Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/zga9Hrw7zuD_QLdtCJpMRKMP3DQ.roa
File: zga9Hrw7zuD_QLdtCJpMRKMP3DQ.roa (raw, json)
Hash identifier: AOEGUef18XORevLws81X/8IWws1WokZExo2mQVZZKN4=
Subject key identifier: CE:06:BD:1E:BC:3B:CE:E0:FF:40:B7:6D:08:9A:4C:44:A3:0F:DC:34
Certificate issuer: /CN=d0b61d1f1d9ccdab6b6d8e1450c2c936d397e670
Certificate serial: 019FC271080A8A6E01781F0497BA54E51440
Authority key identifier: D0:B6:1D:1F:1D:9C:CD:AB:6B:6D:8E:14:50:C2:C9:36:D3:97:E6:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LYdHx2czatrbY4UUMLJNtOX5nA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/zga9Hrw7zuD_QLdtCJpMRKMP3DQ.roa
Signing time: Sun 02 Aug 2026 12:26:55 +0000
ROA not before: Sun 02 Aug 2026 12:26:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207350
IP address blocks: 195.24.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0LYdHx2czatrbY4UUMLJNtOX5nA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 09:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c2:71:08:0a:8a:6e:01:78:1f:04:97:ba:54:e5:14:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b61d1f1d9ccdab6b6d8e1450c2c936d397e670
Validity
Not Before: Aug 2 12:26:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ce06bd1ebc3bcee0ff40b76d089a4c44a30fdc34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9b:fc:59:5b:cd:61:b9:ab:72:c5:90:37:7d:
86:f8:53:d3:2b:d0:f9:a4:f0:13:91:84:ec:ce:41:
3b:bb:3c:6a:8e:29:8c:af:f4:4f:a3:cb:3f:e3:f0:
06:75:bf:d9:93:b8:88:04:10:95:fb:eb:c1:ec:8f:
83:fc:d9:19:e3:9b:6d:e4:55:76:2c:3f:ba:fe:29:
41:68:b2:87:5d:68:41:25:47:ee:e9:93:46:66:9f:
0c:7c:c7:af:29:e2:a0:91:73:1e:81:94:7e:91:0d:
4f:c5:ad:92:a6:fd:21:d5:e0:83:56:71:d1:e9:16:
67:0f:62:0c:67:f3:5e:19:a5:b6:70:7f:56:a3:41:
d5:b6:70:f6:82:79:a4:31:c7:79:7f:c8:ce:f6:d5:
cf:8e:a8:b8:d3:99:02:35:5e:56:b6:7a:86:82:e7:
93:82:2a:f3:81:c8:05:99:a7:45:ec:b3:59:bf:7b:
37:68:5c:74:9d:b5:90:bc:bc:24:6b:1a:03:1b:13:
56:02:af:26:c8:d0:44:eb:89:36:49:a7:6b:c0:84:
4d:06:c0:cf:2f:86:0c:20:a0:95:46:3b:33:6c:6b:
63:22:01:f7:32:fe:e4:89:42:4c:a9:5f:5f:83:aa:
9a:a5:e7:3e:7a:1a:57:7f:0e:26:88:c0:cc:5a:1c:
f9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:06:BD:1E:BC:3B:CE:E0:FF:40:B7:6D:08:9A:4C:44:A3:0F:DC:34
X509v3 Authority Key Identifier:
keyid:D0:B6:1D:1F:1D:9C:CD:AB:6B:6D:8E:14:50:C2:C9:36:D3:97:E6:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LYdHx2czatrbY4UUMLJNtOX5nA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/zga9Hrw7zuD_QLdtCJpMRKMP3DQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.24.237.0/24
Signature Algorithm: sha256WithRSAEncryption
23:1a:a0:5a:87:36:d7:b2:f4:30:b6:73:31:9d:a9:64:c4:f9:
a1:ce:6b:da:12:fe:a2:68:14:98:04:fd:61:e8:73:e1:53:49:
d1:5e:09:e5:bc:22:c4:06:e3:9c:65:d0:7f:83:d5:d1:f5:db:
e5:72:84:c1:51:3f:8d:49:ee:60:8d:35:b4:af:82:d6:93:64:
19:7a:c5:c1:d7:ce:f2:61:60:d3:10:e2:dc:d3:1e:d4:9a:00:
0e:0b:75:ae:2c:4b:4e:4a:86:70:ad:62:c6:f0:73:e0:d2:3e:
b0:dd:e5:b6:43:be:ab:e3:47:18:74:36:26:a5:aa:2a:16:58:
bd:45:26:70:da:47:ad:48:31:2d:85:b9:1f:f0:6d:28:da:0b:
b3:10:5a:c9:a4:79:19:d3:f0:5f:23:27:ce:cd:d7:c3:71:93:
83:b3:2a:da:3a:f1:4b:3b:a2:ae:0f:11:f9:03:f1:e4:de:78:
ed:a2:a4:a6:17:08:9f:28:53:11:4f:de:69:aa:9d:73:01:e5:
77:cd:44:f2:74:23:22:72:d0:57:3c:c6:59:52:40:a9:04:02:
96:ea:fc:58:c2:b3:65:52:ea:a7:2d:09:41:d5:43:44:85:90:
15:b6:2a:8b:36:10:56:c8:a5:1a:6e:16:cf:56:ef:24:32:04:
b9:b6:e6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:12:16 2026 by rpki-client