Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/ZwaHHkAxYbCALztUHzr9t910LSE.roa
File: ZwaHHkAxYbCALztUHzr9t910LSE.roa (raw, json)
Hash identifier: awAUeIPVKxbZycfV9eBB6aIDe26Y/5AYawVHPNK3iBw=
Subject key identifier: 67:06:87:1E:40:31:61:B0:80:2F:3B:54:1F:3A:FD:B7:DD:74:2D:21
Certificate issuer: /CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab
Certificate serial: 01A0AAC980CC0440A7B8E1762566F5D6D64F
Authority key identifier: 97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/ZwaHHkAxYbCALztUHzr9t910LSE.roa
Signing time: Wed 16 Sep 2026 15:15:27 +0000
ROA not before: Wed 16 Sep 2026 15:15:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4601
IP address blocks: 147.189.216.0/21 maxlen: 21
193.5.16.0/22 maxlen: 22
2a0d:3dc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:aa:c9:80:cc:04:40:a7:b8:e1:76:25:66:f5:d6:d6:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab
Validity
Not Before: Sep 16 15:15:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6706871e403161b0802f3b541f3afdb7dd742d21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7a:cb:c4:e0:b7:8e:f9:74:e7:46:4c:3c:d7:
5b:84:93:8a:78:da:10:92:29:90:1b:31:dc:78:77:
43:85:9f:5b:13:69:bb:c8:1a:f1:67:50:b2:1f:d9:
b3:20:f1:de:3e:b6:52:0d:76:d0:e2:02:2b:ea:47:
a8:98:be:39:03:4d:26:16:62:1d:51:9e:b7:9a:a2:
68:aa:46:15:88:b5:1b:77:99:cc:4e:93:82:4b:a4:
c3:61:e9:6f:a8:24:93:00:ee:07:e1:c5:38:bb:1f:
6f:05:2f:8d:e6:21:31:91:d1:2d:46:a6:e6:c6:ee:
62:16:e8:65:ff:9f:84:dc:63:99:d6:76:13:85:6f:
04:f3:0c:a4:4c:0d:77:f7:8c:4a:2d:5b:9d:a3:74:
4f:11:de:6f:6e:6e:d3:ff:34:59:36:15:73:19:00:
da:f7:e8:29:3e:75:69:fb:41:d6:fb:dc:33:ba:c3:
a2:e7:d7:2d:6d:af:3b:ec:de:0a:56:2f:16:91:3a:
60:73:d0:54:a2:8b:da:39:33:45:e6:69:0c:73:8b:
09:a8:8a:f3:30:23:d3:41:ac:f0:10:39:95:56:18:
cb:38:8f:1e:1c:d4:28:3b:68:5c:ab:87:26:47:9c:
ae:18:ed:f0:75:f2:8c:b9:da:81:d4:9a:dc:d4:46:
7b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:06:87:1E:40:31:61:B0:80:2F:3B:54:1F:3A:FD:B7:DD:74:2D:21
X509v3 Authority Key Identifier:
keyid:97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/ZwaHHkAxYbCALztUHzr9t910LSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.189.216.0/21
193.5.16.0/22
IPv6:
2a0d:3dc0::/29
Signature Algorithm: sha256WithRSAEncryption
23:79:69:72:a6:ea:2d:b3:fa:f6:a1:18:17:d8:3b:ee:68:f9:
38:32:74:a2:58:a1:73:a1:6c:bb:65:fd:8c:6a:18:f7:07:b2:
bd:b1:90:2c:f6:85:b3:53:29:21:29:65:dc:bc:34:8c:f2:ea:
a8:6e:f3:1c:35:2d:96:66:66:10:5b:18:0b:29:59:07:c7:9d:
8f:dc:48:9d:59:6f:94:df:4c:5c:39:12:5d:05:bc:d5:76:85:
f0:ee:c5:7e:f5:7a:b1:f0:80:d0:28:ab:ed:35:24:4f:7d:02:
05:4b:ec:28:6e:e9:02:c4:ca:c2:29:13:d9:93:17:31:7a:19:
a8:b5:58:11:bc:63:29:6f:d5:58:10:5e:e5:a5:61:10:dd:93:
41:aa:c1:6f:6f:c2:60:f2:86:44:7d:dc:05:e0:cc:39:83:2b:
93:22:d2:5d:eb:95:f8:b7:6e:2c:1d:2a:15:9c:2e:25:46:17:
19:c7:5f:c1:80:e1:7f:b6:39:10:76:7f:42:c8:70:8a:72:d8:
b4:e8:93:d3:6c:9f:8a:0e:c6:14:58:7a:d6:74:11:57:1b:b7:
59:26:ee:dd:ec:3a:9c:25:19:e1:ee:bc:36:37:7d:48:48:0f:
94:7a:d5:d4:e4:89:19:c9:86:9f:3c:ef:84:1f:d3:04:5f:31:
a4:a6:56:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:56:20 2026 by rpki-client