Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/ZWBJxYdw0yqefP_6w5hTElTjn_w.roa
File: ZWBJxYdw0yqefP_6w5hTElTjn_w.roa (raw, json)
Hash identifier: ka3/3w04e1WBZfQiP+cb8ld/BzE1PNW9ESTV22owMjY=
Subject key identifier: 65:60:49:C5:87:70:D3:2A:9E:7C:FF:FA:C3:98:53:12:54:E3:9F:FC
Certificate issuer: /CN=15fedc1705576d97fe4ad20291de198473d8156f
Certificate serial: 019E3A0EE9EA34917921E4525B5B3FF889B1
Authority key identifier: 15:FE:DC:17:05:57:6D:97:FE:4A:D2:02:91:DE:19:84:73:D8:15:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/ZWBJxYdw0yqefP_6w5hTElTjn_w.roa
Signing time: Mon 18 May 2026 07:48:36 +0000
ROA not before: Mon 18 May 2026 07:48:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207992
IP address blocks: 194.9.172.0/23 maxlen: 23
194.9.172.0/24 maxlen: 24
194.9.173.0/24 maxlen: 24
2a04:ecc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3a:0e:e9:ea:34:91:79:21:e4:52:5b:5b:3f:f8:89:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15fedc1705576d97fe4ad20291de198473d8156f
Validity
Not Before: May 18 07:48:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=656049c58770d32a9e7cfffac398531254e39ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:29:9d:7d:b1:c0:f2:5b:e7:e4:b1:49:8e:f9:
f6:a3:02:a4:84:b4:84:f6:4f:5b:e9:17:0c:38:55:
23:e4:29:62:39:1f:12:7a:2b:76:1b:03:1c:a3:76:
9d:8f:2c:75:ef:f6:fd:94:d4:96:56:7f:6c:ce:65:
34:ce:2c:b0:bd:36:a0:fb:45:f5:7a:50:90:60:c1:
ec:4c:d6:55:77:c3:6c:a5:ed:19:99:88:65:c5:70:
2d:98:13:c9:47:78:de:7a:64:57:19:dd:b4:ad:8e:
f7:2b:0a:dd:e3:cb:23:b7:3b:36:56:d8:dc:e3:66:
53:19:5c:67:bf:26:53:e3:6a:af:c7:af:56:1b:4f:
72:6c:d0:90:c1:1f:c6:7e:78:79:f6:8a:67:88:75:
b9:3f:53:cd:74:02:c9:90:aa:0f:a7:23:69:af:6a:
c7:30:f2:74:ab:58:b8:8d:59:79:87:20:d6:b1:af:
36:7a:52:76:0d:cf:a8:45:a6:d7:f2:2c:76:81:9c:
e5:c5:7d:a9:5a:e5:41:68:df:9f:41:d4:94:77:32:
04:22:50:52:34:cd:46:b0:11:6a:c2:be:42:0b:46:
6d:51:f1:1b:0b:2c:69:68:87:c8:cd:53:c6:90:aa:
04:88:01:91:0f:f9:9d:b1:a0:9c:02:2f:0e:78:87:
7a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:60:49:C5:87:70:D3:2A:9E:7C:FF:FA:C3:98:53:12:54:E3:9F:FC
X509v3 Authority Key Identifier:
keyid:15:FE:DC:17:05:57:6D:97:FE:4A:D2:02:91:DE:19:84:73:D8:15:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/ZWBJxYdw0yqefP_6w5hTElTjn_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.9.172.0/23
IPv6:
2a04:ecc0::/29
Signature Algorithm: sha256WithRSAEncryption
b4:17:c0:ed:86:0b:e2:2b:05:60:f5:e0:15:60:7e:04:7c:0c:
e7:b3:cf:4a:a9:aa:38:e7:96:49:65:19:a6:d5:8f:8c:41:c7:
4b:19:30:a5:ec:ea:9e:3d:c6:19:56:46:b9:1a:3a:fa:f4:dc:
8f:e1:c4:bf:17:d4:56:6d:4f:07:1a:c0:65:4f:9e:28:95:52:
43:26:15:ba:21:be:22:b3:61:16:54:37:be:30:58:05:45:f7:
9f:69:14:85:e2:a2:02:85:f4:c1:4a:23:64:07:9b:8a:92:9e:
1d:f5:47:00:fe:8c:46:5c:36:b0:92:a2:0f:2e:de:3d:23:3c:
26:53:fc:72:ad:02:ce:26:b8:d3:6a:2a:e5:b8:4c:54:c5:7e:
bb:fc:f6:e7:67:8d:d9:6f:fe:ad:eb:52:4e:f5:e0:d9:36:93:
67:54:9d:2c:f0:98:cd:4e:4b:71:92:42:82:6f:6c:c1:66:1c:
16:82:27:e3:d1:f9:d4:10:92:c5:77:5b:c7:f2:5b:ae:32:52:
da:26:12:a0:de:e6:3e:c3:f5:65:cc:4a:b1:bf:3c:3b:02:db:
57:45:ed:4d:e6:7f:57:04:77:c5:6d:db:1d:95:70:18:78:5a:
a5:b1:22:44:d2:3f:8e:0e:d8:72:4d:3b:9a:b2:b8:34:08:b5:
ba:55:18:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:39:13 2026 by rpki-client