Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/zIbJINmlNMbydMyHdFKjYjledsU.roa
File: zIbJINmlNMbydMyHdFKjYjledsU.roa (raw, json)
Hash identifier: 0BP9/A/nS++GLnzB9nZAgAW2Y+hvfw4359wNr288whk=
Subject key identifier: CC:86:C9:20:D9:A5:34:C6:F2:74:CC:87:74:52:A3:62:39:5E:76:C5
Certificate issuer: /CN=10759c6a62e278da8311afec8f7677c41363d1f8
Certificate serial: 019D68317D7732FE4258ED4CA74393521480
Authority key identifier: 10:75:9C:6A:62:E2:78:DA:83:11:AF:EC:8F:76:77:C4:13:63:D1:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHWcamLieNqDEa_sj3Z3xBNj0fg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/zIbJINmlNMbydMyHdFKjYjledsU.roa
Signing time: Tue 07 Apr 2026 13:46:07 +0000
ROA not before: Tue 07 Apr 2026 13:46:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396982
IP address blocks: 193.39.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHWcamLieNqDEa_sj3Z3xBNj0fg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Apr 2026 15:15:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:68:31:7d:77:32:fe:42:58:ed:4c:a7:43:93:52:14:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10759c6a62e278da8311afec8f7677c41363d1f8
Validity
Not Before: Apr 7 13:46:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cc86c920d9a534c6f274cc877452a362395e76c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:67:fc:f7:19:ef:7c:e9:f5:2d:ec:03:15:45:
11:e4:7f:9f:64:1a:59:42:ab:8e:bb:93:47:8d:a0:
f1:75:f5:65:83:14:a0:f6:85:37:86:91:9a:f3:8d:
30:a8:3c:bf:87:7b:70:fc:a7:1f:6a:53:75:26:23:
e2:93:78:ac:a3:ad:97:c3:c7:2b:c2:e0:2e:c6:c4:
aa:2d:05:c8:29:92:6d:c8:76:5d:73:1b:77:52:15:
3c:97:5a:a8:a8:56:7e:89:9d:24:b6:86:ae:c6:43:
ee:c1:7b:4d:1f:c7:ec:4b:f9:17:f1:de:89:95:d5:
af:ee:d0:6a:22:07:98:42:52:eb:c4:ca:19:bf:5e:
0d:75:ca:00:49:3b:e1:a1:0a:54:5a:1c:c8:35:fa:
71:45:33:a0:7a:85:a5:96:4b:17:18:2e:9e:44:b7:
21:00:ee:14:6d:40:8b:5b:fb:e4:38:69:37:ab:10:
d7:eb:c0:07:eb:71:02:4b:44:56:aa:98:6c:e7:43:
0a:4e:8e:21:b8:5b:03:0e:3c:98:1a:00:e2:60:25:
ad:42:22:10:37:ed:2c:44:4a:5b:72:3a:38:d6:e2:
0e:d3:c2:a6:27:bd:57:21:a4:27:e0:95:28:8b:69:
57:b3:ab:2e:94:f7:e6:6c:b9:88:a0:48:a1:4c:ed:
14:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:86:C9:20:D9:A5:34:C6:F2:74:CC:87:74:52:A3:62:39:5E:76:C5
X509v3 Authority Key Identifier:
keyid:10:75:9C:6A:62:E2:78:DA:83:11:AF:EC:8F:76:77:C4:13:63:D1:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHWcamLieNqDEa_sj3Z3xBNj0fg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/zIbJINmlNMbydMyHdFKjYjledsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.39.108.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:41:dc:8e:7c:91:e1:d2:f6:ff:57:78:0c:0f:eb:12:5d:01:
10:ef:44:c6:03:75:8c:b6:ce:13:e6:27:ad:fc:e9:33:53:c3:
07:f2:9f:05:a4:05:6a:d2:8e:52:cb:fc:f3:6e:a2:38:2d:8d:
0c:f7:f4:40:88:19:97:4b:28:40:5a:b7:59:06:cf:59:c4:a8:
8c:06:db:16:1f:50:7a:4c:43:0c:e0:69:86:bf:10:b6:21:e4:
61:50:29:15:02:18:b7:58:73:30:aa:c2:a8:9e:b4:a5:79:0e:
38:d9:d9:ed:9a:f2:4b:a1:aa:0e:51:87:5a:61:a4:cb:18:d6:
5d:93:96:66:76:60:8d:ed:69:95:e6:ab:5b:7e:23:44:4f:40:
02:ca:4f:14:11:8b:16:21:1e:33:3c:cb:83:21:40:8b:9a:4a:
01:a6:ec:39:4e:46:ae:48:b8:6d:49:06:cb:ab:a2:32:29:20:
02:b9:15:59:e6:0c:79:09:ab:6e:12:16:59:5a:03:dc:12:71:
fd:d9:7c:0c:61:4f:fb:4f:f3:bf:40:b2:ce:49:32:9d:ca:06:
9f:04:b4:09:ac:92:58:82:36:3d:69:0a:35:e4:98:50:03:a8:
c5:6b:b2:4a:77:14:6d:0f:38:15:6a:88:98:76:5d:d1:28:d4:
7d:4d:68:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 18:57:22 2026 by rpki-client