Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Z8Lp1C8yx0k6I90UiSGN6jLLpA4.roa
File: Z8Lp1C8yx0k6I90UiSGN6jLLpA4.roa (raw, json)
Hash identifier: o8Iths+iUVkUxfZPKDBee/byejQaLmUCxY0jWWmW+5U=
Subject key identifier: 67:C2:E9:D4:2F:32:C7:49:3A:23:DD:14:89:21:8D:EA:32:CB:A4:0E
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019F7A08DF8AA04CED9707427745B770B2DC
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Z8Lp1C8yx0k6I90UiSGN6jLLpA4.roa
Signing time: Sun 19 Jul 2026 11:00:29 +0000
ROA not before: Sun 19 Jul 2026 11:00:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200051
IP address blocks: 5.230.201.0/24 maxlen: 24
89.106.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7a:08:df:8a:a0:4c:ed:97:07:42:77:45:b7:70:b2:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 19 11:00:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=67c2e9d42f32c7493a23dd1489218dea32cba40e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:76:23:2e:b4:e7:5d:b5:1c:7f:e2:4a:06:71:
a1:a5:bc:92:bb:74:4b:09:3a:dd:51:a6:fc:33:65:
a2:25:5c:b1:93:eb:55:fc:78:18:e8:b0:94:5e:3c:
fb:3d:94:e6:20:bb:5c:e4:51:37:67:22:12:21:64:
b1:d1:63:cc:f9:16:8d:a2:48:9e:79:72:f9:a8:23:
f1:14:a5:45:91:61:9c:9f:93:af:a4:2f:5c:1c:aa:
3f:a5:24:3d:be:c5:a8:ad:75:ea:04:9d:32:af:bb:
4b:76:3f:76:3e:69:2e:a2:85:ac:2e:5f:7a:a9:3c:
fa:ec:2d:e1:c5:44:90:d3:17:c5:f2:b2:f8:27:6c:
6a:4c:df:15:5d:7d:90:16:64:d4:d0:d7:f3:37:e7:
04:b7:3e:2c:4b:5e:a0:4f:df:b5:ba:4b:72:85:e1:
21:98:4d:3e:dc:59:76:c2:df:25:10:5a:e1:2d:72:
73:22:f1:62:e1:cd:d2:d1:1a:b2:d9:35:06:c8:6b:
a7:13:5a:91:d7:12:e5:a1:a8:b7:3f:f2:e7:28:66:
92:e4:85:34:d2:7d:11:b2:f4:fa:c4:cc:53:89:04:
bd:3c:2d:0c:19:c9:b7:8b:cb:37:59:09:9a:bc:dc:
00:17:92:64:e0:35:bc:89:22:bb:43:00:7c:9b:0c:
c9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C2:E9:D4:2F:32:C7:49:3A:23:DD:14:89:21:8D:EA:32:CB:A4:0E
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Z8Lp1C8yx0k6I90UiSGN6jLLpA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.230.201.0/24
89.106.83.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:02:6e:d5:6f:2c:5e:bb:d4:24:7e:64:08:de:e4:24:f7:42:
d4:12:fd:02:06:34:b7:96:9d:43:4f:9b:b9:2f:46:be:09:ff:
00:c8:92:0b:0a:82:08:77:b6:85:aa:c1:77:70:fa:45:85:f4:
f0:db:fd:43:b6:9b:14:b9:e4:2b:52:44:f7:1e:89:b7:0c:84:
76:37:56:1c:30:05:0d:e1:1b:8e:16:7b:39:09:c7:c0:3c:c1:
89:a1:8c:3a:66:3a:b5:4d:9e:9a:3d:22:83:79:e6:c9:77:79:
2c:93:cd:4e:9c:8b:9d:b1:71:10:4a:7f:9d:1d:ba:06:82:00:
15:dc:4d:38:05:f8:aa:ba:8c:87:66:ee:45:df:6e:97:68:43:
d6:55:82:dd:f9:97:98:f2:a0:c7:fb:0a:db:e6:2a:d7:b7:59:
ca:79:7f:71:56:7d:11:61:07:04:ba:fd:58:22:1f:4b:b8:a2:
0b:c2:2c:24:5d:2e:cd:80:ba:da:95:eb:e3:d4:55:5b:98:62:
3a:37:8f:28:93:c5:49:b1:7f:ae:d8:b4:80:d0:66:0a:0d:da:
11:74:04:ed:21:51:0a:75:b1:af:1e:c3:d7:a2:0d:04:5d:ec:
8c:22:06:02:7e:20:86:b8:5d:1d:0f:c4:28:41:6a:4d:60:62:
75:4e:86:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:53:17 2026 by rpki-client