Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/Z15H2A8imrxH1p9HbxhPoKAu68A.roa
File: Z15H2A8imrxH1p9HbxhPoKAu68A.roa (raw, json)
Hash identifier: css+XRNCUvk1FMrslfWIDxr5xIpejly6r5FZavKRPZE=
Subject key identifier: 67:5E:47:D8:0F:22:9A:BC:47:D6:9F:47:6F:18:4F:A0:A0:2E:EB:C0
Certificate issuer: /CN=6c903c1a2e906ed8cd2e362ccc67df00ade1b825
Certificate serial: 019DCCB105AC4825DF5FD98C91F4FEFA5496
Authority key identifier: 6C:90:3C:1A:2E:90:6E:D8:CD:2E:36:2C:CC:67:DF:00:AD:E1:B8:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJA8Gi6QbtjNLjYszGffAK3huCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/Z15H2A8imrxH1p9HbxhPoKAu68A.roa
Signing time: Mon 27 Apr 2026 02:07:26 +0000
ROA not before: Mon 27 Apr 2026 02:07:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42837
IP address blocks: 193.34.225.0/24 maxlen: 24
194.107.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bJA8Gi6QbtjNLjYszGffAK3huCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 13:17:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:b1:05:ac:48:25:df:5f:d9:8c:91:f4:fe:fa:54:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c903c1a2e906ed8cd2e362ccc67df00ade1b825
Validity
Not Before: Apr 27 02:07:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=675e47d80f229abc47d69f476f184fa0a02eebc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:da:5e:44:07:0e:df:ab:ee:ef:8e:76:a7:1f:
42:aa:a0:88:6f:da:9a:d9:ef:8b:a2:cd:cb:10:05:
2e:ea:29:a5:41:1c:10:23:70:eb:45:89:ee:38:50:
03:4a:71:77:67:c7:f1:55:3e:08:88:18:05:58:8f:
ab:bf:b9:10:58:7e:84:9e:1d:00:2e:a6:d4:3c:af:
7f:43:da:35:2d:81:ce:f6:42:15:5a:35:b3:c9:4c:
e1:77:39:58:c9:92:5a:c6:64:94:0b:90:ed:f4:43:
4e:dd:53:79:92:9e:14:de:66:bc:cb:de:12:2f:7f:
c9:b5:e6:75:80:01:e1:7e:2f:b7:6a:2d:2a:3f:b3:
f0:d9:0d:d0:b3:2d:fb:ce:d6:f3:02:7f:26:66:82:
e2:bb:18:c0:88:4f:3b:91:55:19:6f:0f:0b:f7:30:
f6:bc:05:65:72:c1:3e:ef:2b:f8:d0:c9:34:f4:32:
ca:bd:2b:63:b7:4c:ab:b6:08:c3:8e:3e:a3:78:69:
13:ac:ca:d8:e3:65:ba:9c:d4:19:02:89:fa:d1:7c:
f3:16:73:6c:35:00:a7:20:7e:e8:f7:6a:39:13:50:
ae:ae:14:8b:e9:26:1a:60:2d:85:fb:ab:02:db:d6:
8e:9d:0d:87:ee:38:fa:80:8e:ad:8a:c7:72:25:d0:
6d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:5E:47:D8:0F:22:9A:BC:47:D6:9F:47:6F:18:4F:A0:A0:2E:EB:C0
X509v3 Authority Key Identifier:
keyid:6C:90:3C:1A:2E:90:6E:D8:CD:2E:36:2C:CC:67:DF:00:AD:E1:B8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJA8Gi6QbtjNLjYszGffAK3huCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/Z15H2A8imrxH1p9HbxhPoKAu68A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.225.0/24
194.107.125.0/24
Signature Algorithm: sha256WithRSAEncryption
12:0b:5c:1a:7d:b0:40:3e:1f:be:5d:c8:86:3f:af:97:3e:e6:
5f:83:1f:e0:d6:26:92:1f:12:79:72:c5:bd:33:97:7b:3c:88:
19:c6:37:d5:55:1b:25:15:3d:1d:2d:75:77:3a:81:54:a9:d9:
1e:ea:5c:6a:2e:ea:89:e9:23:14:9e:08:ba:dd:37:03:cc:c4:
1d:72:33:c2:5c:12:8c:bc:fd:a6:b8:06:68:79:9d:74:30:9e:
26:ac:f9:4a:ba:99:ae:f7:4c:68:fe:a4:3c:08:04:c6:e0:23:
67:6a:86:b5:08:c5:e4:48:9d:63:a5:9d:21:d2:a1:ac:4e:0b:
ee:6a:c9:3f:ff:0c:89:8d:62:bc:aa:f4:09:3f:69:dd:49:4a:
7a:9b:12:00:3f:3c:a0:21:57:83:45:01:17:12:f6:ca:15:2c:
7e:ac:f8:61:56:17:57:d9:b7:c7:fb:9e:fc:7b:ba:51:83:95:
5d:6c:ed:8c:83:bf:5a:9f:5f:78:a2:22:59:33:31:e7:44:67:
42:34:51:12:0d:59:da:37:c9:f8:0a:c4:f7:ab:a0:cc:09:42:
29:15:98:7b:ee:1f:9d:4f:70:fc:4d:df:42:19:ee:ac:e3:5c:
90:5d:fa:fd:67:f6:91:b1:c2:56:36:63:a9:6b:a3:70:15:3b:
71:dc:ef:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 23:12:58 2026 by rpki-client