Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/z-M332yUcZzCTQnUx92JaIFm4lM.roa
File: z-M332yUcZzCTQnUx92JaIFm4lM.roa (raw, json)
Hash identifier: z6ZEntp831JJArGs2BedeJhcNl4wp+TXxoYayfvGoKo=
Subject key identifier: CF:E3:37:DF:6C:94:71:9C:C2:4D:09:D4:C7:DD:89:68:81:66:E2:53
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 019FD5D157AFAB72ECF405BB268006E42343
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/z-M332yUcZzCTQnUx92JaIFm4lM.roa
Signing time: Thu 06 Aug 2026 06:44:54 +0000
ROA not before: Thu 06 Aug 2026 06:44:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 150208
IP address blocks: 45.146.234.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 18:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d5:d1:57:af:ab:72:ec:f4:05:bb:26:80:06:e4:23:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Aug 6 06:44:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cfe337df6c94719cc24d09d4c7dd89688166e253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:89:13:a3:cf:f3:62:40:12:a9:18:fd:5a:c5:
a9:a8:ff:0a:3d:01:9b:2b:39:30:f8:82:0e:83:53:
4f:b4:36:bc:17:9a:d4:04:b9:26:3e:47:49:62:8f:
7a:fb:1c:3e:49:ce:6c:cc:16:aa:68:75:3c:b2:08:
50:78:62:75:ba:de:69:f1:08:51:4a:51:1f:c6:85:
3d:b0:d8:8f:87:4c:cb:08:ec:16:3c:ac:3b:e0:ae:
30:0e:94:4f:8d:09:5a:94:94:5d:73:00:fc:3a:e7:
7b:4e:06:dd:13:b8:a4:5c:ef:91:d3:7b:35:7d:f8:
f8:a0:97:e6:d6:21:b0:0c:a4:72:bf:3a:78:66:61:
de:6e:e2:3c:e6:64:f8:82:c2:fa:ed:a8:1e:37:57:
22:a7:27:f5:90:0d:15:71:be:53:c9:f9:59:c5:d7:
ce:94:e2:35:2d:ac:48:8d:1a:87:08:1e:b5:35:4f:
71:50:4d:8b:e8:32:e3:3c:d0:34:62:6e:ab:23:c0:
ae:a1:b7:ce:b4:b5:0c:1a:89:f4:a4:d5:8a:3c:20:
96:fb:34:29:9f:10:57:b7:75:00:82:86:d0:37:ed:
e7:97:8f:2d:c1:37:f5:88:67:41:95:59:9c:1c:4d:
bb:de:ff:60:d3:47:80:0c:01:f1:b6:40:fc:8b:43:
48:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E3:37:DF:6C:94:71:9C:C2:4D:09:D4:C7:DD:89:68:81:66:E2:53
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/z-M332yUcZzCTQnUx92JaIFm4lM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.234.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:36:54:8c:ac:ab:c7:07:5e:8c:7a:34:ea:55:43:2b:2c:9e:
48:d0:e4:f4:8a:67:5a:da:17:ba:88:20:fa:e3:14:0e:53:d6:
7b:09:74:f9:3a:f6:f0:b4:4b:ad:cc:91:3e:35:c1:47:0b:c1:
db:a9:e3:a2:e2:13:eb:64:ab:a1:8a:df:87:ac:ca:b3:5b:c5:
b7:5d:c8:cb:d0:22:9b:e8:97:0f:46:22:df:64:8f:bb:cf:e7:
cf:5d:5c:d6:4d:f6:7a:93:c6:9e:31:4f:bb:a1:85:7e:01:fd:
ae:51:6f:37:7e:23:fc:a7:44:01:ab:3b:b1:b5:52:ce:2f:21:
f3:51:80:db:f1:70:f2:f7:ad:ae:1b:00:97:1c:82:ec:b4:9c:
1e:30:b6:82:f7:3f:3d:f1:18:16:84:18:9c:3f:e3:65:8a:69:
d6:c9:a1:7b:dc:d4:78:11:dd:5e:98:34:0a:fb:df:9f:bf:8a:
f5:d6:81:66:12:ab:ab:65:57:47:27:1b:b3:78:cf:c1:55:18:
d0:75:97:48:de:df:71:fb:dc:b5:c7:01:a2:6b:49:d8:f9:16:
8e:99:78:4f:a8:3f:d5:4b:e0:95:dc:c0:31:05:25:29:37:56:
8f:e2:be:c8:42:44:3b:8a:b0:21:ed:00:4a:81:73:2e:8d:2a:
22:a6:7a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 03:12:11 2026 by rpki-client