Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/f1f320-fade-4503-8c0b-ddd3b82c2017/1/ZQXydve_JKp-rurhg8nSngve8PA.roa
File: ZQXydve_JKp-rurhg8nSngve8PA.roa (raw, json)
Hash identifier: 6FWaOGU/DRpGXEfkBJvFZ9nK8hOIfWUXXko/99ThS9g=
Subject key identifier: 65:05:F2:76:F7:BF:24:AA:7E:AE:EA:E1:83:C9:D2:9E:0B:DE:F0:F0
Certificate issuer: /CN=9a586043459da856fb2d2b1a763ea56e16467111
Certificate serial: 019D295611E5F26140F384A7A10C7C030C01
Authority key identifier: 9A:58:60:43:45:9D:A8:56:FB:2D:2B:1A:76:3E:A5:6E:16:46:71:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlhgQ0WdqFb7LSsadj6lbhZGcRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/f1f320-fade-4503-8c0b-ddd3b82c2017/1/ZQXydve_JKp-rurhg8nSngve8PA.roa
Signing time: Thu 26 Mar 2026 08:49:59 +0000
ROA not before: Thu 26 Mar 2026 08:49:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57275
IP address blocks: 192.166.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/f1f320-fade-4503-8c0b-ddd3b82c2017/1/mlhgQ0WdqFb7LSsadj6lbhZGcRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/f1f320-fade-4503-8c0b-ddd3b82c2017/1/mlhgQ0WdqFb7LSsadj6lbhZGcRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mlhgQ0WdqFb7LSsadj6lbhZGcRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:56:11:e5:f2:61:40:f3:84:a7:a1:0c:7c:03:0c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a586043459da856fb2d2b1a763ea56e16467111
Validity
Not Before: Mar 26 08:49:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6505f276f7bf24aa7eaeeae183c9d29e0bdef0f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8c:36:01:6f:1e:87:68:f9:82:68:57:53:0c:
7a:bb:8a:c5:b9:7c:30:68:40:e0:1e:09:34:c1:25:
cb:ed:bd:e7:88:de:2b:be:cc:fd:ec:4e:96:02:d6:
22:a0:23:44:e0:2f:72:1e:36:97:2c:1e:9c:8a:d3:
a1:3b:89:b8:28:13:07:89:31:56:03:54:e5:d4:c5:
3e:f0:f9:9c:0f:2d:ec:0b:92:2d:8d:ce:fd:61:6f:
71:d0:78:fa:16:6f:1d:41:67:61:a0:7d:31:78:c2:
f2:dd:9b:85:ac:f9:81:62:9e:ab:0e:9a:bb:bc:5e:
db:37:ca:c3:f5:f2:90:f9:78:61:cf:07:62:37:82:
5d:cd:d5:1e:1f:8b:8c:a7:e3:c1:c2:39:cb:7a:98:
e6:9a:70:d9:c2:b0:ba:87:09:2a:34:47:17:2e:04:
93:a7:55:3d:53:89:02:13:1c:91:c4:51:b2:8b:b7:
0e:c5:47:6e:d3:a0:db:03:2c:b0:0c:fd:75:ce:47:
a5:9b:44:0d:8d:73:f0:04:a8:3d:7e:b8:e7:32:8d:
9e:43:fc:fe:a8:06:05:78:8f:96:77:c8:cd:10:2a:
67:5d:8c:78:49:f9:a4:84:a9:07:36:99:2f:7a:ba:
84:3c:f0:f4:b9:eb:ab:71:98:a1:fc:ba:43:88:f5:
a0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:05:F2:76:F7:BF:24:AA:7E:AE:EA:E1:83:C9:D2:9E:0B:DE:F0:F0
X509v3 Authority Key Identifier:
keyid:9A:58:60:43:45:9D:A8:56:FB:2D:2B:1A:76:3E:A5:6E:16:46:71:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlhgQ0WdqFb7LSsadj6lbhZGcRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/f1f320-fade-4503-8c0b-ddd3b82c2017/1/ZQXydve_JKp-rurhg8nSngve8PA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/f1f320-fade-4503-8c0b-ddd3b82c2017/1/mlhgQ0WdqFb7LSsadj6lbhZGcRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.166.122.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:88:e5:72:91:22:aa:c0:63:d5:1b:1e:65:17:2c:12:fd:d2:
e8:58:4c:11:12:3b:34:2e:89:8b:fe:78:ca:78:f1:cd:a5:72:
26:59:7f:ea:ff:ba:da:9d:ab:51:3e:43:f1:d7:54:3e:34:fe:
9d:ea:5c:bd:54:2c:48:0b:fc:1a:0e:e4:0a:76:78:9b:8f:57:
ad:62:dc:04:c3:59:36:f6:f4:09:c0:ad:eb:9c:8f:81:fb:4a:
4e:0d:3e:d5:a6:2c:90:13:d3:af:4f:0b:c4:11:66:c1:8f:3f:
0c:e2:52:36:f6:b4:ae:c4:a7:bd:95:f7:1e:0c:9f:b8:98:e5:
12:2a:e6:06:a7:29:35:d6:a8:1a:6e:db:97:21:a6:66:33:44:
ae:14:95:24:84:c8:4a:45:24:a0:99:be:2e:df:8c:f7:70:ac:
33:e4:72:44:b4:51:68:b6:fe:a6:69:7b:48:88:b0:be:ad:1a:
0d:e4:7c:e9:89:be:b1:30:f9:0d:ef:24:67:bf:4e:95:07:bf:
e5:27:f2:d6:4b:5a:6a:33:76:ed:8f:c8:7f:6e:cd:2a:5e:66:
9b:e9:b0:ed:8f:7c:a0:ad:86:43:a6:7c:46:65:13:54:8f:0e:
a5:2a:84:ec:ec:91:9a:d6:91:49:41:75:2e:78:01:ee:8a:34:
af:d5:41:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:28:53 2026 by rpki-client