c:57:7d:ff:6d:8f:ec:88:b6:be:fe:ef:79:29:84:
32:57:2d:69:65:d3:3d:7b:a7:e1:58:57:6d:20:86:
3b:31:0b:34:72:d4:e5:97:9d:13:a9:de:42:c4:c1:
98:1c:52:4e:a1:f5:1c:db:8c:62:81:7a:3f:6b:b9:
80:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:0E:56:95:C0:B8:35:7E:20:9A:B6:63:50:10:EC:AB:54:A3:20:96
X509v3 Authority Key Identifier:
keyid:0D:91:DC:30:C5:9E:AB:15:30:5E:C3:C8:BE:4E:52:CB:44:06:A9:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/9e0940-a47f-455f-bb8b-a829305cc1a1/1/zg5WlcC4NX4gmrZjUBDsq1SjIJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/9e0940-a47f-455f-bb8b-a829305cc1a1/1/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.32.171.0/24
Signature Algorithm: sha256WithRSAEncryption
51:13:4e:f6:a6:00:a5:78:a3:19:63:9f:04:fb:64:77:57:10:
fc:3d:b7:9d:44:4d:ce:79:05:dd:98:8c:2a:bf:89:5e:8f:84:
fc:e6:1c:ff:c6:78:69:78:f8:b6:68:0b:7c:99:e6:6a:3c:70:
95:5a:e0:ad:94:5e:20:4e:fa:a3:15:a0:cd:9f:bf:65:38:2e:
74:63:98:ef:85:69:91:bf:32:4c:7d:ea:c1:5e:cc:8f:40:9c:
3c:86:17:02:3d:8e:72:65:e3:a9:8f:7a:0b:e5:45:5e:ea:37:
fc:ad:29:4e:bb:59:b7:5e:03:ce:b5:28:17:56:89:c8:17:34:
7c:4b:0d:43:ad:23:79:8e:6f:51:4d:a9:f4:0b:95:4d:e1:9d:
70:22:1c:82:a5:06:37:0f:07:b5:67:28:e7:71:bb:59:e4:bc:
90:0e:c9:09:b3:c7:1b:85:b4:7b:c7:80:46:e9:7a:f9:1f:8e:
5e:74:65:30:cf:8a:ed:48:c0:c0:8b:31:a8:15:18:1f:20:f8:
19:86:fe:3a:f8:45:23:f6:11:3f:b9:0d:d4:d3:17:56:e5:89:
0e:d0:6b:5a:9c:70:0b:1a:ad:c2:13:f3:6f:12:ad:34:aa:0d:
cb:4e:a2:9a:14:4f:95:9d:95:0d:b6:7b:b0:4a:d8:9b:75:b7:
d5:d6:c3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:37:35 2026 by rpki-client