Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/Zs-xR6bz0aDcX2FXhq0rr62PmYs.roa
File: Zs-xR6bz0aDcX2FXhq0rr62PmYs.roa (raw, json)
Hash identifier: FHW9PNrXaAk17yVaUaDRlPcw+vmMTTkc0xlRD3/qYHw=
Subject key identifier: 66:CF:B1:47:A6:F3:D1:A0:DC:5F:61:57:86:AD:2B:AF:AD:8F:99:8B
Certificate issuer: /CN=d062cf807a56b771a5f42cc189af2d631eb5aaec
Certificate serial: 01A013D882D60FB9433C931C336790034329
Authority key identifier: D0:62:CF:80:7A:56:B7:71:A5:F4:2C:C1:89:AF:2D:63:1E:B5:AA:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/Zs-xR6bz0aDcX2FXhq0rr62PmYs.roa
Signing time: Tue 18 Aug 2026 07:49:11 +0000
ROA not before: Tue 18 Aug 2026 07:49:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204203
IP address blocks: 193.177.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 04:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:13:d8:82:d6:0f:b9:43:3c:93:1c:33:67:90:03:43:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d062cf807a56b771a5f42cc189af2d631eb5aaec
Validity
Not Before: Aug 18 07:49:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=66cfb147a6f3d1a0dc5f615786ad2bafad8f998b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:17:8a:3f:2e:ab:af:af:22:07:e1:81:cd:92:
10:a6:1b:39:41:e4:3d:ef:ff:3d:94:fd:52:8e:4c:
43:9e:d2:1a:2e:e3:ce:3d:d5:ca:5e:df:31:1d:aa:
d7:98:7d:a8:c0:b6:a6:4c:67:c0:82:43:ad:cc:a9:
bc:ee:ee:fd:46:30:ae:f4:91:28:1e:0d:40:d9:bc:
e9:78:2e:0c:64:5c:1f:28:51:b9:47:af:5a:af:35:
21:10:63:3d:2b:b3:1c:2c:67:9e:fd:2c:ff:04:4e:
f8:72:7a:16:7a:6f:a7:a4:db:d3:8b:d8:47:72:70:
70:b1:08:cf:51:5f:d8:24:a8:ee:9a:3a:13:eb:d0:
7d:15:f7:d0:20:c5:21:55:26:97:e0:68:78:50:61:
79:e0:c0:b3:4f:86:fe:de:5d:83:a4:53:d1:9a:8a:
a7:6e:07:2b:69:1b:5e:00:d8:11:85:dd:cc:ad:14:
5d:71:91:06:1f:d4:46:02:c9:66:33:f0:9b:22:99:
de:e2:5d:5a:fb:2e:31:c7:17:49:48:7a:ec:b5:17:
ea:f3:c5:81:1c:73:75:1a:9f:47:c9:20:fc:0a:a6:
1e:72:96:fd:bf:36:14:0e:7a:40:2e:2c:ea:16:ff:
32:0f:66:03:dc:4a:54:16:42:5f:7d:57:56:b9:4d:
25:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:CF:B1:47:A6:F3:D1:A0:DC:5F:61:57:86:AD:2B:AF:AD:8F:99:8B
X509v3 Authority Key Identifier:
keyid:D0:62:CF:80:7A:56:B7:71:A5:F4:2C:C1:89:AF:2D:63:1E:B5:AA:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/Zs-xR6bz0aDcX2FXhq0rr62PmYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.177.245.0/24
Signature Algorithm: sha256WithRSAEncryption
63:98:5a:b8:c9:c1:f8:fe:9e:c5:b4:6b:66:d0:2b:c3:aa:dd:
bf:e3:1e:f8:af:a0:17:e3:cf:39:07:65:7e:2b:d0:e1:31:59:
70:11:58:58:74:b9:55:58:ff:a9:d1:84:5a:1a:68:ed:df:88:
ed:51:01:d4:37:68:ff:d1:31:b5:4d:af:79:07:44:dd:32:2f:
03:60:52:86:2e:10:0d:d2:57:55:21:fc:46:6f:8b:d4:99:33:
74:81:0d:13:74:fd:34:37:e8:9e:ba:5e:d8:e5:af:bc:24:51:
46:14:73:d0:2e:de:d6:91:08:14:9f:3f:d2:eb:a5:52:16:77:
d2:32:b8:37:98:18:15:32:da:f0:61:be:ef:f9:8a:f6:f7:65:
fc:7a:83:db:8d:84:b5:5b:4c:79:c6:8a:4b:43:c9:ff:00:1f:
6e:07:07:8a:11:c9:28:61:4f:c8:92:48:68:03:5d:31:02:12:
12:e1:2c:4f:d2:26:04:39:36:d8:50:31:c8:7f:ba:13:ed:78:
8f:df:e9:7c:8c:0e:96:a5:be:41:b4:97:0b:14:4f:21:6b:d2:
79:bb:4c:a5:fc:9c:d3:71:56:b2:48:31:ab:9f:6d:b6:74:ba:
7a:66:a0:78:fa:d1:a4:8e:d8:e0:e6:0e:73:e4:e6:e9:9e:19:
82:21:53:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:03:10 2026 by rpki-client