Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/ZCawfFiEm8MWLQeXXIOT_dxU1U4.roa
File: ZCawfFiEm8MWLQeXXIOT_dxU1U4.roa (raw, json)
Hash identifier: 4aycbuOygi1n+QX+zF05/A01dJNe+YAcN7Ic0dCYPTc=
Subject key identifier: 64:26:B0:7C:58:84:9B:C3:16:2D:07:97:5C:83:93:FD:DC:54:D5:4E
Certificate issuer: /CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342
Certificate serial: 01A0009126E65ACEB2B7688EC00ED03CCAC8
Authority key identifier: DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/ZCawfFiEm8MWLQeXXIOT_dxU1U4.roa
Signing time: Fri 14 Aug 2026 13:58:27 +0000
ROA not before: Fri 14 Aug 2026 13:58:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211443
IP address blocks: 94.26.32.0/24 maxlen: 24
94.26.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:91:26:e6:5a:ce:b2:b7:68:8e:c0:0e:d0:3c:ca:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342
Validity
Not Before: Aug 14 13:58:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6426b07c58849bc3162d07975c8393fddc54d54e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cf:f7:8a:b2:e8:99:5c:96:d3:4a:58:77:7e:
d0:7d:a9:d7:cd:71:f9:88:58:ce:8a:64:62:81:f3:
a0:59:ed:8e:49:46:eb:b9:c8:cc:fb:51:6a:1e:9f:
1b:72:14:d0:45:5d:86:5e:5e:70:91:02:2d:b6:c9:
b3:13:3a:d9:df:6e:c0:22:07:d1:5c:ca:fc:43:db:
1b:c7:62:cf:1a:54:07:64:3a:27:54:e0:2d:c2:80:
0e:ee:7c:8c:21:36:b1:f3:dc:b4:8a:da:17:94:5f:
07:7d:81:d5:26:93:7d:c7:33:c8:f0:ae:b6:ba:68:
c0:c4:05:6c:fe:45:62:04:30:18:ad:5c:c4:6b:94:
ad:f4:ff:9b:26:0f:f1:97:ed:cf:61:73:79:ed:1f:
2d:fb:c8:83:f6:a1:45:4c:2f:50:f3:ff:a0:bd:e1:
ee:11:d9:22:4e:bb:f7:c8:3f:12:07:b7:b1:03:67:
a9:f0:06:04:64:d2:b8:cb:9a:22:09:75:9e:4a:90:
0b:57:ac:62:da:81:f3:d7:fe:3f:03:06:c3:c2:97:
f5:63:ac:99:05:0b:5e:04:b5:d1:fc:6d:7c:cd:ed:
86:4a:04:9d:8a:81:47:90:cc:3b:59:d1:07:90:56:
e9:33:84:55:30:91:d8:53:71:91:8c:81:6f:af:06:
b7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:26:B0:7C:58:84:9B:C3:16:2D:07:97:5C:83:93:FD:DC:54:D5:4E
X509v3 Authority Key Identifier:
keyid:DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/ZCawfFiEm8MWLQeXXIOT_dxU1U4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.26.32.0/24
94.26.36.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:04:cc:85:ce:11:64:80:00:14:6c:c0:cf:dc:cf:1e:32:df:
51:7d:a6:bc:64:3f:18:b6:4e:5a:34:10:5d:b0:0e:c1:f2:00:
bd:a0:cf:fc:b4:0a:fb:92:0e:c9:6e:a2:22:fe:2e:95:e0:4f:
62:f1:65:d6:80:bc:0e:d0:4e:2e:ed:9f:6c:a8:f3:35:50:19:
40:16:80:06:13:e3:af:6a:c5:81:4d:2b:85:61:4e:f8:bd:8d:
9a:71:29:d1:30:fd:e6:4f:fb:34:a8:44:91:20:6d:80:b4:00:
e6:37:dd:0e:b1:2b:e4:58:4c:ae:c5:fe:d0:57:f2:60:e0:0b:
14:ee:77:67:e4:a6:b3:2b:70:c7:b8:2f:2e:0a:c4:92:67:ad:
cd:12:63:1c:0d:0f:95:ba:81:cb:e7:24:04:d6:a4:85:fd:5b:
d6:4b:a1:ae:8d:12:a6:e4:bb:fa:8d:88:ac:74:8e:85:2e:31:
9b:0e:48:53:54:c4:1f:f2:f5:20:6e:78:1d:bf:d2:00:bb:c6:
e3:ac:a7:78:51:e5:2c:c5:f9:59:cc:c2:de:a9:1e:e4:aa:0c:
91:95:e2:aa:7e:26:7b:bd:ce:29:7e:be:15:15:14:35:99:02:
b3:6f:0f:22:8f:17:2f:53:d1:26:fd:b3:37:74:97:3b:c2:c4:
73:30:0e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:36:22 2026 by rpki-client