Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/zf2OWk_RcBoM6jajwmrPp0mhHEM.roa
File: zf2OWk_RcBoM6jajwmrPp0mhHEM.roa (raw, json)
Hash identifier: 7qEv+OmptmvjMEg/3MLv8VXpUtOOdS45r94EszitJCE=
Subject key identifier: CD:FD:8E:5A:4F:D1:70:1A:0C:EA:36:A3:C2:6A:CF:A7:49:A1:1C:43
Certificate issuer: /CN=af0f5a9bd2ad1e96865f00d08522b9aad3e91a4d
Certificate serial: 019B7D5B7664A0580EFD69D5CFD755564699
Authority key identifier: AF:0F:5A:9B:D2:AD:1E:96:86:5F:00:D0:85:22:B9:AA:D3:E9:1A:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/zf2OWk_RcBoM6jajwmrPp0mhHEM.roa
Signing time: Fri 02 Jan 2026 06:18:24 +0000
ROA not before: Fri 02 Jan 2026 06:18:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39528
IP address blocks: 195.60.224.0/24 maxlen: 24
195.60.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5b:76:64:a0:58:0e:fd:69:d5:cf:d7:55:56:46:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af0f5a9bd2ad1e96865f00d08522b9aad3e91a4d
Validity
Not Before: Jan 2 06:18:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cdfd8e5a4fd1701a0cea36a3c26acfa749a11c43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6a:96:3b:75:1b:df:2c:f0:68:f3:55:c4:49:
4a:9e:92:79:d7:6d:70:08:e2:fd:17:54:f2:83:58:
a3:b2:29:e6:c5:41:83:22:07:be:81:36:a6:a8:b1:
fa:9e:ef:ad:6e:db:65:80:b5:ba:8e:a6:cb:66:42:
b8:8d:75:06:30:ff:d9:ca:16:86:e5:79:6c:36:29:
60:04:c1:ba:ae:77:57:8c:d9:37:14:ea:12:3c:cf:
b6:77:ef:a3:3b:fd:03:57:c9:19:a6:de:b3:e3:ba:
9a:48:56:8e:c0:55:5a:1d:7d:87:42:51:eb:7e:57:
4a:8d:b3:a6:8d:7f:dc:0b:0e:9f:30:7e:a9:bd:db:
e6:32:72:6c:43:a3:f4:08:67:0d:83:54:51:57:4f:
80:82:47:01:68:bf:7b:33:b8:7b:f4:28:95:ef:d9:
35:85:5d:b4:97:f5:2b:76:8c:6f:9e:5f:24:cd:0b:
19:2e:95:9e:3a:06:aa:6e:19:49:ab:ef:37:c6:d0:
cb:71:cb:7c:f0:cc:a5:2e:b5:86:7f:c6:8c:e1:80:
75:78:cc:e8:0d:48:7a:d3:2f:8d:85:51:e1:6a:cd:
61:37:c6:0a:4d:69:32:6b:33:0a:ea:71:f4:ae:9a:
9c:f5:13:28:ad:6b:d7:2d:b7:d8:fb:ad:4b:31:bb:
6e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:FD:8E:5A:4F:D1:70:1A:0C:EA:36:A3:C2:6A:CF:A7:49:A1:1C:43
X509v3 Authority Key Identifier:
keyid:AF:0F:5A:9B:D2:AD:1E:96:86:5F:00:D0:85:22:B9:AA:D3:E9:1A:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/zf2OWk_RcBoM6jajwmrPp0mhHEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.60.224.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:04:a7:a5:82:65:38:5b:ea:45:34:41:66:42:9c:5b:dd:da:
08:a1:c0:41:45:68:9e:65:72:4a:76:d4:68:be:12:b0:74:dc:
46:10:4f:c5:e9:4e:0b:58:36:9e:5c:ce:e1:29:e6:98:9f:b5:
55:72:e5:72:e1:d7:5f:11:9c:8d:0c:1b:07:b5:41:f9:fa:16:
7c:2b:3d:4e:6f:65:c8:ae:e9:3b:c3:55:54:6b:58:15:52:f2:
74:5a:57:65:98:cd:10:5e:45:f2:b1:d1:b2:71:ac:ee:1c:4a:
0f:8f:49:47:ae:44:74:f0:0f:05:e3:6e:66:c2:ed:0a:16:f0:
0d:47:e2:c9:58:c6:24:e7:5a:c2:cd:76:09:dd:84:33:c4:2b:
53:73:9e:52:78:82:e3:a9:8b:77:d1:9b:99:15:86:98:2b:57:
d2:d5:b0:69:4c:96:f9:1e:94:05:f2:b7:e4:14:a8:d5:d2:15:
10:d1:f5:a5:c0:74:63:2d:42:48:8b:e2:d0:7c:de:c5:e0:aa:
bb:34:64:f3:b7:90:be:02:23:46:43:c5:db:64:81:36:67:f5:
d5:3f:cc:f6:aa:22:3e:42:f3:3f:c2:e8:e6:d1:78:c4:7b:a4:
cb:35:cb:01:c2:84:15:74:4b:90:fb:a5:5e:13:af:6b:7e:a9:
44:47:48:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:52:15 2026 by rpki-client