Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/zOPeWkCuS8JUBKa1vuwuZvTP_Ho.roa
File: zOPeWkCuS8JUBKa1vuwuZvTP_Ho.roa (raw, json)
Hash identifier: naZhH7fX9yCGlkQixJYSLA7X9AZuM2jPZyAz9ulFItY=
Subject key identifier: CC:E3:DE:5A:40:AE:4B:C2:54:04:A6:B5:BE:EC:2E:66:F4:CF:FC:7A
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 019CBD5AF9AD805A8AC1D54F9DA34184DF1A
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/zOPeWkCuS8JUBKa1vuwuZvTP_Ho.roa
Signing time: Thu 05 Mar 2026 09:36:21 +0000
ROA not before: Thu 05 Mar 2026 09:36:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197450
IP address blocks: 195.178.137.0/24 maxlen: 24
195.178.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 16:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bd:5a:f9:ad:80:5a:8a:c1:d5:4f:9d:a3:41:84:df:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Mar 5 09:36:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cce3de5a40ae4bc25404a6b5beec2e66f4cffc7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4d:0c:b7:a2:b7:2b:a8:90:f8:3c:9f:5f:7d:
a4:38:d7:eb:83:e2:15:4b:cc:22:f0:f5:05:64:55:
0c:28:82:0c:d6:df:c3:21:3d:f5:a1:35:bd:44:e3:
de:dd:a0:2d:33:c6:9a:09:8f:92:d3:b9:d6:7a:d1:
24:c8:6e:f9:13:31:c6:cb:7e:07:ce:3a:e8:1c:cd:
52:0a:f6:0c:b4:28:84:66:4c:0f:eb:51:ec:44:05:
15:d6:5f:39:7e:cd:f4:b1:f2:c5:0b:18:58:b7:16:
eb:03:05:ce:c1:6c:d6:67:ed:40:1f:62:38:3e:bc:
83:d9:07:60:60:20:e2:38:16:f6:c6:37:cb:93:a1:
d4:21:71:84:f0:92:2a:8b:c0:61:50:37:1e:e8:b4:
49:f1:c9:f6:f2:f8:55:cb:99:57:1e:9a:25:40:17:
9d:e4:b8:cb:ba:9a:00:14:83:78:a7:7d:90:d9:58:
09:12:22:f3:2d:5c:2d:83:a3:2e:e2:ec:d6:be:f9:
c0:1e:6c:77:a6:4a:d4:97:2e:3c:65:47:ed:04:c5:
f1:3e:5a:c4:41:92:c7:7d:3b:ba:a8:6a:0c:24:58:
21:15:ea:69:d6:f6:22:17:2b:0a:81:26:25:4b:a8:
26:e5:9a:31:d4:8a:75:2b:49:89:db:bc:c7:c2:a8:
e8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E3:DE:5A:40:AE:4B:C2:54:04:A6:B5:BE:EC:2E:66:F4:CF:FC:7A
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/zOPeWkCuS8JUBKa1vuwuZvTP_Ho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.137.0-195.178.138.255
Signature Algorithm: sha256WithRSAEncryption
69:75:3b:40:55:25:dd:38:13:21:18:0f:e9:62:69:49:99:fe:
c0:58:a4:ba:9b:1f:7b:c1:15:57:65:09:ea:7e:53:ed:c9:be:
9f:58:fc:fb:38:04:d8:ae:83:aa:ba:43:57:18:78:ab:62:85:
88:ac:32:86:a9:ce:f0:dd:15:04:77:3b:d7:40:7f:38:ac:c1:
54:0b:57:6d:e3:8b:a4:13:93:22:f4:89:d5:2b:ef:f9:92:1e:
91:08:16:cc:ce:3c:6b:93:f5:62:ae:86:02:21:53:fe:36:4d:
29:a2:6b:d6:31:bb:fa:b0:6f:3a:72:f8:26:80:48:8f:ee:0a:
03:69:bf:85:1d:8a:49:6b:9b:1a:da:e2:e4:29:39:18:d0:56:
e0:d5:60:fe:ba:6f:99:2e:bd:20:8c:1d:57:e7:93:ce:4c:c1:
4b:d4:09:9b:4e:d9:11:b9:c4:48:95:c4:48:90:95:72:d9:d7:
b9:2f:44:4e:fb:05:3f:66:e6:6f:35:a7:fc:da:09:01:06:91:
1a:36:ea:d7:a8:40:c2:5e:75:d4:47:a4:6c:ff:93:5f:87:3f:
88:4c:68:3a:d5:eb:97:c1:bc:e5:99:f6:42:d9:9c:17:c0:c9:
18:3c:69:ee:5c:a0:47:e7:d2:a4:98:cc:45:66:35:23:69:dd:
05:51:29:59
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZy9WvmtgFqKwdVPnaNBhN8aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw
OWIzNDYwHhcNMjYwMzA1MDkzNjIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjY2UzZGU1YTQwYWU0YmMyNTQwNGE2YjViZWVjMmU2NmY0Y2ZmYzdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvU0Mt6K3K6iQ+DyfX32kONfrg+IV
S8wi8PUFZFUMKIIM1t/DIT31oTW9ROPe3aAtM8aaCY+S07nWetEkyG75EzHGy34H
zjroHM1SCvYMtCiEZkwP61HsRAUV1l85fs30sfLFCxhYtxbrAwXOwWzWZ+1AH2I4
PryD2QdgYCDiOBb2xjfLk6HUIXGE8JIqi8BhUDce6LRJ8cn28vhVy5lXHpolQBed
5LjLupoAFIN4p32Q2VgJEiLzLVwtg6Mu4uzWvvnAHmx3pkrUly48ZUftBMXxPlrE
QZLHfTu6qGoMJFghFepp1vYiFysKgSYlS6gm5Zox1Ip1K0mJ27zHwqjovwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFMzj3lpArkvCVASmtb7sLmb0z/x6MB8GA1UdIwQY
MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt
MDNmNGM3MTEzYzM0LzEvek9QZVdrQ3VTOEpVQkthMXZ1d3VadlRQX0hvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0
LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADDsokD
BADDsoowDQYJKoZIhvcNAQELBQADggEBAGl1O0BVJd04EyEYD+liaUmZ/sBYpLqb
H3vBFVdlCep+U+3Jvp9Y/Ps4BNiug6q6Q1cYeKtihYisMoapzvDdFQR3O9dAfzis
wVQLV23ji6QTkyL0idUr7/mSHpEIFszOPGuT9WKuhgIhU/42TSmia9Yxu/qwbzpy
+CaASI/uCgNpv4Udiklrmxra4uQpORjQVuDVYP66b5kuvSCMHVfnk85MwUvUCZtO
2RG5xEiVxEiQlXLZ17kvRE77BT9m5m81p/zaCQEGkRo26teoQMJeddRHpGz/k1+H
P4hMaDrV65fBvOWZ9kLZnBfAyRg8ae5coEfn0qSYzEVmNSNp3QVRKVk=
-----END CERTIFICATE-----
Generated at Sun Mar 8 01:35:35 2026 by rpki-client