Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/c5df57-b710-4625-aaad-5b2b63f39a9d/1/zKD_QXlY5SJsienk1dUc7X9NaJk.roa
File: zKD_QXlY5SJsienk1dUc7X9NaJk.roa (raw, json)
Hash identifier: 5vacZhq8qV7CLd2as53iXxi890VqIOuCkYUWEDGSk7E=
Subject key identifier: CC:A0:FF:41:79:58:E5:22:6C:89:E9:E4:D5:D5:1C:ED:7F:4D:68:99
Certificate issuer: /CN=bdc7926e0abeda6c8d72d1d190c2e7d9d00449d8
Certificate serial: 01A01F32A56DF69ABCC1BF61EEB65653B8E7
Authority key identifier: BD:C7:92:6E:0A:BE:DA:6C:8D:72:D1:D1:90:C2:E7:D9:D0:04:49:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vceSbgq-2myNctHRkMLn2dAESdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/c5df57-b710-4625-aaad-5b2b63f39a9d/1/zKD_QXlY5SJsienk1dUc7X9NaJk.roa
Signing time: Thu 20 Aug 2026 12:43:27 +0000
ROA not before: Thu 20 Aug 2026 12:43:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56664
IP address blocks: 192.162.192.0/22 maxlen: 22
192.162.192.0/24 maxlen: 24
192.162.193.0/24 maxlen: 24
192.162.194.0/24 maxlen: 24
192.162.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/c5df57-b710-4625-aaad-5b2b63f39a9d/1/vceSbgq-2myNctHRkMLn2dAESdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/c5df57-b710-4625-aaad-5b2b63f39a9d/1/vceSbgq-2myNctHRkMLn2dAESdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vceSbgq-2myNctHRkMLn2dAESdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1f:32:a5:6d:f6:9a:bc:c1:bf:61:ee:b6:56:53:b8:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdc7926e0abeda6c8d72d1d190c2e7d9d00449d8
Validity
Not Before: Aug 20 12:43:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cca0ff417958e5226c89e9e4d5d51ced7f4d6899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c2:90:01:24:65:dd:e7:97:7f:e5:3e:0f:9c:
a2:2f:77:7e:de:65:40:60:34:16:69:a4:64:49:23:
b0:4d:a9:1b:93:bb:75:64:07:8d:ef:19:6e:ef:94:
8f:af:63:6e:fe:a3:f8:43:77:36:68:fd:90:6d:a6:
84:a3:b1:09:50:a1:d8:c4:49:d2:a7:f3:28:6c:bd:
ce:a2:bf:28:2b:c1:fe:b1:8f:9c:5a:fe:ef:90:4a:
f3:91:ec:9c:ce:c1:a6:ce:77:e4:06:85:b7:50:04:
23:86:5c:3d:55:e6:38:a2:f8:d8:50:a3:ed:1b:94:
4c:00:cf:36:d9:1d:e3:1c:ef:eb:7f:1d:9d:a1:26:
56:a4:18:97:60:86:21:16:f4:3f:c7:26:b7:5d:89:
c8:9d:ae:5f:3c:b4:13:a3:03:28:56:16:4a:15:c0:
e1:8a:6c:eb:6e:57:4a:92:81:06:22:ec:3e:ea:bb:
31:fe:c2:77:16:d8:33:19:1a:f0:78:1c:f7:05:06:
89:a5:09:06:aa:41:3e:a9:d7:4e:00:d6:a2:bd:f4:
14:73:df:4d:17:50:ca:cc:51:e4:39:03:27:ad:5b:
a7:0a:5d:f6:73:71:bc:57:ac:f1:2d:da:93:e4:98:
38:41:03:90:31:fd:f0:b7:fb:66:b5:93:95:f2:dc:
c1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A0:FF:41:79:58:E5:22:6C:89:E9:E4:D5:D5:1C:ED:7F:4D:68:99
X509v3 Authority Key Identifier:
keyid:BD:C7:92:6E:0A:BE:DA:6C:8D:72:D1:D1:90:C2:E7:D9:D0:04:49:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vceSbgq-2myNctHRkMLn2dAESdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/c5df57-b710-4625-aaad-5b2b63f39a9d/1/zKD_QXlY5SJsienk1dUc7X9NaJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/c5df57-b710-4625-aaad-5b2b63f39a9d/1/vceSbgq-2myNctHRkMLn2dAESdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.162.192.0/22
Signature Algorithm: sha256WithRSAEncryption
85:d2:b6:74:fc:b1:ce:77:e0:77:c0:0b:86:5c:18:bf:b8:56:
b9:fe:66:3a:5c:45:93:89:3e:1e:b6:12:c5:d5:12:95:9c:cf:
b4:92:44:f1:a6:54:96:fd:59:3b:bb:9f:b8:ce:7c:2d:b1:a1:
06:87:f1:d4:26:40:c1:3b:21:63:c1:1e:b1:3a:f9:89:57:b2:
13:c8:35:74:59:dd:b4:25:21:11:17:be:b9:32:a0:46:36:6b:
f4:49:e1:18:05:2d:4d:98:ad:1c:c2:bf:bf:c8:e4:96:03:96:
04:31:4d:5e:cc:13:ad:38:e9:cf:8b:11:e7:aa:ac:d1:47:32:
b3:96:90:7d:65:62:73:c0:76:78:17:95:da:cf:7a:ad:9a:5a:
4e:a0:67:65:05:63:78:e5:f6:ef:c4:42:58:1b:0f:47:1c:49:
0b:27:c5:80:1c:d2:f7:86:06:bb:54:18:20:bc:d3:87:23:49:
fd:e7:66:79:35:a4:b0:5d:cb:7c:06:0d:d6:57:f2:e9:96:d0:
0b:65:62:87:af:a5:37:e6:12:5d:d0:6b:e2:83:a6:a8:a2:4d:
27:1a:3b:d3:cd:99:e0:e3:f2:1a:86:48:c0:f2:68:fc:a1:e3:
dc:17:8b:1a:e9:f2:01:a2:0a:fe:49:ad:21:d2:8b:92:d6:06:
93:34:21:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:54:12 2026 by rpki-client