Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/zQrGlW3lGwI4lZKIAf_fP_urbRE.roa
File: zQrGlW3lGwI4lZKIAf_fP_urbRE.roa (raw, json)
Hash identifier: 3f1PIqtqU+3X17AYsKSlzGqJSDlsKpcpaH/RntmPBZU=
Subject key identifier: CD:0A:C6:95:6D:E5:1B:02:38:95:92:88:01:FF:DF:3F:FB:AB:6D:11
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A0533C4463718E72228F230FBFBFC5C5D9
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/zQrGlW3lGwI4lZKIAf_fP_urbRE.roa
Signing time: Sun 30 Aug 2026 15:14:13 +0000
ROA not before: Sun 30 Aug 2026 15:14:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218828
IP address blocks: 212.189.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:53:3c:44:63:71:8e:72:22:8f:23:0f:bf:bf:c5:c5:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Aug 30 15:14:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cd0ac6956de51b023895928801ffdf3ffbab6d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c4:67:99:ed:c4:81:63:64:6a:33:3c:75:2d:
ec:70:09:e5:c7:23:3f:d8:72:a6:96:1e:08:dd:42:
e2:9b:a6:3d:a1:4b:00:b4:17:5e:53:66:55:1f:25:
43:95:7d:44:3e:6f:75:8c:25:ea:38:af:a0:61:6d:
2e:cf:2e:87:81:ab:d4:70:0a:ad:d0:0c:60:27:c1:
fd:11:7d:53:30:cb:50:6d:8c:ec:5b:02:8d:49:b4:
be:2e:f6:e6:c2:d3:a3:0c:f1:79:9d:51:3e:ae:dc:
16:6f:1b:f7:15:e6:cc:e7:dc:20:f1:97:59:74:16:
6c:5a:de:e6:65:98:22:b1:7b:6a:41:f0:40:0b:03:
e7:10:79:36:bf:e6:fc:38:da:50:84:cb:0f:4d:28:
14:75:9b:70:f9:d0:13:9d:89:7c:ac:57:d7:36:00:
df:9b:35:bd:73:e4:7d:08:23:68:79:e8:bb:92:a6:
3c:eb:cd:43:9c:8a:1f:fe:b2:dc:3c:00:96:70:10:
d1:87:70:50:fe:92:6a:b4:32:74:a3:80:44:4d:61:
1d:f3:cd:bf:2e:0b:46:d2:1d:d5:07:5b:e4:91:b2:
aa:f3:9f:65:5e:b4:24:c3:5b:86:f0:d2:52:f0:71:
f0:68:53:4f:58:aa:f0:1e:e8:61:90:9b:8d:1f:af:
17:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:0A:C6:95:6D:E5:1B:02:38:95:92:88:01:FF:DF:3F:FB:AB:6D:11
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/zQrGlW3lGwI4lZKIAf_fP_urbRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.189.54.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:4b:b1:0d:57:b5:98:b5:a7:cf:b2:4e:e6:73:75:3b:49:54:
40:2f:b5:68:4e:0b:5e:9e:40:4a:69:b8:02:00:db:fc:6a:eb:
d2:86:bd:6e:0e:43:8e:f1:96:b7:4b:ee:67:ce:b4:5d:46:b0:
a6:cc:43:57:ca:f4:76:1e:da:82:30:63:c1:e3:6c:66:cf:ed:
da:15:0a:99:05:02:8f:a5:e4:f5:64:b0:c8:8c:09:13:57:27:
61:01:d9:a5:6b:6c:96:69:ad:e3:ed:a7:89:58:49:e7:80:7b:
98:01:d7:07:32:69:89:54:73:1b:e2:a6:65:3c:c6:50:5f:44:
34:d0:75:d7:45:23:4e:2b:dd:59:14:79:11:fa:a6:a6:3f:ab:
6a:04:28:42:73:a5:12:70:16:72:cb:72:0b:3b:84:a1:43:61:
ab:d6:c7:f8:da:fb:cc:81:16:36:9d:ea:b2:e3:d3:93:32:11:
6d:21:79:3b:f4:22:9a:54:af:7c:44:ec:04:c4:73:1a:ea:42:
61:3f:19:81:5a:0f:1f:67:01:91:35:35:1c:5f:36:a0:1f:b8:
9a:0c:66:a6:ba:e0:2e:93:e4:3f:51:1c:e4:e9:22:80:8b:46:
ef:5a:ef:02:e0:81:7b:a9:f6:80:a9:66:f1:41:cd:da:95:68:
88:91:f9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:08:56 2026 by rpki-client