Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/z6SO2tJUlnIrONOK_zqkp4ZdPp0.roa
File: z6SO2tJUlnIrONOK_zqkp4ZdPp0.roa (raw, json)
Hash identifier: lo78lRvLy8MXZasgpvKxTb4n7+P6rOCdlzO/gLJeg+E=
Subject key identifier: CF:A4:8E:DA:D2:54:96:72:2B:38:D3:8A:FF:3A:A4:A7:86:5D:3E:9D
Certificate issuer: /CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
Certificate serial: 01A019DAFBA89042FDBDE2F8C7F1040E415A
Authority key identifier: 14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/z6SO2tJUlnIrONOK_zqkp4ZdPp0.roa
Signing time: Wed 19 Aug 2026 11:49:36 +0000
ROA not before: Wed 19 Aug 2026 11:49:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39855
IP address blocks: 195.226.205.0/24 maxlen: 24
213.249.73.0/24 maxlen: 24
213.249.74.0/24 maxlen: 24
213.249.76.0/24 maxlen: 24
213.249.77.0/24 maxlen: 24
213.249.78.0/24 maxlen: 24
213.249.81.0/24 maxlen: 24
213.249.82.0/24 maxlen: 24
213.249.83.0/24 maxlen: 24
213.249.85.0/24 maxlen: 24
213.249.86.0/24 maxlen: 24
213.249.87.0/24 maxlen: 24
213.249.89.0/24 maxlen: 24
213.249.90.0/24 maxlen: 24
213.249.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:19:da:fb:a8:90:42:fd:bd:e2:f8:c7:f1:04:0e:41:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
Validity
Not Before: Aug 19 11:49:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cfa48edad25496722b38d38aff3aa4a7865d3e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1f:88:cd:72:a0:82:57:6f:a7:b5:70:9a:d5:
3a:20:17:b2:c4:17:b3:df:c9:e7:ec:d7:b7:eb:0a:
0b:9b:6c:e9:84:11:a2:11:f3:cb:9f:9a:f1:6c:4f:
22:a9:3c:84:75:4e:6c:fb:90:d0:f1:70:c2:7b:1a:
c0:a5:8c:9e:65:3c:12:52:50:c4:7f:54:36:2d:00:
bd:c1:3b:66:bf:da:98:75:75:a6:e9:af:77:98:20:
e1:db:d1:cb:77:94:4b:7b:48:59:bb:de:05:1d:6c:
c5:4e:97:20:f7:f6:51:54:69:0b:68:55:b1:8b:72:
10:d7:b0:78:11:c6:31:9b:c2:42:a5:10:a4:ff:e6:
ad:25:3b:07:fb:c6:59:1e:af:88:de:41:8e:58:5c:
d3:8f:77:4f:09:75:5e:f8:d4:98:6f:78:66:99:a2:
c0:0c:a6:c7:6c:8c:e9:49:bd:0d:2d:a7:8f:02:80:
10:f1:d0:28:96:e7:c8:ab:b1:85:57:3e:24:e6:a0:
17:9b:e9:37:f8:f2:57:34:08:46:5d:84:2c:e2:60:
e8:82:1e:98:ed:f3:ae:09:83:26:b7:6d:36:91:b4:
ea:41:e6:24:7c:40:96:0c:56:4b:fb:ff:8b:91:e0:
44:15:c7:3b:ee:69:aa:07:fc:b5:1e:4d:fb:e3:a1:
ec:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A4:8E:DA:D2:54:96:72:2B:38:D3:8A:FF:3A:A4:A7:86:5D:3E:9D
X509v3 Authority Key Identifier:
keyid:14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/z6SO2tJUlnIrONOK_zqkp4ZdPp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.226.205.0/24
213.249.73.0-213.249.74.255
213.249.76.0-213.249.78.255
213.249.81.0-213.249.83.255
213.249.85.0-213.249.87.255
213.249.89.0-213.249.91.255
Signature Algorithm: sha256WithRSAEncryption
64:d9:fb:cb:56:38:68:f6:78:39:95:dd:c6:e2:04:ca:f2:3a:
bd:33:22:3e:b7:35:4a:e1:39:56:d3:49:d4:0f:7d:7a:87:b8:
14:11:68:52:b6:8e:3d:34:ba:4b:8f:39:98:a3:06:34:5a:c9:
a4:78:93:bc:c3:d6:5f:9f:3a:15:5e:9b:5c:48:17:2b:02:fd:
4a:50:cf:ad:08:d2:04:61:fe:7a:13:26:89:e5:5b:c5:ee:95:
5e:46:0d:ed:c7:8e:6e:59:97:20:82:67:a5:f5:89:c8:85:95:
67:2e:56:3b:34:fd:b7:b6:f7:ff:0a:df:1f:23:97:cf:f8:56:
97:8b:fa:58:13:62:17:fe:63:8f:51:ac:9f:c5:7f:da:b6:73:
87:03:62:3f:96:1b:d6:54:97:02:25:aa:96:98:4b:c2:f1:52:
88:bc:a5:83:3d:9e:18:3e:a7:c3:1e:9f:53:0c:fa:36:3a:ee:
1d:8f:df:ad:67:4c:43:be:ba:d9:61:60:5a:d6:24:18:e6:05:
c1:13:06:5b:a5:6c:a9:e5:64:0b:0e:10:62:ea:5a:be:a8:a2:
4d:6a:e3:53:f2:60:38:c8:e6:7f:16:7d:90:15:ce:13:dd:46:
6e:b9:b5:0c:34:ec:05:cd:67:49:f1:ae:cc:76:bf:6f:69:25:
80:4c:97:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:36:10 2026 by rpki-client