Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/cZX0XiKgTVRStj-qdJuTen7BOJ0.roa
File: cZX0XiKgTVRStj-qdJuTen7BOJ0.roa (raw, json)
Hash identifier: EC0B5N4ujSfAORvQJwcrZWB4mhWoJIUXusoMRH6vkfU=
Subject key identifier: 71:95:F4:5E:22:A0:4D:54:52:B6:3F:AA:74:9B:93:7A:7E:C1:38:9D
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 01A01A73BD2F88BDE8E92F286D92F3F4B0C2
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/cZX0XiKgTVRStj-qdJuTen7BOJ0.roa
Signing time: Wed 19 Aug 2026 14:36:27 +0000
ROA not before: Wed 19 Aug 2026 14:36:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42007
IP address blocks: 193.46.57.0/24 maxlen: 24
194.31.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1a:73:bd:2f:88:bd:e8:e9:2f:28:6d:92:f3:f4:b0:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Aug 19 14:36:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7195f45e22a04d5452b63faa749b937a7ec1389d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4b:a5:1c:bf:4e:0c:0f:32:41:e3:2c:e2:1e:
5b:fd:02:ee:d6:ca:b4:d7:11:5c:91:65:0e:4f:ab:
63:41:06:b9:2a:2e:0c:c1:a8:95:f9:76:85:6c:b9:
40:e9:13:7f:a9:1c:bd:fb:7e:50:4a:31:c4:30:21:
7f:4d:13:a4:da:ed:9a:85:54:c5:7f:4d:72:4a:bb:
c2:df:42:c1:a4:ce:82:41:5d:90:98:31:48:42:4f:
43:a8:96:3e:45:a1:60:42:74:f4:8a:22:52:4f:da:
84:7b:4c:75:a6:fc:32:17:80:ca:d6:ec:9d:86:7c:
f1:6e:a0:c5:fa:38:61:5d:66:19:dd:17:26:d9:d8:
8b:ab:c8:d5:ab:05:74:b4:89:0d:d2:f7:0e:b6:87:
e9:eb:2c:3a:ac:91:ee:39:bf:6e:5f:95:b8:17:86:
bd:b9:62:d6:24:f3:7f:c3:43:b6:ba:fd:1b:cf:0d:
3e:9b:23:bc:f2:4e:8d:0f:66:d4:e0:b9:05:42:a5:
fc:44:a4:7d:e2:a7:24:63:47:ef:40:7c:ca:de:50:
9a:5d:5e:f5:5e:7a:da:0d:6b:00:13:c4:63:7d:71:
ca:28:80:17:45:f9:2f:1e:e4:cf:5a:e3:27:df:65:
be:65:7d:d2:a2:1b:16:25:7f:9f:f2:cd:2b:ff:58:
21:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:95:F4:5E:22:A0:4D:54:52:B6:3F:AA:74:9B:93:7A:7E:C1:38:9D
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/cZX0XiKgTVRStj-qdJuTen7BOJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.57.0/24
194.31.109.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:93:f8:43:6f:51:12:60:42:c0:fc:00:7e:fa:1d:d1:45:9a:
00:95:80:ed:78:e4:03:ca:66:b9:3d:1b:64:11:a1:ee:5e:9b:
d6:4a:e9:6c:b9:76:23:87:66:97:5a:45:b2:89:43:35:22:b9:
d0:b9:82:3e:c4:9b:c8:95:dd:ae:09:8b:67:81:70:0b:0e:2b:
c2:71:c8:97:76:a6:ed:c3:7a:f2:00:03:ff:9a:6d:83:d7:1e:
1b:b7:c9:52:3d:14:82:f6:9c:e3:14:dc:89:3a:9b:8c:76:b7:
9d:5c:f3:25:ab:88:62:db:a7:39:4e:b4:96:4d:c1:83:51:35:
50:30:57:c9:b6:38:e1:25:e5:dc:a5:f1:bc:53:80:49:00:bb:
2a:a1:43:bb:a8:06:e6:d1:72:a0:5f:fc:73:10:14:b0:70:fa:
e3:b4:2c:48:08:2b:53:c4:cb:5a:4e:0b:f2:63:4a:cd:3e:c1:
9d:dc:9a:ca:79:46:33:e2:67:54:e7:c6:14:ff:62:aa:79:c4:
33:33:69:ae:19:99:4c:bc:91:4f:23:8e:fc:8c:f2:43:ab:9a:
f7:16:55:37:3e:f7:bc:20:d1:f4:bd:39:ec:da:5f:90:e7:b5:
b8:ff:ec:e2:07:71:0d:4f:0f:f6:06:90:76:ee:68:1d:ce:69:
20:a4:09:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:56:15 2026 by rpki-client