Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ca51df-9582-424f-8032-7e5406f5ed35/1/zr6qOC2iZhYMAkfVEjFaWAW3Gdg.roa
File: zr6qOC2iZhYMAkfVEjFaWAW3Gdg.roa (raw, json)
Hash identifier: rfGt0EQo3cdc8IHh8jz9o2EgRv1qNBw2XAoGV+8jWOo=
Subject key identifier: CE:BE:AA:38:2D:A2:66:16:0C:02:47:D5:12:31:5A:58:05:B7:19:D8
Certificate issuer: /CN=1a33a96a2773e04ec287e12367489824ae56f7b9
Certificate serial: 019E44D79C75D034CA9D1907934DA5145207
Authority key identifier: 1A:33:A9:6A:27:73:E0:4E:C2:87:E1:23:67:48:98:24:AE:56:F7:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GjOpaidz4E7Ch-EjZ0iYJK5W97k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ca51df-9582-424f-8032-7e5406f5ed35/1/zr6qOC2iZhYMAkfVEjFaWAW3Gdg.roa
Signing time: Wed 20 May 2026 10:04:01 +0000
ROA not before: Wed 20 May 2026 10:04:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8075
IP address blocks: 212.42.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ca51df-9582-424f-8032-7e5406f5ed35/1/GjOpaidz4E7Ch-EjZ0iYJK5W97k.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ca51df-9582-424f-8032-7e5406f5ed35/1/GjOpaidz4E7Ch-EjZ0iYJK5W97k.mft
rsync://rpki.ripe.net/repository/DEFAULT/GjOpaidz4E7Ch-EjZ0iYJK5W97k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 13:19:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:44:d7:9c:75:d0:34:ca:9d:19:07:93:4d:a5:14:52:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a33a96a2773e04ec287e12367489824ae56f7b9
Validity
Not Before: May 20 10:04:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cebeaa382da266160c0247d512315a5805b719d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c4:07:e3:5e:60:44:cf:17:ae:4d:1b:5c:46:
aa:39:3b:6f:af:d4:bb:2e:fa:b3:fe:66:b4:56:03:
e1:2b:22:22:c3:b0:47:0c:63:21:13:22:70:c6:ab:
35:72:6a:f2:71:cd:1b:da:f0:83:74:8c:28:3e:10:
f3:f0:f9:8d:00:16:97:a4:c9:dd:d0:a9:47:2c:90:
36:bb:5b:99:f8:a4:d9:7b:9a:95:c8:c1:a0:9c:2f:
7f:6c:aa:7d:47:53:44:7b:6d:cf:c9:b1:b1:9c:57:
f2:58:5a:8f:52:ad:4b:93:8a:42:af:fc:2a:b3:b1:
83:2d:6e:0c:82:e2:cd:d8:6c:0d:79:23:68:7d:90:
80:f7:13:11:01:d1:25:a0:64:b8:19:0d:49:a4:10:
8b:1d:a1:98:94:13:41:80:83:71:38:2e:c5:35:e3:
12:90:5f:f0:99:88:64:06:b8:a5:23:a0:f2:46:c4:
57:05:2c:a8:58:02:ec:de:fd:21:3b:63:71:b9:ca:
27:2d:a3:19:16:b3:1d:5e:eb:3a:a9:ee:23:e0:52:
d6:e0:f6:c8:59:0c:cf:52:85:0e:76:6e:2d:b7:79:
d8:5b:76:bd:42:9b:ed:11:b9:81:5b:b1:89:78:c2:
b3:88:35:2d:89:f6:16:6f:be:0b:43:11:70:cf:c3:
7a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:BE:AA:38:2D:A2:66:16:0C:02:47:D5:12:31:5A:58:05:B7:19:D8
X509v3 Authority Key Identifier:
keyid:1A:33:A9:6A:27:73:E0:4E:C2:87:E1:23:67:48:98:24:AE:56:F7:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjOpaidz4E7Ch-EjZ0iYJK5W97k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ca51df-9582-424f-8032-7e5406f5ed35/1/zr6qOC2iZhYMAkfVEjFaWAW3Gdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ca51df-9582-424f-8032-7e5406f5ed35/1/GjOpaidz4E7Ch-EjZ0iYJK5W97k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.42.130.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:54:f9:7a:b5:c5:db:c0:3e:41:b3:da:77:bf:84:08:e1:04:
e3:34:9d:19:a8:d2:8d:cd:05:99:b6:d4:9b:dd:a6:35:c9:e2:
96:e3:fc:4f:c4:33:a2:50:9f:62:b4:e0:ac:e7:e7:bf:a7:e6:
6e:c6:19:97:ae:47:a3:0a:d9:5e:1d:80:fb:a6:b6:58:81:4e:
d1:62:5a:43:bf:3a:b9:d1:83:bb:ca:19:0b:db:b6:8b:62:5f:
cb:22:72:21:d5:e2:dc:7d:12:cf:e7:f8:5c:76:30:f1:c0:70:
c2:3b:71:c2:0c:42:8f:dd:77:c8:a0:14:1c:d5:5c:14:62:55:
14:7a:30:33:32:31:55:4b:4f:7d:b2:31:6d:5f:3a:cb:4c:3e:
5e:cc:65:28:25:88:f5:22:b1:c0:76:0d:2d:a6:08:71:c8:59:
82:31:e4:50:4f:e8:8e:11:00:6e:8f:7d:71:2c:b0:fb:c0:db:
ef:55:c1:2a:35:fa:7f:89:11:24:a5:31:99:ea:d6:b8:4f:a9:
fe:60:7b:bc:ac:ea:83:7a:b0:0c:42:14:04:48:6e:16:84:0d:
1d:75:cc:44:f9:fa:38:4b:f6:1d:49:28:a5:b5:62:f9:10:96:
51:bd:80:7d:cf:66:96:69:80:d8:7e:ec:88:70:02:6e:ee:c2:
f0:bb:79:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 19:44:59 2026 by rpki-client