Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/ZO8hGcRy7amf121yan39cg-eSWk.roa
File: ZO8hGcRy7amf121yan39cg-eSWk.roa (raw, json)
Hash identifier: vdNfRLIQ9ylC/X6ALP0i7U+UZWqlVxvH/Atorh5LKys=
Subject key identifier: 64:EF:21:19:C4:72:ED:A9:9F:D7:6D:72:6A:7D:FD:72:0F:9E:49:69
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 019F4245452E825761C8947BAEF42D4A66FC
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/ZO8hGcRy7amf121yan39cg-eSWk.roa
Signing time: Wed 08 Jul 2026 15:07:43 +0000
ROA not before: Wed 08 Jul 2026 15:07:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 133150
IP address blocks: 83.98.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:42:45:45:2e:82:57:61:c8:94:7b:ae:f4:2d:4a:66:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Jul 8 15:07:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=64ef2119c472eda99fd76d726a7dfd720f9e4969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5a:4d:6e:e4:3d:ff:9c:33:95:23:e6:b1:3d:
f8:8b:71:1c:17:d6:40:68:6a:fd:ff:2f:5c:cf:12:
ce:2b:b5:0a:05:ba:7e:de:b1:06:69:bc:b7:44:49:
99:c6:77:aa:7b:f7:d0:6a:a8:36:93:b7:17:71:62:
dd:64:ff:f5:b4:e2:0c:23:35:a9:38:75:19:3c:62:
84:a0:44:68:29:4b:98:34:91:d4:37:c8:59:4b:46:
7c:d6:9f:71:fe:15:b9:76:e8:e2:1e:5a:08:95:7f:
52:33:93:6d:93:cb:38:d7:64:87:ab:c8:45:7a:c1:
ac:ce:b8:71:d3:4c:0c:f1:20:87:33:7d:74:9e:bd:
e5:d6:99:5b:ad:f9:f1:a1:39:ac:1a:02:61:61:fe:
94:4f:df:a4:97:1e:ef:2b:70:36:3d:78:29:3e:7a:
4e:6d:65:b2:2f:76:c0:ba:a4:0f:a7:32:21:49:1d:
22:72:a5:b0:b7:af:3f:1a:f7:7b:ad:aa:4c:e4:6f:
9c:fb:fd:c9:c4:b7:7c:6b:0a:0f:e7:0f:e8:09:93:
1d:67:a0:6c:9a:2b:ab:73:63:0b:6f:43:be:3d:2d:
78:a6:a1:95:de:a8:e1:1c:3c:69:1d:dd:2c:39:cf:
a8:ad:12:cd:24:e3:f3:27:0d:86:80:d3:e3:b7:72:
da:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:EF:21:19:C4:72:ED:A9:9F:D7:6D:72:6A:7D:FD:72:0F:9E:49:69
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/ZO8hGcRy7amf121yan39cg-eSWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.98.195.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:89:bb:2f:49:3f:f3:c3:f9:e3:b3:b0:8d:0a:80:98:ff:c0:
71:93:44:74:39:58:ae:c9:7a:ae:69:dd:23:0e:b9:b1:b3:6c:
7b:49:0b:ca:af:47:72:a9:36:2e:52:45:f6:93:e1:1e:19:f8:
b3:7b:2c:f9:c6:71:b7:30:77:0e:54:30:69:fe:c7:08:b1:01:
db:73:70:55:de:63:e2:53:17:30:38:00:a0:65:b0:68:16:5e:
59:6a:a2:40:17:27:e9:ec:80:19:c7:59:43:c5:19:ce:01:d3:
fb:e5:b7:d3:75:2c:13:f5:89:3e:16:3e:54:19:01:9c:c9:a0:
65:20:95:2a:60:96:aa:84:0a:7e:ab:df:82:87:7c:a8:1a:14:
dd:d3:fa:6e:d9:89:95:d5:be:ee:67:eb:fd:8d:30:9d:f3:5e:
5e:0f:81:ba:fb:c8:42:2e:d5:02:0f:85:0b:a8:90:73:00:20:
d3:df:be:2c:55:f1:19:83:e7:1a:bc:c4:c9:d1:93:fc:8f:2e:
e1:9c:e9:e1:2e:62:12:53:5d:67:92:24:fd:4e:4f:0b:de:99:
a5:c8:86:7d:d6:49:c6:c0:2e:83:e7:97:31:af:cb:f0:1a:c8:
77:08:af:a2:9b:de:5e:75:a2:46:87:b8:86:33:9c:0d:8d:2f:
df:3c:d6:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 21:38:57 2026 by rpki-client