Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/zmZqPwQ0Zykn7YcRmk0kxyElFY4.roa
File: zmZqPwQ0Zykn7YcRmk0kxyElFY4.roa (raw, json)
Hash identifier: mOJjZK/GcrAQLTMbEbdMMC+hZFXv+N75sWz6K2gWARQ=
Subject key identifier: CE:66:6A:3F:04:34:67:29:27:ED:87:11:9A:4D:24:C7:21:25:15:8E
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 019FACDA49EAE1ECE1FBD0EDAD2DC107FF7A
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/zmZqPwQ0Zykn7YcRmk0kxyElFY4.roa
Signing time: Wed 29 Jul 2026 07:50:14 +0000
ROA not before: Wed 29 Jul 2026 07:50:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 89.191.120.0/22 maxlen: 22
91.123.64.0/22 maxlen: 22
91.123.76.0/22 maxlen: 22
159.148.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:da:49:ea:e1:ec:e1:fb:d0:ed:ad:2d:c1:07:ff:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jul 29 07:50:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ce666a3f0434672927ed87119a4d24c72125158e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a7:0d:50:b5:c3:64:44:bd:0f:bc:15:d7:e6:
99:a6:57:91:a2:56:7c:5b:78:1e:63:d5:52:6e:eb:
22:0a:1a:5a:79:a4:d0:b3:ed:cf:40:6d:6d:1c:46:
15:ed:09:b4:a7:f6:bc:19:e4:7a:1e:bb:0b:d8:e5:
0d:d3:58:fe:0a:c8:8f:26:03:40:e6:87:a7:ce:cd:
7d:5d:d5:91:b9:be:da:38:64:7b:bb:67:24:9e:1f:
c6:37:8d:8c:16:f4:54:77:e3:82:6d:38:bb:c1:12:
78:ab:70:df:93:7b:7a:10:48:df:21:98:17:b8:08:
47:7a:db:ad:cf:9a:ba:90:ce:ce:3b:a5:83:6d:c9:
f7:3c:ae:de:08:4d:b3:60:0a:c3:05:c4:e3:f4:0a:
9a:d6:41:cc:8b:7a:9a:b3:3d:a3:f4:cf:96:a4:c8:
4d:61:e7:c2:97:f9:2b:b1:19:a5:0d:b8:45:fa:2b:
d1:a2:83:9f:4f:eb:4d:bf:db:7b:f1:2c:69:4a:33:
30:b8:a4:54:cd:ad:64:df:6b:c5:02:86:a4:e4:f7:
a8:54:a9:3d:d7:97:1e:b6:86:46:5a:84:6c:98:81:
7c:c7:4e:39:30:c3:52:0a:c5:97:9d:50:20:fb:37:
c6:93:74:8d:4a:2c:56:34:eb:19:18:10:e1:30:77:
12:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:66:6A:3F:04:34:67:29:27:ED:87:11:9A:4D:24:C7:21:25:15:8E
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/zmZqPwQ0Zykn7YcRmk0kxyElFY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.191.120.0/22
91.123.64.0/22
91.123.76.0/22
159.148.131.0/24
Signature Algorithm: sha256WithRSAEncryption
97:57:3a:70:29:f4:a8:a4:20:c0:f6:c9:11:8f:64:43:0e:95:
ef:ed:67:6f:34:88:4c:3a:79:c9:26:86:d7:9d:60:4d:4e:ab:
d1:33:1a:fb:32:60:7c:96:ba:9a:ff:3e:0a:06:6d:18:80:e4:
3f:9d:d9:ed:71:c1:48:66:04:63:9e:56:9c:e5:a0:fb:32:2e:
92:f8:91:ec:4e:04:c2:71:0c:d1:84:49:2c:c0:32:dd:34:d7:
d4:d3:c6:2b:d9:9a:e3:e5:8d:d5:02:24:9c:2f:b4:6d:07:5b:
ca:2a:92:c8:65:df:35:a9:0b:d1:06:7a:ba:a6:3d:79:56:cb:
ad:b3:a2:bf:b6:69:b0:7d:f5:23:52:24:78:3b:2f:06:b6:71:
8d:20:aa:bf:89:30:1e:ca:3b:66:3a:1d:1e:d9:f1:4c:da:1d:
87:75:70:63:19:c1:eb:9d:2b:ba:e6:f4:21:2f:c9:05:2a:c4:
80:82:1f:40:b0:23:48:95:87:8e:2f:7c:da:74:e8:9f:66:a6:
dd:22:92:29:df:f9:6f:0b:e0:3f:82:65:43:80:79:b3:cd:7d:
01:62:28:0f:b7:10:08:00:54:eb:61:34:6c:a5:87:52:51:c6:
0a:56:8b:25:0d:08:8e:9a:2e:79:ee:6a:c3:0c:40:62:0d:80:
44:70:65:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 07:57:08 2026 by rpki-client