Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/Z2qUq9iDH7trMAY87S3RimoiD-M.roa
File: Z2qUq9iDH7trMAY87S3RimoiD-M.roa (raw, json)
Hash identifier: qlcRSF7ThjNhcMlIuDEZkMUUPiN2o2IhC0WvpTUp6HY=
Subject key identifier: 67:6A:94:AB:D8:83:1F:BB:6B:30:06:3C:ED:2D:D1:8A:6A:22:0F:E3
Certificate issuer: /CN=2b78cdca1616c3c6b5f191fc33a934789b12c069
Certificate serial: 01A159437007FF84ACE176ADEBF04B5E0F80
Authority key identifier: 2B:78:CD:CA:16:16:C3:C6:B5:F1:91:FC:33:A9:34:78:9B:12:C0:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/Z2qUq9iDH7trMAY87S3RimoiD-M.roa
Signing time: Tue 20 Oct 2026 12:22:34 +0000
ROA not before: Tue 20 Oct 2026 12:22:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202
IP address blocks: 185.151.64.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:43:70:07:ff:84:ac:e1:76:ad:eb:f0:4b:5e:0f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b78cdca1616c3c6b5f191fc33a934789b12c069
Validity
Not Before: Oct 20 12:22:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=676a94abd8831fbb6b30063ced2dd18a6a220fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:35:af:a1:06:96:ce:9c:fa:20:5c:20:5e:60:
08:df:b5:17:89:cf:9c:98:2a:c7:2e:62:29:82:96:
12:40:0d:dc:4d:69:c5:f1:5c:8c:2c:c3:ac:20:89:
f9:1a:93:e1:15:b7:19:01:59:c9:f7:99:4f:5c:98:
6e:d3:22:02:ef:3e:f3:71:55:6c:3d:92:86:16:a3:
6d:7d:d7:14:75:65:eb:f6:0d:a7:da:f7:63:b9:ed:
04:de:95:c7:44:1f:b7:8e:75:dc:18:80:42:07:e5:
80:d1:82:0a:f2:77:88:3e:ee:fa:8d:8a:11:45:db:
8c:17:d0:34:d4:3c:23:8f:30:72:bc:4e:3b:76:e0:
df:b2:aa:8a:25:f4:f4:e8:42:37:e1:ec:e2:77:a9:
76:bb:44:05:6b:26:6b:20:ba:74:d1:7d:eb:87:ec:
31:48:7b:b3:6e:d2:6d:f9:3e:62:63:fe:04:4d:91:
88:4a:a0:57:65:40:96:ad:41:1a:4a:9a:30:99:53:
d7:da:b4:52:39:d8:ae:2a:e7:fb:45:1c:3b:ec:57:
f6:c9:f0:1d:72:79:50:9f:06:a5:5d:e7:48:1a:dd:
59:fa:a8:12:e5:73:d9:21:22:65:35:ea:af:36:e3:
8f:bf:fb:e8:5a:b6:df:5d:e6:52:a2:c5:3d:75:10:
a9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:6A:94:AB:D8:83:1F:BB:6B:30:06:3C:ED:2D:D1:8A:6A:22:0F:E3
X509v3 Authority Key Identifier:
keyid:2B:78:CD:CA:16:16:C3:C6:B5:F1:91:FC:33:A9:34:78:9B:12:C0:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/Z2qUq9iDH7trMAY87S3RimoiD-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.151.64.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:37:68:75:11:d9:f5:86:bf:18:ca:49:a1:1d:1c:68:be:e5:
64:50:82:69:5a:06:c1:c3:8d:0e:59:d9:d4:79:db:05:25:dc:
7b:7d:0c:b9:92:bf:e3:8d:b4:ee:89:fe:0d:a5:bf:b8:b8:5d:
0d:bc:da:a1:d9:34:be:84:68:bf:47:90:a3:86:b9:db:17:3f:
fd:68:7c:0a:20:35:7d:a2:e4:8a:1f:2e:8b:3e:b9:a4:e5:9f:
9b:fa:d1:21:e8:c5:29:30:c5:6f:5e:de:99:61:4e:36:b8:e2:
d8:83:82:9e:a1:bf:c0:6b:7c:32:a9:4b:9c:33:1c:31:58:1c:
1f:a3:f8:ab:13:05:eb:34:d2:88:ca:2d:38:19:7d:b2:0c:ac:
b1:10:d8:4d:38:ad:1c:57:1a:75:84:79:32:95:e1:19:4d:f1:
6b:a6:1e:c4:63:a8:0b:85:53:97:95:82:d4:d2:88:b1:08:83:
cf:4b:36:9b:75:db:36:8a:af:b7:b2:30:b9:78:12:9d:8d:6e:
13:ac:1a:42:59:48:0e:05:ab:05:48:d7:9e:21:6f:72:5f:af:
c4:c8:cb:6c:c6:5f:7c:a7:31:25:29:cf:20:28:e3:88:d3:ba:
bd:e8:1c:3d:62:62:e3:64:1f:05:b8:fc:f6:59:4f:58:ae:5b:
c7:75:9f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 12:15:20 2026 by rpki-client