Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/Z7mqkIqdlU3VDKLWA2pLlLldZVY.roa
File: Z7mqkIqdlU3VDKLWA2pLlLldZVY.roa (raw, json)
Hash identifier: AulnqlMbCQ8itaRqVZyz6vFmxmiNQwbZYh/gOD25KBo=
Subject key identifier: 67:B9:AA:90:8A:9D:95:4D:D5:0C:A2:D6:03:6A:4B:94:B9:5D:65:56
Certificate issuer: /CN=240fd0d33886d839c5cc90103a186e13a348ad50
Certificate serial: 01A159589526D46AE7781BCA48F34845030F
Authority key identifier: 24:0F:D0:D3:38:86:D8:39:C5:CC:90:10:3A:18:6E:13:A3:48:AD:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/Z7mqkIqdlU3VDKLWA2pLlLldZVY.roa
Signing time: Tue 20 Oct 2026 12:45:39 +0000
ROA not before: Tue 20 Oct 2026 12:45:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51918
IP address blocks: 195.10.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:58:95:26:d4:6a:e7:78:1b:ca:48:f3:48:45:03:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240fd0d33886d839c5cc90103a186e13a348ad50
Validity
Not Before: Oct 20 12:45:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=67b9aa908a9d954dd50ca2d6036a4b94b95d6556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:55:97:ab:9a:95:92:08:80:9a:ca:1f:ab:b4:
04:63:d5:80:d9:ba:b6:e1:ce:14:b1:8e:46:ca:7f:
b3:25:e8:68:6b:4a:4a:ee:09:80:87:c8:c2:fe:dd:
58:a9:9f:69:0a:21:28:7d:73:e2:99:9a:99:e7:5b:
aa:2a:37:ce:e2:46:cc:08:2b:e1:aa:0c:67:61:49:
00:d3:6d:3c:c3:6a:23:87:ca:1a:6f:b0:8b:61:4b:
72:7d:be:32:a6:96:9c:76:5c:7f:d1:46:b3:40:e1:
66:67:e5:22:98:be:d5:95:de:3b:57:0e:71:10:21:
9f:ea:4e:8d:f0:5d:d7:76:7a:17:1f:df:19:e1:15:
72:3b:0f:a2:d1:bd:1f:44:27:88:2c:ee:d3:3b:1b:
94:f8:0f:ca:6f:c2:e6:2f:b7:c7:b0:bc:8a:e4:f1:
0e:c6:d5:f7:08:25:fe:1a:b5:0e:7b:a7:27:ec:20:
ad:b0:76:99:ef:0b:c8:cf:c9:34:67:f4:06:06:04:
0a:95:16:0a:9f:e9:6e:77:a6:28:f9:4f:79:68:de:
d1:6c:ef:df:fd:cd:74:fc:31:50:15:74:af:8f:3d:
4b:8f:37:d3:03:d1:26:1c:15:4e:ef:c3:3a:c8:82:
7d:45:6e:fd:99:e1:f9:26:81:2e:25:88:5f:33:b3:
cd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B9:AA:90:8A:9D:95:4D:D5:0C:A2:D6:03:6A:4B:94:B9:5D:65:56
X509v3 Authority Key Identifier:
keyid:24:0F:D0:D3:38:86:D8:39:C5:CC:90:10:3A:18:6E:13:A3:48:AD:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/Z7mqkIqdlU3VDKLWA2pLlLldZVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.10.232.0/24
Signature Algorithm: sha256WithRSAEncryption
20:51:b5:48:bc:0b:40:2b:d6:01:e8:2b:b5:af:ed:61:18:1d:
72:27:5b:3b:fb:b7:b1:52:09:6f:81:a1:ba:f1:59:c0:b5:7e:
