Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/0zac0IBvUY6emSpFGv20_HW07jo.roa
File: 0zac0IBvUY6emSpFGv20_HW07jo.roa (raw, json)
Hash identifier: AS0yYCStCJ2SaiDnOltN2a/eMi4bYmVgW2o4ihUshxY=
Subject key identifier: D3:36:9C:D0:80:6F:51:8E:9E:99:2A:45:1A:FD:B4:FC:75:B4:EE:3A
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01A0E6A42DFF1CB6F7A0785AB1DF2345AB5C
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/0zac0IBvUY6emSpFGv20_HW07jo.roa
Signing time: Mon 28 Sep 2026 06:11:54 +0000
ROA not before: Mon 28 Sep 2026 06:11:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402857
IP address blocks: 194.233.116.0/24 maxlen: 24
194.233.252.0/24 maxlen: 24
194.233.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 11:18:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:a4:2d:ff:1c:b6:f7:a0:78:5a:b1:df:23:45:ab:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Sep 28 06:11:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d3369cd0806f518e9e992a451afdb4fc75b4ee3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9e:45:65:44:90:8a:ad:e5:0a:59:66:39:c6:
58:54:1c:d1:12:27:36:43:b3:95:b2:ff:91:c8:15:
98:0d:39:53:60:4b:ec:71:d2:0c:5a:9b:d7:71:c8:
32:24:80:64:03:a6:91:b9:0b:36:9c:c3:8c:1d:b5:
76:61:3e:6f:29:39:80:26:ab:4b:cb:70:69:c4:36:
b7:35:e0:8e:87:c2:d0:b7:2b:be:91:f4:3e:94:cf:
d8:f1:7e:a0:8c:7f:bc:b0:21:48:e4:99:b2:69:01:
91:6c:52:9e:dd:93:af:13:8e:74:0b:4a:c5:dc:64:
f4:8e:f2:4a:42:e6:ef:06:91:0c:89:bf:21:0b:d5:
b5:43:53:c0:67:58:c4:02:c5:56:a2:e0:eb:8a:ee:
01:53:69:fc:ee:a2:c1:5d:8e:15:7f:bc:7c:14:0a:
18:89:78:da:10:76:b1:71:fc:df:fa:19:54:fd:36:
d2:12:2d:31:b4:3d:5f:4e:96:d1:fb:9b:06:68:ea:
2f:7d:82:0f:99:24:b6:87:b5:e3:59:7d:25:0f:21:
60:90:56:ba:b9:7e:eb:ab:f1:8c:51:a3:d5:94:5c:
00:5c:d1:f2:2f:1b:8f:68:78:c2:73:5a:d9:1e:1e:
c6:90:ab:06:2b:be:d0:b7:a7:f8:75:25:9d:5b:83:
43:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:36:9C:D0:80:6F:51:8E:9E:99:2A:45:1A:FD:B4:FC:75:B4:EE:3A
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/0zac0IBvUY6emSpFGv20_HW07jo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.233.116.0/24
194.233.252.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:f1:b6:c1:ab:57:8e:8d:b3:49:f3:1c:2f:b5:a4:fc:29:96:
ec:e4:4e:e7:a2:48:10:f7:3b:5b:2e:f4:ab:1d:bb:e0:05:fe:
26:f0:a4:58:8b:f8:00:4f:13:f1:05:b5:4d:f1:37:a5:8c:b1:
24:b4:47:9d:fa:13:e6:bc:4a:5e:a9:59:29:34:88:37:47:f3:
90:21:be:d8:18:c4:38:85:10:58:8c:a3:2d:a3:92:5a:08:01:
3c:bd:b1:46:ee:c2:ff:e2:6b:8a:dd:a8:14:6a:42:58:5e:ae:
da:17:e9:c6:4f:41:0f:8d:50:a2:7f:1e:c3:b8:13:a9:72:e6:
03:08:82:9a:0e:f3:36:a6:c1:2d:69:e4:3d:50:57:f4:65:0e:
f0:77:2a:5f:cc:b5:17:74:71:0c:07:55:70:a8:0c:37:ae:b2:
bc:7a:9c:b0:d9:84:36:55:be:4e:81:66:29:84:de:bc:e8:c8:
ad:9f:e2:69:68:ed:cc:3b:7d:93:47:e3:7b:b1:11:a6:09:62:
3e:93:1d:7d:97:82:14:f2:7b:d1:05:9a:51:47:c9:06:e5:90:
22:57:a4:09:f0:82:19:f1:e8:5e:5b:ea:55:11:bd:59:55:68:
dd:01:92:14:10:ef:e3:c5:89:eb:13:98:a7:0e:b9:4d:f9:6a:
20:e7:f4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 23:13:00 2026 by rpki-client