Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/tZ3f5UDNEfuTAiUHCsAlVn7EuEE.roa
File: tZ3f5UDNEfuTAiUHCsAlVn7EuEE.roa (raw, json)
Hash identifier: wu4rLNJuQz4PM2FvFJ6zQAb5PyB+03Q0YVI4paUW4f8=
Subject key identifier: B5:9D:DF:E5:40:CD:11:FB:93:02:25:07:0A:C0:25:56:7E:C4:B8:41
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01A06DD65F3C83B3BF511B38FDE174DCA9B7
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/tZ3f5UDNEfuTAiUHCsAlVn7EuEE.roa
Signing time: Fri 04 Sep 2026 19:12:40 +0000
ROA not before: Fri 04 Sep 2026 19:12:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214128
IP address blocks: 176.97.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:d6:5f:3c:83:b3:bf:51:1b:38:fd:e1:74:dc:a9:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Sep 4 19:12:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b59ddfe540cd11fb930225070ac025567ec4b841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:49:31:4f:ea:32:12:df:9a:01:9e:b5:7f:bf:
d0:12:29:97:d0:11:e8:a4:31:be:c2:d6:89:04:76:
13:15:08:c0:5a:0d:f8:9d:94:a0:dd:95:26:b4:1e:
b1:54:06:69:4b:d9:3b:d7:ef:04:4d:ef:7b:97:fe:
a6:d0:ba:4b:0b:4c:9f:16:9e:c5:b2:a1:64:27:7a:
9b:18:11:c9:c6:d8:dd:89:a0:a9:32:ee:4d:7d:fa:
c6:47:3d:15:5f:38:5b:68:ac:cb:a4:66:57:e6:3b:
d9:bb:af:b7:20:65:77:92:90:88:d3:87:69:13:f4:
45:f2:1b:21:cc:bf:8a:ed:9c:24:94:0c:1c:da:90:
1c:29:0a:da:fb:b4:81:2b:ba:21:8a:70:c0:d7:c6:
ec:3a:e5:21:17:0e:84:ca:d2:7a:e8:f8:91:25:fe:
73:6e:10:30:a7:11:cc:a2:a7:38:7e:08:dc:05:25:
22:13:fa:69:cb:8d:40:3f:00:70:5a:7d:98:c3:2e:
06:da:ba:fe:a7:32:c3:75:3a:cd:37:e0:a7:76:30:
55:a6:bc:96:bc:d7:f1:d0:e3:e7:64:cc:fe:64:48:
c4:93:47:47:c0:00:6b:a2:80:a3:86:b9:59:9f:9d:
21:86:02:a6:e3:41:bd:5e:29:63:da:fa:27:ad:b2:
fd:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:9D:DF:E5:40:CD:11:FB:93:02:25:07:0A:C0:25:56:7E:C4:B8:41
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/tZ3f5UDNEfuTAiUHCsAlVn7EuEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.205.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:d7:40:92:09:cc:24:95:20:56:27:7a:10:56:73:a0:0c:22:
c6:fd:30:a7:50:86:f7:b6:bd:10:39:3d:ad:c6:52:a7:fc:ee:
dd:b1:8c:c2:4a:69:8c:64:c6:05:1f:c3:ba:04:9e:8f:7d:41:
6a:f1:e6:53:47:8a:af:50:e3:d3:b4:ba:a4:f2:24:ae:2c:67:
93:4f:2a:fb:f5:13:3c:86:bf:02:54:00:0e:7d:e3:38:dd:81:
9e:df:84:53:f1:38:32:4b:32:48:1c:8b:0d:15:12:b4:60:1b:
f1:84:74:04:ae:39:3a:a2:79:eb:87:f0:bb:c3:6e:66:d7:8e:
21:ad:64:77:b7:62:a0:93:c7:7b:7d:ac:f5:73:68:9d:ba:a3:
17:6e:77:ae:2b:22:4a:b1:14:00:ef:c8:7e:6d:09:6a:a2:13:
90:6c:aa:f5:23:11:7a:d5:d0:7a:59:2e:86:58:d5:29:63:3d:
3b:04:a1:4d:8b:d6:e1:3d:f0:7f:99:f2:aa:55:b8:b8:12:f5:
e6:ca:3c:69:d8:e2:09:f2:61:9d:46:21:b1:83:17:ab:3a:bc:
7b:a8:49:24:28:59:b6:5e:c8:2a:fe:60:51:a7:82:d8:6b:d4:
e4:f8:b1:61:24:1d:d0:ae:13:04:d3:e3:39:de:89:26:27:d7:
c6:fc:ed:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:05:37 2026 by rpki-client