Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/ZPKSvekrJYA0upvIat_-JC6BKfQ.roa
File: ZPKSvekrJYA0upvIat_-JC6BKfQ.roa (raw, json)
Hash identifier: PPL2NdzyPwz7LPgdAhUxcAJSYob0YB4sCtiY0icE9zo=
Subject key identifier: 64:F2:92:BD:E9:2B:25:80:34:BA:9B:C8:6A:DF:FE:24:2E:81:29:F4
Certificate issuer: /CN=ebaf0d20f98e3a20550c996d74292688f0d2279d
Certificate serial: 01A015CE77C07CE9073DA90B7B819808F5D7
Authority key identifier: EB:AF:0D:20:F9:8E:3A:20:55:0C:99:6D:74:29:26:88:F0:D2:27:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/ZPKSvekrJYA0upvIat_-JC6BKfQ.roa
Signing time: Tue 18 Aug 2026 16:57:27 +0000
ROA not before: Tue 18 Aug 2026 16:57:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 38136
IP address blocks: 189.24.118.0/23 maxlen: 24
189.24.120.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.mft
rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:15:ce:77:c0:7c:e9:07:3d:a9:0b:7b:81:98:08:f5:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebaf0d20f98e3a20550c996d74292688f0d2279d
Validity
Not Before: Aug 18 16:57:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=64f292bde92b258034ba9bc86adffe242e8129f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e4:e6:92:98:fa:ed:d3:06:bb:89:29:a5:2a:
a3:ca:d0:42:e1:1f:7d:25:39:01:93:49:d0:29:52:
f9:d9:46:24:fa:55:3e:10:d3:b7:6d:fb:32:b3:cd:
da:9e:f4:e5:a6:27:58:29:2a:3c:a7:7c:50:7e:d1:
30:90:73:98:a1:af:d2:8e:bb:15:9c:4d:99:52:b2:
c1:66:43:0e:21:d7:3d:6d:67:38:2c:6f:4d:2b:cb:
46:f2:84:c9:80:92:90:c1:96:2c:49:7d:ae:0d:a2:
4d:f2:ac:20:5e:25:9d:8c:33:50:24:1f:98:4a:be:
c6:f6:13:0b:9d:9d:ba:6f:ce:36:70:ab:32:25:5b:
5d:e2:f1:19:48:06:81:43:96:b4:09:21:4c:d2:98:
3c:3b:a0:18:68:fa:be:aa:ba:cd:a0:04:98:c1:50:
4b:3b:4c:a5:30:b0:3a:e9:1a:99:93:d5:c5:00:7b:
94:1c:75:33:0a:07:92:8d:91:e4:77:b0:ca:b5:db:
28:06:a1:ab:6e:69:3d:a1:e3:0c:e1:d2:bc:3e:41:
c8:b5:03:ac:bb:b2:d1:e9:04:b1:21:73:13:c3:e5:
bd:9d:9e:39:30:14:45:e7:40:56:87:57:e5:72:fe:
53:dd:72:62:22:60:e3:1c:38:c5:51:ba:58:b9:66:
c3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F2:92:BD:E9:2B:25:80:34:BA:9B:C8:6A:DF:FE:24:2E:81:29:F4
X509v3 Authority Key Identifier:
keyid:EB:AF:0D:20:F9:8E:3A:20:55:0C:99:6D:74:29:26:88:F0:D2:27:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/ZPKSvekrJYA0upvIat_-JC6BKfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.24.118.0-189.24.121.255
Signature Algorithm: sha256WithRSAEncryption
72:08:7b:5d:26:e5:57:0f:8f:0d:e2:de:33:e0:5f:1e:e6:7d:
73:87:12:28:09:85:1c:19:18:e3:2b:55:c1:b2:14:fa:22:3f:
19:ce:a0:1f:59:9a:b4:8b:cc:c3:e1:31:eb:7f:57:30:9d:97:
58:8d:80:83:47:9a:d4:0d:48:5e:c9:e2:f5:ef:00:63:01:1a:
cb:e9:29:ca:d5:2d:69:97:ac:74:6f:c8:71:d1:b3:a4:b1:ff:
1b:fe:9f:60:a1:45:5c:f7:9b:c9:39:c8:eb:f1:08:f0:a5:20:
e3:6b:25:0d:d1:b2:5b:cf:b1:7c:1d:77:69:0e:a2:99:b2:66:
74:13:9b:f0:ba:56:0f:2c:01:52:55:89:54:7e:8f:9d:d7:e4:
d4:78:f6:19:e0:f3:7f:46:dd:4c:fc:04:cd:3e:bb:87:f8:28:
4a:74:aa:60:e7:cf:f4:9b:30:e0:ae:a6:47:51:da:81:c5:3c:
99:a8:67:65:91:15:57:20:39:63:fe:1e:d2:ed:76:a0:ef:a3:
b7:0e:b2:77:cb:b0:75:99:d5:fb:1b:d0:0f:16:35:25:0f:44:
89:85:84:0f:ac:6f:b1:4d:68:3b:78:63:d0:91:7d:f8:83:b0:
6d:10:07:8e:9f:9b:93:eb:db:e7:ba:61:fb:b6:ca:fa:9a:a2:
1e:c1:13:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:33 2026 by rpki-client