ee:67:bf:20:b8:1b:46:59:2d:c2:6e:38:5f:cb:4b:d8:bd:d7:
9f:20:c5:aa:78:cc:f6:b7:36:8b:c4:8f:db:90:36:76:2a:54:
8f:10:33:e4:4d:f5:a2:1f:ac:05:8d:d0:d3:8f:73:8a:76:2f:
7e:22:b5:bb:e5:61:43:a6:05:ca:83:6f:9d:23:72:df:d6:ea:
bf:60:f9:55:19:e6:1e:aa:78:0f:d5:ec:d5:16:b1:7e:ed:97:
e3:d7:23:4f:4c:9c:09:2c:60:fb:04:63:28:17:cc:9b:b1:6b:
eb:3e:66:29:2e:be:c9:f5:43:83:c8:de:6e:04:de:81:e2:01:
12:92:b4:44:f0:be:e2:c8:75:8f:4e:5a:4d:6c:2f:76:55:56:
d0:6b:e5:b8:63:1b:d5:da:2d:cb:30:9a:a0:1a:e0:51:bd:f2:
08:ca:30:94:75:68:ce:f5:a9:ec:15:81:8e:93:e6:bd:48:0d:
0e:98:bf:9d:d6:fb:59:ce:a7:f6:a1:18:fd:9d:f5:d2:1b:e4:
9b:bb:d5:03:7a:69:a8:43:63:05:a6:4b:45:46:46:12:95:99:
3a:cd:e2:53
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaFZWJUm1GrneBvKSPNIRQMPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0MGZkMGQzMzg4NmQ4MzljNWNjOTAxMDNhMTg2ZTEzYTM0
OGFkNTAwHhcNMjYxMDIwMTI0NTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2N2I5YWE5MDhhOWQ5NTRkZDUwY2EyZDYwMzZhNGI5NGI5NWQ2NTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVWXq5qVkgiAmsofq7QEY9WA2bq2
4c4UsY5Gyn+zJehoa0pK7gmAh8jC/t1YqZ9pCiEofXPimZqZ51uqKjfO4kbMCCvh
qgxnYUkA0208w2ojh8oab7CLYUtyfb4yppacdlx/0UazQOFmZ+UimL7Vld47Vw5x
ECGf6k6N8F3XdnoXH98Z4RVyOw+i0b0fRCeILO7TOxuU+A/Kb8LmL7fHsLyK5PEO
xtX3CCX+GrUOe6cn7CCtsHaZ7wvIz8k0Z/QGBgQKlRYKn+lud6Yo+U95aN7RbO/f
/c10/DFQFXSvjz1LjzfTA9EmHBVO78M6yIJ9RW79meH5JoEuJYhfM7PNWwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGe5qpCKnZVN1Qyi1gNqS5S5XWVWMB8GA1UdIwQY
MBaAFCQP0NM4htg5xcyQEDoYbhOjSK1QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkFfUTB6aUcyRG5GekpBUU9oaHVFNk5JclZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy85NThhNTktZjgwZC00ZDU4LTlkNDMt
ZjI2YmZmOGI0OTk0LzEvWjdtcWtJcWRsVTNWREtMV0EycExsTGxkWlZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy85NThhNTktZjgwZC00ZDU4LTlkNDMtZjI2YmZmOGI0OTk0
LzEvSkFfUTB6aUcyRG5GekpBUU9oaHVFNk5JclZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwwroMA0G
CSqGSIb3DQEBCwUAA4IBAQAgUbVIvAtAK9YB6Cu1r+1hGB1yJ1s7+7exUglvgaG6
8VnAtX7uZ78guBtGWS3Cbjhfy0vYvdefIMWqeMz2tzaLxI/bkDZ2KlSPEDPkTfWi
H6wFjdDTj3OKdi9+IrW75WFDpgXKg2+dI3Lf1uq/YPlVGeYeqngP1ezVFrF+7Zfj
1yNPTJwJLGD7BGMoF8ybsWvrPmYpLr7J9UODyN5uBN6B4gESkrRE8L7iyHWPTlpN
bC92VVbQa+W4YxvV2i3LMJqgGuBRvfIIyjCUdWjO9ansFYGOk+a9SA0OmL+d1vtZ
zqf2oRj9nfXSG+Sbu9UDemmoQ2MFpktFRkYSlZk6zeJT
-----END CERTIFICATE-----
Generated at Thu Oct 29 00:41:21 2026 by rpki-client