Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Z8L5QY6Pbw4S0gDQQ8pmqySxVqk.roa
File: Z8L5QY6Pbw4S0gDQQ8pmqySxVqk.roa (raw, json)
Hash identifier: k+jbjWejpmf+i6E+hgp8IAnd9yy5sjBoGrjH1Iv1N5M=
Subject key identifier: 67:C2:F9:41:8E:8F:6F:0E:12:D2:00:D0:43:CA:66:AB:24:B1:56:A9
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019D1B00AB5C080F347671AED6B27D5D0D55
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Z8L5QY6Pbw4S0gDQQ8pmqySxVqk.roa
Signing time: Mon 23 Mar 2026 14:02:01 +0000
ROA not before: Mon 23 Mar 2026 14:02:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209034
IP address blocks: 195.182.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1b:00:ab:5c:08:0f:34:76:71:ae:d6:b2:7d:5d:0d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Mar 23 14:02:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=67c2f9418e8f6f0e12d200d043ca66ab24b156a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e6:41:85:35:83:b0:56:cb:d3:5e:5a:55:6b:
1b:b2:8b:fd:0c:6a:16:88:da:5d:17:95:e0:bb:64:
b8:28:90:ff:8a:ff:f7:3e:5e:d7:73:9b:e0:41:d1:
1e:45:5e:bd:54:73:f1:bd:19:f6:f6:6e:f6:58:1e:
a9:79:e9:87:ac:48:05:61:4c:20:a6:f9:fc:c5:97:
70:a4:74:0f:7e:97:af:40:34:53:3f:3c:fd:e5:09:
48:c6:cb:78:5c:5c:28:e3:52:8c:8c:19:85:d6:2e:
9b:2d:9c:bd:84:32:61:ee:e2:cc:78:3c:dd:cc:bc:
02:c7:0a:b1:18:36:04:c3:8e:7e:6a:f0:e7:80:06:
ae:cd:95:81:62:6b:f6:33:93:de:2c:34:14:7c:a7:
4b:be:0d:ec:b8:12:08:9e:db:6d:fe:12:92:06:06:
cb:9e:2c:e2:55:25:4b:90:0f:2f:a8:66:bf:98:df:
4a:b0:e7:dd:94:c5:a7:3d:88:f1:06:77:ae:51:ee:
ba:3b:9c:36:d6:26:31:0e:62:3a:ca:76:cd:e2:ba:
04:7e:f6:f3:77:b1:da:05:e2:1d:5f:ab:b5:df:ea:
09:19:7c:9d:d3:f0:08:31:f1:37:b2:97:c4:68:64:
56:d6:e6:1a:18:9f:c4:c8:36:9b:72:5b:e5:4b:8c:
27:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C2:F9:41:8E:8F:6F:0E:12:D2:00:D0:43:CA:66:AB:24:B1:56:A9
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Z8L5QY6Pbw4S0gDQQ8pmqySxVqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.182.25.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:04:ad:3c:46:cf:f0:2d:79:42:d3:43:e4:8a:45:77:66:dd:
91:ec:c1:fa:8f:ba:e1:71:21:91:64:93:aa:ea:d7:7e:0a:1b:
0e:95:6a:c3:bc:40:ee:c2:09:8d:6b:b0:9e:95:b3:03:8d:8a:
2e:79:c5:26:1a:e0:9f:6e:41:a9:17:1f:95:d1:c0:03:bc:94:
48:10:28:3a:2c:a0:fd:e8:d5:f0:46:90:dc:d3:2a:50:49:69:
57:e4:ca:96:8c:fe:f1:72:52:4a:72:86:0d:3c:1c:f0:1d:63:
bf:61:1b:12:9b:75:60:6b:0f:98:69:a1:f1:d2:ea:14:1c:c5:
50:68:a2:81:fe:cc:4f:27:7e:01:86:4d:5b:e7:5f:11:8c:8b:
73:17:d1:e2:59:8b:f0:cc:d0:3a:ff:4e:7d:cc:0b:15:04:7c:
7c:fc:62:33:57:24:e1:b1:5e:ef:29:e2:2b:9f:3b:f8:2e:e0:
c6:2d:be:a7:54:bf:b0:71:b7:d1:76:da:07:26:83:f4:39:53:
3f:01:51:f4:48:bc:5d:87:f1:ab:2f:e9:11:09:ee:3b:d8:28:
9e:93:dd:31:ba:5c:17:98:fd:ad:42:e3:90:37:9b:f9:d1:7d:
26:d2:65:9f:3e:a0:64:28:bc:c7:67:71:3a:3d:30:43:51:cc:
44:b5:7a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:39:24 2026 by rpki-client