Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/e08a09-a128-4698-9893-189ec6b3c8bf/1/zfHSLICLEypkfmeLOEVEu0Y317o.roa
File: zfHSLICLEypkfmeLOEVEu0Y317o.roa (raw, json)
Hash identifier: NKXe9WsNPacFiZG3n5bjlZghwZ6J321wSnyphXdPsXQ=
Subject key identifier: CD:F1:D2:2C:80:8B:13:2A:64:7E:67:8B:38:45:44:BB:46:37:D7:BA
Certificate issuer: /CN=e8eb6228bb87492912ee32039e40e1d9214ad07f
Certificate serial: 01A1440AB3BCEC33827761C1D58200BE9F7F
Authority key identifier: E8:EB:62:28:BB:87:49:29:12:EE:32:03:9E:40:E1:D9:21:4A:D0:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6OtiKLuHSSkS7jIDnkDh2SFK0H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/e08a09-a128-4698-9893-189ec6b3c8bf/1/zfHSLICLEypkfmeLOEVEu0Y317o.roa
Signing time: Fri 16 Oct 2026 09:28:34 +0000
ROA not before: Fri 16 Oct 2026 09:28:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29119
IP address blocks: 185.252.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/e08a09-a128-4698-9893-189ec6b3c8bf/1/6OtiKLuHSSkS7jIDnkDh2SFK0H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/e08a09-a128-4698-9893-189ec6b3c8bf/1/6OtiKLuHSSkS7jIDnkDh2SFK0H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6OtiKLuHSSkS7jIDnkDh2SFK0H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:44:0a:b3:bc:ec:33:82:77:61:c1:d5:82:00:be:9f:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8eb6228bb87492912ee32039e40e1d9214ad07f
Validity
Not Before: Oct 16 09:28:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cdf1d22c808b132a647e678b384544bb4637d7ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:10:12:15:6f:bc:d2:69:4c:53:c7:7b:96:8a:
d1:b3:fc:fb:26:d3:70:a9:2e:e7:f6:04:1a:28:ea:
18:e2:55:a0:6f:89:60:b7:66:cf:01:bf:74:1b:88:
8a:36:0a:63:f7:d0:c7:35:4f:f5:d1:49:3d:1b:4a:
7a:6b:42:6a:9a:62:02:6a:fd:09:c4:c8:e5:59:5f:
19:11:ad:d6:51:53:21:5f:74:47:56:ad:f2:7c:52:
6b:21:11:8e:71:cd:3e:51:ea:10:0d:18:7e:b0:1c:
94:03:80:91:62:55:07:64:d3:9b:87:2c:25:c0:35:
b2:63:51:46:f9:ce:66:0b:b1:15:b8:56:ab:da:e6:
5f:75:93:16:59:26:70:5f:d8:9b:2c:00:c6:04:7f:
e1:c8:ef:4b:f9:3e:5e:98:1d:26:74:8f:27:d1:79:
da:b4:0b:8c:14:7e:b0:8b:d7:de:9e:8c:13:5b:0a:
ec:e1:52:85:2b:49:8b:d1:a8:38:af:86:4e:7b:71:
20:b5:41:d5:d2:05:fe:ff:18:de:06:a0:8f:63:23:
1d:24:91:09:44:54:dd:66:0d:3c:01:45:67:38:47:
ae:46:76:2e:7b:db:98:da:1d:ac:d0:65:e3:74:e8:
37:2e:ed:83:1c:1b:ba:b7:2f:9a:f9:37:41:30:dc:
09:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F1:D2:2C:80:8B:13:2A:64:7E:67:8B:38:45:44:BB:46:37:D7:BA
X509v3 Authority Key Identifier:
keyid:E8:EB:62:28:BB:87:49:29:12:EE:32:03:9E:40:E1:D9:21:4A:D0:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6OtiKLuHSSkS7jIDnkDh2SFK0H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e08a09-a128-4698-9893-189ec6b3c8bf/1/zfHSLICLEypkfmeLOEVEu0Y317o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e08a09-a128-4698-9893-189ec6b3c8bf/1/6OtiKLuHSSkS7jIDnkDh2SFK0H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.59.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:12:d8:5f:22:83:8f:60:e3:58:b7:ef:e8:78:63:8c:33:a8:
24:06:87:09:37:14:26:4b:e3:4b:cf:fb:f1:a6:dc:db:1e:c7:
b5:bb:7b:8b:82:c8:e4:5f:c6:93:ce:fc:12:e5:79:6a:25:a4:
c9:8f:44:10:b7:35:bc:db:b3:6a:6e:27:a3:db:53:d4:4f:25:
31:a6:bc:b9:fe:22:08:cd:b7:c5:a5:72:14:09:4f:ba:c7:23:
38:6d:e9:1b:21:b5:09:57:22:52:50:09:3c:a3:80:1d:25:48:
15:eb:f9:43:ad:51:a4:a7:bc:d5:06:78:69:b3:62:24:a7:21:
8b:b4:2b:f9:de:de:87:b7:54:70:c3:b7:6d:4b:0f:e6:2c:32:
da:23:07:f2:eb:77:51:21:0b:6f:e9:96:7f:f7:d9:3a:ac:41:
a4:d2:68:70:7f:71:d3:69:25:40:f8:8b:1b:84:51:39:ad:82:
14:45:5d:e2:8d:7f:e3:be:28:0d:f4:28:28:58:f1:5d:df:8e:
d0:f6:39:01:2a:c8:1c:82:29:ca:e8:13:c8:f1:df:34:6e:37:
f6:9b:a6:df:c7:b2:e6:95:fc:1c:dc:2b:38:ca:c0:ab:20:91:
be:60:d4:44:16:8d:dd:9e:cd:ee:e8:d5:b4:45:d6:c6:36:d3:
1a:76:90:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:20:03 2026 by rpki-client