Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/zeWF02aCzleQgf-hIq8EmONBsM0.roa
File: zeWF02aCzleQgf-hIq8EmONBsM0.roa (raw, json)
Hash identifier: NgjRpnjHsDK0AlYtPon/CZaRUIwEjjjw3YiYfip3i2o=
Subject key identifier: CD:E5:85:D3:66:82:CE:57:90:81:FF:A1:22:AF:04:98:E3:41:B0:CD
Certificate issuer: /CN=f7f4902d240b25d7eb77f4f02e24f233f44a9a13
Certificate serial: 01A178B7F8E9FEE83CDE66216B2927AE1096
Authority key identifier: F7:F4:90:2D:24:0B:25:D7:EB:77:F4:F0:2E:24:F2:33:F4:4A:9A:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9_SQLSQLJdfrd_TwLiTyM_RKmhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/zeWF02aCzleQgf-hIq8EmONBsM0.roa
Signing time: Mon 26 Oct 2026 14:58:05 +0000
ROA not before: Mon 26 Oct 2026 14:58:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209411
IP address blocks: 185.114.144.0/24 maxlen: 24
185.114.146.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/9_SQLSQLJdfrd_TwLiTyM_RKmhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/9_SQLSQLJdfrd_TwLiTyM_RKmhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9_SQLSQLJdfrd_TwLiTyM_RKmhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:b7:f8:e9:fe:e8:3c:de:66:21:6b:29:27:ae:10:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7f4902d240b25d7eb77f4f02e24f233f44a9a13
Validity
Not Before: Oct 26 14:58:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cde585d36682ce579081ffa122af0498e341b0cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8e:a6:c6:15:43:b0:83:83:02:e7:fd:1c:69:
5f:85:96:9a:e3:9b:00:49:b2:f6:6a:16:b8:0a:17:
d5:9f:e6:17:bc:8e:96:35:c8:e0:5b:23:fb:d6:ad:
ed:a0:3a:07:bd:9d:25:3f:a0:da:6d:b6:68:95:9f:
f9:e9:34:63:b3:46:a2:4a:1e:54:64:e3:b6:05:88:
1c:9b:40:a9:b0:ac:5d:9f:90:48:01:3d:e4:6b:8f:
37:5f:8e:51:84:d4:be:b6:60:45:06:4b:05:73:56:
16:14:83:db:32:7d:05:44:0c:32:fe:40:b0:67:aa:
e6:b4:f5:31:79:b9:49:55:7d:9c:13:15:5f:d6:9f:
ba:42:fe:90:df:fb:a1:46:b9:34:fe:ec:db:be:e9:
ea:ef:b2:b4:58:b5:e9:11:8e:84:26:b0:9e:89:24:
32:9a:54:15:2d:b7:cb:f5:5f:b6:84:3e:16:0c:85:
17:1b:ef:f5:a6:66:db:86:16:e9:88:a6:86:41:2b:
4b:d5:d8:59:e6:c1:48:69:d7:2c:08:4d:40:42:d4:
02:58:6a:35:45:55:93:21:1f:33:ea:df:39:a0:fc:
24:fc:a0:bc:b4:46:fc:ab:98:b3:1f:d7:1d:77:61:
dc:32:0c:2d:b6:fd:72:10:a5:2d:92:b6:84:1d:1b:
11:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E5:85:D3:66:82:CE:57:90:81:FF:A1:22:AF:04:98:E3:41:B0:CD
X509v3 Authority Key Identifier:
keyid:F7:F4:90:2D:24:0B:25:D7:EB:77:F4:F0:2E:24:F2:33:F4:4A:9A:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_SQLSQLJdfrd_TwLiTyM_RKmhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/zeWF02aCzleQgf-hIq8EmONBsM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/9_SQLSQLJdfrd_TwLiTyM_RKmhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.144.0/24
185.114.146.0/23
Signature Algorithm: sha256WithRSAEncryption
82:fa:d3:37:6f:95:96:93:d1:c8:99:90:0b:8e:85:2a:c5:24:
5a:5b:64:b4:84:5a:ad:da:1a:99:dc:fa:87:c1:ea:1d:81:70:
5a:2e:6c:fc:9c:a4:83:31:43:5f:92:1e:29:65:0a:c8:24:6a:
6c:82:96:ff:39:9a:71:f4:b6:bf:97:70:a3:b2:1b:3e:e5:78:
38:b6:70:f4:16:b4:2e:de:9a:01:af:c7:c1:1c:25:f6:23:c3:
84:7b:13:65:0d:45:d7:06:5c:73:68:ea:6a:46:b4:39:7b:b0:
a7:6c:40:ee:a7:71:2e:67:61:4b:fd:9c:07:4d:c4:00:bc:ec:
e8:77:f7:1d:8d:34:84:b8:40:76:36:df:75:4b:cf:4d:cb:c2:
9c:d8:e6:6c:b2:c2:c2:02:7c:11:0b:74:82:6b:a2:10:d5:fc:
ba:7d:b6:1c:2a:3d:1f:3c:02:90:fc:f4:eb:d8:66:66:4c:6c:
00:87:32:1f:9f:36:ff:9d:10:9a:ea:0e:57:cd:99:d2:96:a7:
41:f5:34:79:ed:2e:ab:b2:63:56:fe:a9:69:fb:a5:bc:9a:01:
bb:51:51:2d:e3:d2:83:01:b0:50:6e:35:11:48:dd:de:50:f7:
84:53:52:56:75:aa:5a:cd:54:c2:38:d7:3a:17:06:e2:0d:33:
64:47:2e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:04:21 2026 by rpki-client