Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/zbZAEsxG5G8m9gJwIszyTEDYuI4.roa
File: zbZAEsxG5G8m9gJwIszyTEDYuI4.roa (raw, json)
Hash identifier: uLFQpNgUpBl8al0B9uyo07oc8QTTnVIF85IseoxOZeA=
Subject key identifier: CD:B6:40:12:CC:46:E4:6F:26:F6:02:70:22:CC:F2:4C:40:D8:B8:8E
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 01A12AD095D7346177CFFD10B353DD91BA0E
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/zbZAEsxG5G8m9gJwIszyTEDYuI4.roa
Signing time: Sun 11 Oct 2026 11:54:35 +0000
ROA not before: Sun 11 Oct 2026 11:54:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206119
IP address blocks: 185.169.182.0/24 maxlen: 24
185.174.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:d0:95:d7:34:61:77:cf:fd:10:b3:53:dd:91:ba:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Oct 11 11:54:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cdb64012cc46e46f26f6027022ccf24c40d8b88e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d2:36:a0:95:67:41:eb:12:56:9d:2f:05:bf:
92:47:5e:97:60:1d:78:44:8d:e2:93:b3:cb:23:5c:
a4:e5:f6:2b:3d:d1:12:97:85:e0:6a:8c:77:3d:2d:
68:35:33:80:e6:09:c0:69:89:c7:7d:0c:8f:16:49:
98:d1:fd:06:87:81:15:e2:dc:25:de:b4:e1:3b:40:
d3:25:9e:5b:55:ad:8c:a5:d5:f8:83:00:c5:ea:28:
6e:b1:4d:18:74:65:9c:a5:e3:56:15:64:60:8a:ad:
2b:c7:14:d7:f8:a9:e9:c1:75:65:08:dc:9a:69:f5:
e7:ec:bc:ad:0c:6a:f8:ca:b9:77:40:ff:a4:91:22:
21:81:81:d0:b2:b5:38:b4:9a:94:14:a0:2f:87:4a:
69:3d:2e:4a:68:c0:34:19:be:54:b3:cd:fb:ed:8a:
74:b7:54:ba:67:c2:03:23:e0:5b:24:f4:3f:2e:55:
8c:b4:78:58:c3:10:ac:91:98:87:c6:ac:4a:a3:92:
a3:e1:66:a6:12:b2:64:66:9d:d2:0a:1c:34:3f:c2:
2a:f0:2d:1e:80:aa:da:4b:8c:e9:d4:29:d2:8d:ea:
86:da:6f:24:e2:0f:06:c2:0d:ee:7b:89:c3:f9:44:
f7:7e:07:b4:7c:f1:7a:37:b5:c9:6d:14:e6:db:43:
fb:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B6:40:12:CC:46:E4:6F:26:F6:02:70:22:CC:F2:4C:40:D8:B8:8E
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/zbZAEsxG5G8m9gJwIszyTEDYuI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.182.0/24
185.174.21.0/24
Signature Algorithm: sha256WithRSAEncryption
13:f0:14:a9:7f:ef:b7:ef:9e:09:84:91:49:dd:40:42:d1:b9:
26:35:d3:37:ed:00:5b:91:f5:47:ca:82:e5:d8:3e:29:4f:40:
98:fe:c2:23:f4:23:9e:0e:cc:96:81:26:c0:27:47:2c:13:7d:
08:88:ca:e8:8b:07:52:1b:f7:98:26:6b:86:ce:b1:cd:0b:26:
ea:55:48:3e:8c:63:b0:a8:6f:b2:26:f1:04:91:2f:6d:85:5b:
c9:7f:9e:a6:e2:4b:8b:19:fb:0a:2b:02:b4:69:53:52:2c:48:
f2:2b:38:c2:f5:f3:6b:3e:f4:55:50:dd:05:25:7a:74:75:e1:
ac:2b:74:df:f6:71:16:23:07:8b:3d:32:23:6e:3d:c1:9e:35:
c8:a1:40:19:47:fa:cd:6c:80:54:42:82:be:61:f1:f9:1e:8e:
a2:9d:75:54:86:f5:9d:be:5c:07:38:b9:48:85:76:d2:94:2a:
71:91:3d:a7:7d:5e:b7:8a:6e:78:11:ca:56:fa:13:a4:cb:f4:
a8:d9:ea:49:3d:02:8b:f9:ad:39:ce:2a:54:90:bc:c6:d4:75:
5d:e9:26:4d:d6:fc:b4:16:3e:2d:12:8f:69:e3:32:7b:f1:2a:
20:bd:1f:be:5b:6b:bc:60:58:41:84:78:a0:06:eb:b5:80:8b:
90:bf:66:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:20:06 2026 by rpki-client