Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/zw5fWwxMO3uQ-3JnwT5dNNL0eVM.roa
File: zw5fWwxMO3uQ-3JnwT5dNNL0eVM.roa (raw, json)
Hash identifier: pnhzFXR1P1zYlMWvKT9giOYUIJ62wyltI992iTbrpYg=
Subject key identifier: CF:0E:5F:5B:0C:4C:3B:7B:90:FB:72:67:C1:3E:5D:34:D2:F4:79:53
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 01A06C1B4102ADF16DA2DAA2426395E10279
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/zw5fWwxMO3uQ-3JnwT5dNNL0eVM.roa
Signing time: Fri 04 Sep 2026 11:08:40 +0000
ROA not before: Fri 04 Sep 2026 11:08:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 185.81.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 11:08:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:1b:41:02:ad:f1:6d:a2:da:a2:42:63:95:e1:02:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Sep 4 11:08:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf0e5f5b0c4c3b7b90fb7267c13e5d34d2f47953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:a0:12:c9:f8:92:e1:14:5b:c0:d2:44:3d:ff:
62:13:d7:4b:a3:8f:2b:64:d2:39:d1:e2:ca:ff:3f:
b5:bd:e6:6a:e8:ca:5c:d9:1d:54:e1:7b:2b:f7:a1:
9b:95:0d:30:7a:92:61:30:d6:d1:54:09:c2:23:00:
dc:2b:65:ff:99:ed:4d:f3:bf:f0:ee:85:a8:2c:ce:
50:73:54:c6:aa:2b:20:13:38:45:18:66:96:53:a6:
76:62:d4:8a:a8:6d:7a:96:9c:02:97:9f:93:5c:83:
c2:a4:0e:e4:1a:e9:b5:97:ce:fd:79:f7:f1:df:55:
fb:a7:46:93:86:ee:01:67:82:8a:20:37:98:62:65:
c2:6b:00:b8:c5:35:ad:55:af:26:26:86:5f:de:5f:
e0:00:fe:73:4b:2c:bb:9e:a0:a2:8a:e1:0a:c5:e3:
8b:6e:61:b6:2a:2c:d1:8d:58:0d:d7:ea:db:b8:f8:
cc:4a:93:ce:10:cb:ef:37:1b:80:b9:ad:8b:ec:f6:
6d:03:59:3a:80:6d:b9:73:20:32:5b:83:e1:f1:23:
ab:e6:2b:1e:40:f7:32:3d:00:c9:c2:b9:cd:2d:f8:
ba:38:e2:ee:1a:4e:26:63:24:17:91:c0:8e:c7:8b:
7a:a0:62:3c:da:cc:db:4f:11:55:7d:ce:e9:63:ba:
0e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:0E:5F:5B:0C:4C:3B:7B:90:FB:72:67:C1:3E:5D:34:D2:F4:79:53
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/zw5fWwxMO3uQ-3JnwT5dNNL0eVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.28.0/22
Signature Algorithm: sha256WithRSAEncryption
32:96:a2:a4:d0:8d:de:ba:cc:d7:07:d6:ca:6c:b8:94:7d:62:
60:97:f3:86:89:27:8f:04:dc:1a:3c:72:6a:19:f5:04:51:0f:
9f:51:c4:99:56:33:d7:3a:41:30:72:4c:3f:54:a6:55:59:f5:
a8:5c:64:3f:1b:fd:3d:45:77:76:84:f8:ef:be:ed:ba:ce:61:
7c:c4:3d:46:4d:76:a0:84:ce:e4:ee:78:15:e7:e0:0c:59:2f:
7c:ab:52:a4:84:11:26:fe:1d:d9:f1:fc:a7:66:6b:3d:6a:db:
49:ad:21:d5:1b:14:50:fc:cb:6c:b6:84:33:36:b2:8e:2f:59:
03:88:bc:41:e1:16:53:d1:d7:c5:f0:2f:3e:09:6f:ff:ce:96:
b7:15:ad:d3:df:8b:c6:7b:a2:9f:e6:82:bb:42:13:78:0f:48:
7a:92:67:8c:4f:38:f4:ac:08:e6:f9:2e:bb:3d:5c:5f:9e:d9:
ac:d5:5a:1e:70:8e:55:1e:a7:ca:b7:fa:a3:76:a3:25:1a:60:
9e:7f:90:c5:8f:ae:9b:c8:8c:b9:1c:f1:d6:e1:86:1e:7f:b1:
bb:86:db:96:bf:be:9a:6a:1f:fd:fc:75:36:71:59:0f:de:7e:
98:f0:43:36:ba:9a:d4:73:a2:7c:cc:e3:ca:56:de:cd:25:2b:
2e:aa:45:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:34:34 2026 by rpki-client