Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/zJ7bQRkdu51dDhpIRXHfMMYiVmk.roa
File: zJ7bQRkdu51dDhpIRXHfMMYiVmk.roa (raw, json)
Hash identifier: bNmQ2cyx0aqf952PXTze556b/bNDzy43ardHfclMYCc=
Subject key identifier: CC:9E:DB:41:19:1D:BB:9D:5D:0E:1A:48:45:71:DF:30:C6:22:56:69
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 019ECEE28B397DDADDA14E7F2BCA9317E0E7
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/zJ7bQRkdu51dDhpIRXHfMMYiVmk.roa
Signing time: Tue 16 Jun 2026 05:23:33 +0000
ROA not before: Tue 16 Jun 2026 05:23:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 5.172.33.0/24 maxlen: 24
89.23.82.0/24 maxlen: 24
89.23.91.0/24 maxlen: 24
89.23.92.0/24 maxlen: 24
89.23.93.0/24 maxlen: 24
185.157.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Jun 2026 15:43:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ce:e2:8b:39:7d:da:dd:a1:4e:7f:2b:ca:93:17:e0:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Jun 16 05:23:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cc9edb41191dbb9d5d0e1a484571df30c6225669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:23:96:ea:b0:24:f7:a6:b2:e6:e2:9f:ac:59:
fd:7f:95:ac:37:9a:df:a7:f1:1d:01:99:6a:20:e7:
e5:98:78:ff:56:eb:9d:58:ad:a3:2b:6e:d6:c9:70:
89:32:9b:0c:7e:86:d2:26:87:8e:f8:00:c2:3e:6e:
2a:cc:c3:ec:b3:64:02:83:10:3b:41:37:b5:e6:68:
ca:df:17:3b:27:ba:1a:dc:88:22:49:70:d9:95:da:
a1:d2:39:33:96:9d:07:63:a4:1e:48:84:f6:8b:86:
10:c8:5c:fb:04:55:ab:08:da:e1:de:cc:20:c9:fb:
d7:36:8c:33:93:b6:01:8b:18:c4:b0:cd:59:cb:e5:
13:08:d8:64:13:b9:a0:8d:6d:93:2c:a5:3d:68:14:
18:4b:26:bc:71:60:23:eb:4c:08:80:2b:74:60:3e:
17:da:bd:e7:cb:3d:4e:ca:ff:3c:96:81:56:57:a3:
9d:d9:60:27:8d:39:32:17:35:18:f5:2f:6c:60:e1:
87:1d:12:d0:50:b2:31:22:6c:23:23:7a:fe:40:48:
4e:a5:a0:55:07:c2:26:0f:ca:6d:0b:11:fb:a7:64:
05:fa:f7:27:4b:95:ae:67:6e:29:c1:3a:ab:3e:ef:
72:1d:7c:a8:da:7a:cc:59:ac:80:dd:ec:41:a8:fe:
b0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:9E:DB:41:19:1D:BB:9D:5D:0E:1A:48:45:71:DF:30:C6:22:56:69
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/zJ7bQRkdu51dDhpIRXHfMMYiVmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.33.0/24
89.23.82.0/24
89.23.91.0-89.23.93.255
185.157.46.0/24
Signature Algorithm: sha256WithRSAEncryption
07:35:51:00:85:1e:45:6b:56:e0:9e:62:ee:c4:7a:a0:9b:9c:
e1:77:53:1b:49:bf:1f:7c:44:2a:31:30:d4:08:5f:21:e6:5a:
ed:58:10:45:e2:6b:78:ed:b7:2e:27:52:9c:2c:86:77:ca:e9:
56:47:eb:29:d6:4e:47:e1:6d:bd:d5:dd:63:e8:c0:7c:24:2d:
e2:9f:aa:21:73:7b:5a:13:d3:ac:db:af:30:02:46:12:a2:02:
5f:d5:df:b9:59:14:9c:fa:83:83:0f:bf:b8:4e:32:7f:45:67:
09:cf:d2:ae:fc:c5:61:2a:83:7c:a4:7e:4b:98:2b:d9:fa:19:
b1:68:79:7a:f6:ae:20:49:0b:52:ba:a6:55:a1:cb:aa:de:b8:
e1:ce:b1:c4:3d:4d:5b:68:fa:d5:93:f3:76:6a:9c:0f:b5:21:
09:1c:e6:6d:fe:9e:96:64:b0:7f:eb:d8:29:49:31:b9:e4:78:
e1:c0:04:34:00:b6:f4:21:58:4e:f0:ec:79:64:7c:b4:28:86:
62:3e:93:0d:20:62:b4:10:28:33:36:b0:7a:07:29:38:7b:32:
15:fc:47:7f:e1:29:86:d1:40:1d:ef:60:32:8f:27:7b:d9:e3:
b7:b1:70:16:d4:02:8d:f4:ef:00:d9:db:8c:b8:52:a6:0c:0f:
9c:e9:0a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 00:11:31 2026 by rpki-client