Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/ZFalShBjHQa4r_Vq5PhM-LZpAss.roa
File: ZFalShBjHQa4r_Vq5PhM-LZpAss.roa (raw, json)
Hash identifier: n8v/ouZE5MdJorNZCoTC8HnfWZDvdQzuSQWeSfQGDkk=
Subject key identifier: 64:56:A5:4A:10:63:1D:06:B8:AF:F5:6A:E4:F8:4C:F8:B6:69:02:CB
Certificate issuer: /CN=4456c14cd8724f9a909627b94e006cf69d12307b
Certificate serial: 01A00E82CB51FD3D4A2322FBD2DB0CE5A9C3
Authority key identifier: 44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/ZFalShBjHQa4r_Vq5PhM-LZpAss.roa
Signing time: Mon 17 Aug 2026 06:57:27 +0000
ROA not before: Mon 17 Aug 2026 06:57:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30058
IP address blocks: 185.36.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 12:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0e:82:cb:51:fd:3d:4a:23:22:fb:d2:db:0c:e5:a9:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4456c14cd8724f9a909627b94e006cf69d12307b
Validity
Not Before: Aug 17 06:57:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6456a54a10631d06b8aff56ae4f84cf8b66902cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:13:7a:d1:1b:d6:5e:81:17:48:a7:1e:9a:df:
38:3e:ff:b4:da:07:85:42:cf:6e:6c:a6:28:7b:12:
c3:a1:fc:36:a6:42:1f:68:ac:3b:53:2e:28:ba:65:
f4:84:9f:c8:2b:7c:08:69:39:d3:74:02:4a:fe:e7:
a5:0d:f6:5b:3d:c4:b8:bd:72:b1:63:c7:3b:16:29:
76:25:25:cb:e1:e9:bf:b3:09:61:b2:95:ee:64:75:
09:18:9f:2e:0c:9e:5e:26:08:11:16:5d:bc:a7:aa:
cc:61:b5:fd:c4:22:08:30:23:43:bd:0b:24:34:e4:
e9:9b:47:7d:9a:4f:ea:d6:e9:41:fc:e5:8f:2f:ee:
97:5d:d0:9b:b0:9d:70:5e:a0:c2:f3:b9:b6:52:c3:
c2:84:dc:00:af:c7:b2:f9:3c:6f:71:75:a0:a7:1a:
de:86:1b:23:54:a3:a5:48:48:94:ad:61:db:52:fb:
63:19:d2:c9:c1:70:fe:f2:8d:34:08:b5:4f:03:82:
08:1c:e7:d7:7e:a0:39:6d:92:80:94:43:12:66:e3:
06:eb:12:91:96:c8:e2:1f:00:a6:33:21:c9:25:8a:
f1:ec:38:df:fa:29:45:69:f4:d2:fd:b8:1b:fd:69:
5d:50:65:39:9e:fe:29:9f:bb:0a:8a:e7:61:ff:9d:
8f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:56:A5:4A:10:63:1D:06:B8:AF:F5:6A:E4:F8:4C:F8:B6:69:02:CB
X509v3 Authority Key Identifier:
keyid:44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/ZFalShBjHQa4r_Vq5PhM-LZpAss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.127.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:20:86:76:90:e5:1e:02:3e:c1:60:a0:60:79:5e:6e:d1:ff:
0c:41:46:c3:80:48:3c:f4:57:98:b9:e2:4b:2a:8e:65:9b:76:
15:07:64:ed:cf:c3:54:27:ef:9e:91:22:32:76:6d:95:48:4d:
a3:b4:d4:e2:d4:98:7b:3f:f3:7b:ec:6f:9e:84:b2:13:f1:72:
b0:5c:70:81:2b:07:e1:d4:ed:36:d0:cb:89:37:7c:db:4e:c5:
3a:3a:07:3c:ac:04:b7:36:81:44:99:8d:86:d2:3f:5d:d6:03:
0f:eb:53:69:e4:9a:a5:4f:e1:c6:06:d1:65:9b:60:46:61:38:
d6:41:d6:d1:87:a3:87:18:7c:bc:90:68:60:52:4f:45:76:6d:
15:c2:fb:a0:f2:4c:f5:11:42:b5:21:dc:b9:e0:cf:d3:5d:0e:
45:1a:d9:ea:e2:10:b6:66:6e:90:50:3e:08:ec:eb:f0:70:32:
b4:38:5a:a4:25:f8:82:cd:3c:fc:31:18:ea:dc:10:6d:82:8d:
05:ed:02:8a:1e:5f:06:be:b5:c4:73:80:ba:e8:20:91:e8:28:
4b:5a:f0:e9:3c:26:63:87:b8:1e:64:4d:df:4b:71:2a:a1:d8:
31:b8:91:49:08:30:98:cb:53:b9:4f:b3:f8:ee:4a:85:27:c2:
78:61:93:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:21:12 2026 by rpki-client