Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/zaMHea7sFzJLhecvORSvMX9hIVc.roa
File: zaMHea7sFzJLhecvORSvMX9hIVc.roa (raw, json)
Hash identifier: bJl+nhnvuUdcLs/tcqbGutj6qSb94yLtvZWixaa+/uI=
Subject key identifier: CD:A3:07:79:AE:EC:17:32:4B:85:E7:2F:39:14:AF:31:7F:61:21:57
Certificate issuer: /CN=9ba94bc14937bb0b3632374355a446724104a981
Certificate serial: 019FBD6C8BD249C9976A10F4B00CA9336246
Authority key identifier: 9B:A9:4B:C1:49:37:BB:0B:36:32:37:43:55:A4:46:72:41:04:A9:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/zaMHea7sFzJLhecvORSvMX9hIVc.roa
Signing time: Sat 01 Aug 2026 13:03:55 +0000
ROA not before: Sat 01 Aug 2026 13:03:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 10010
IP address blocks: 193.151.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:bd:6c:8b:d2:49:c9:97:6a:10:f4:b0:0c:a9:33:62:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ba94bc14937bb0b3632374355a446724104a981
Validity
Not Before: Aug 1 13:03:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cda30779aeec17324b85e72f3914af317f612157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:93:17:e3:62:75:8e:61:ed:fd:f7:c9:3f:e2:
b1:e0:86:dd:67:f7:ca:23:33:85:c9:b4:c6:b7:ea:
a7:a2:32:1f:eb:3c:3f:dc:3b:26:9d:04:ed:7e:ee:
45:66:33:09:11:13:a3:e9:9c:3b:79:55:cd:f3:e6:
b4:9b:f3:97:06:60:6f:e2:69:c7:1e:e2:61:cf:f9:
42:74:c7:3c:c5:f4:0e:7d:f9:ed:56:fc:02:c7:c6:
ea:3c:6d:1a:0f:b6:eb:a6:47:13:41:97:dc:9c:80:
b0:9b:72:95:88:69:86:52:35:a9:0e:12:9b:f0:6e:
64:89:a2:65:f1:be:39:c0:94:b1:1c:44:dd:1c:f4:
97:c2:30:79:a3:8d:aa:08:67:79:55:71:99:ab:42:
9a:5c:9c:47:a5:b4:96:33:a0:ed:1c:f6:74:a0:af:
39:6d:b8:e2:2f:51:b1:71:93:14:98:d5:ed:c8:d0:
63:ff:ef:7e:86:cf:95:e7:04:46:ab:f7:22:8c:61:
20:8b:20:4a:b7:a5:f3:64:ed:d4:62:32:04:97:5b:
4e:56:4e:e3:d3:f0:a7:89:01:9a:0a:0d:25:e1:81:
9f:1b:6a:7e:2b:24:cf:25:7d:b8:4f:62:53:52:b1:
b8:58:03:97:77:8a:30:11:32:69:0f:77:6e:95:88:
63:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A3:07:79:AE:EC:17:32:4B:85:E7:2F:39:14:AF:31:7F:61:21:57
X509v3 Authority Key Identifier:
keyid:9B:A9:4B:C1:49:37:BB:0B:36:32:37:43:55:A4:46:72:41:04:A9:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/zaMHea7sFzJLhecvORSvMX9hIVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.111.0/24
Signature Algorithm: sha256WithRSAEncryption
41:03:c0:38:b2:f6:84:ca:75:48:76:35:92:6d:f4:20:19:1b:
d0:4f:3e:82:91:55:10:34:d2:44:e8:a5:9d:11:e5:43:f1:e2:
2d:3d:e8:44:62:3d:d1:6a:e6:fc:99:6b:3f:3e:be:be:10:41:
7c:13:49:30:b8:c3:14:97:9a:60:fa:a0:05:a9:05:10:5e:e8:
19:8f:de:57:8a:40:ce:18:08:1e:0c:77:1f:a6:3a:97:bf:25:
82:a2:26:07:6d:71:67:10:36:5a:0e:df:4e:f7:2d:1c:a0:33:
b5:22:77:5f:42:48:04:fa:06:5a:ac:5b:3d:11:86:e5:76:45:
9e:1a:be:75:16:b8:e0:b1:5d:15:79:9c:92:2e:7a:98:8d:22:
5f:ee:a3:18:e4:a6:f1:a7:ba:20:a2:8f:9c:08:ed:42:07:42:
5e:37:39:05:35:4f:3e:db:e9:55:1d:4e:f1:1d:81:b7:04:17:
29:8c:49:2c:e6:63:26:b2:86:95:73:b8:83:fe:62:d8:6e:a5:
00:35:74:a6:5e:3b:48:88:58:71:6c:e4:37:fa:6f:4a:d4:d4:
4b:1f:c4:17:5f:b0:36:83:fc:63:79:90:a7:bf:b8:88:bb:a4:
a2:94:fd:d2:ec:b5:17:59:3c:fa:e1:1c:d3:e5:60:35:42:fd:
80:a4:de:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:44:23 2026 by rpki-client