Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/zgfGzzEa1O2bUfc-S2mHvFXi2oY.roa
File: zgfGzzEa1O2bUfc-S2mHvFXi2oY.roa (raw, json)
Hash identifier: 1UBdrGil3gpUHB0rTN6c1kWbSetkIIDJWjSbwx4apv0=
Subject key identifier: CE:07:C6:CF:31:1A:D4:ED:9B:51:F7:3E:4B:69:87:BC:55:E2:DA:86
Certificate issuer: /CN=8cd802512ccb745b2a1b8f315714ebe39395403e
Certificate serial: 01A01567EE2BD7EDFF3B7B36944A7D48D197
Authority key identifier: 8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/zgfGzzEa1O2bUfc-S2mHvFXi2oY.roa
Signing time: Tue 18 Aug 2026 15:05:27 +0000
ROA not before: Tue 18 Aug 2026 15:05:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202759
IP address blocks: 141.0.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:15:67:ee:2b:d7:ed:ff:3b:7b:36:94:4a:7d:48:d1:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd802512ccb745b2a1b8f315714ebe39395403e
Validity
Not Before: Aug 18 15:05:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ce07c6cf311ad4ed9b51f73e4b6987bc55e2da86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9a:33:9d:0e:3b:d0:e0:00:a9:ec:9a:ea:9f:
09:86:7c:04:2a:94:03:eb:7c:7d:b1:5a:14:17:e6:
ec:b1:75:fd:c7:95:60:86:84:ae:37:dd:93:c8:3a:
85:48:a7:c7:f2:86:aa:d2:6b:34:9a:89:a8:4d:65:
e0:61:3c:b7:68:5a:24:23:86:f8:bc:4b:09:9c:ff:
95:dc:9c:d9:e9:41:72:e0:65:29:c7:1f:cc:d4:12:
9b:d6:99:7e:77:c8:de:a3:0c:c8:55:9b:46:d0:5f:
5a:72:8b:d1:25:e0:05:23:14:f8:7c:08:42:b7:33:
e9:fd:72:c7:a7:93:77:63:d5:c4:53:66:29:93:2a:
51:fa:31:7c:de:8f:3a:c1:6c:0d:36:c5:4c:b6:26:
0e:78:98:b4:69:f6:b7:29:a9:0b:9f:74:c7:18:6d:
3d:dc:a3:1f:88:6c:f2:4c:14:c4:64:e3:73:93:13:
79:66:0c:63:99:4b:28:e6:2a:2d:30:b5:59:ba:c1:
aa:98:38:dd:f5:c5:6f:35:e1:8c:bd:e1:f4:4b:43:
21:28:26:af:21:f6:11:57:2e:83:f5:86:d4:99:d0:
e2:e0:31:9d:8b:f0:aa:d2:3f:a1:2e:ac:87:bc:7a:
dc:65:b9:b7:54:bc:4b:6a:43:c2:b3:e0:0b:aa:b1:
af:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:07:C6:CF:31:1A:D4:ED:9B:51:F7:3E:4B:69:87:BC:55:E2:DA:86
X509v3 Authority Key Identifier:
keyid:8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/zgfGzzEa1O2bUfc-S2mHvFXi2oY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.0.187.0/24
Signature Algorithm: sha256WithRSAEncryption
04:41:a9:67:6b:79:91:a9:54:32:3a:eb:1b:69:9d:ad:66:6b:
db:40:28:24:e8:73:2c:04:79:be:39:86:73:30:8d:a3:60:bf:
e1:8a:9c:b3:fa:af:17:cc:9f:62:f9:a7:7e:f6:8d:1a:10:d0:
88:07:2c:0b:e7:2f:10:c3:d4:3b:cb:56:5b:f9:66:ef:95:39:
13:4a:02:95:44:bd:d9:12:32:76:4a:7d:7d:0e:5c:3d:b1:79:
93:7c:ce:cd:ce:3a:48:69:3a:31:f5:ac:5c:d4:44:f3:8a:55:
75:b4:db:d2:4e:98:64:1a:43:4e:a6:ae:5d:63:71:d8:24:02:
f1:1d:5d:2c:01:09:8b:9f:05:a1:d4:f1:3e:95:4b:7c:28:21:
7f:67:73:99:36:59:17:cd:c1:46:04:28:51:a0:11:89:33:ac:
19:a7:58:fa:62:ce:41:a3:7a:93:a9:db:4f:ad:1b:e6:7d:ce:
92:de:e8:94:0f:64:3e:49:56:55:14:47:31:74:65:14:c0:c1:
19:1f:1e:d3:d3:bb:2e:57:e6:f8:15:b0:f1:8d:09:f6:ab:59:
99:8f:6f:a7:dc:ef:72:ad:a6:7e:29:a4:54:38:e2:bb:49:4a:
d6:64:b3:d7:18:e7:14:d3:1e:e9:16:36:89:d7:5b:6a:f2:7b:
3e:80:f4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:51:54 2026 by rpki-client