Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zkaYEFoMiTpSWqN75KMSQQt17Mw.roa
File: zkaYEFoMiTpSWqN75KMSQQt17Mw.roa (raw, json)
Hash identifier: SogT+qaE8EQl7hOAsi2nDTwin94dDXVhKCbQBVeA3dc=
Subject key identifier: CE:46:98:10:5A:0C:89:3A:52:5A:A3:7B:E4:A3:12:41:0B:75:EC:CC
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FFB227BA25BAB61F484AC5CDD091D300A
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zkaYEFoMiTpSWqN75KMSQQt17Mw.roa
Signing time: Thu 13 Aug 2026 12:39:28 +0000
ROA not before: Thu 13 Aug 2026 12:39:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142240
IP address blocks: 213.130.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fb:22:7b:a2:5b:ab:61:f4:84:ac:5c:dd:09:1d:30:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 13 12:39:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ce4698105a0c893a525aa37be4a312410b75eccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b8:cd:a6:5d:02:b3:4f:7f:b0:ad:c6:34:ea:
f5:03:c6:b1:3b:ae:40:5c:0e:24:a2:69:bd:d4:2c:
1e:ef:41:5e:44:f8:e9:fc:bd:4b:48:15:07:4a:a7:
19:b1:b1:f1:80:1c:80:6c:ee:9f:93:e7:56:87:3b:
56:d8:f3:84:b0:45:b8:c8:36:32:c2:de:df:40:ba:
91:93:30:5e:0e:44:48:57:87:a4:1c:59:d8:9f:3a:
34:3a:79:3a:4c:1e:13:ea:9d:4c:e5:33:d1:fd:fa:
c4:64:76:d5:58:55:aa:f6:d6:2c:25:e6:9c:e4:40:
94:96:e1:14:c3:cd:e6:f6:07:a2:62:3d:b2:d4:6f:
e8:e4:c4:f7:98:99:b7:b4:71:06:5c:11:5c:09:d9:
5a:1b:65:27:08:e9:f6:c9:c7:ad:2c:1e:6a:3a:93:
ae:00:57:63:1f:76:a9:be:f5:a2:81:8a:71:15:77:
60:02:2c:a6:1f:54:bc:4e:23:e5:01:b6:f3:f9:89:
e1:c0:8e:6a:c1:dd:f3:11:68:47:5f:68:29:70:d4:
25:10:c6:b2:e0:a7:b9:44:fd:84:6a:15:3b:41:f0:
62:a6:6f:47:93:d2:28:80:68:93:27:42:7b:a5:ec:
58:df:0d:26:db:22:8c:52:2e:36:7c:52:87:46:67:
2a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:46:98:10:5A:0C:89:3A:52:5A:A3:7B:E4:A3:12:41:0B:75:EC:CC
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zkaYEFoMiTpSWqN75KMSQQt17Mw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.130.142.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:6f:4d:60:ef:14:82:da:c5:73:67:21:fc:d5:5e:bc:a8:d1:
e7:3e:15:36:9c:16:79:75:31:2c:4f:02:cd:e4:30:b2:41:fe:
03:dc:e9:c5:a6:c0:e4:9d:a6:1b:b2:fa:e3:95:18:46:e1:02:
92:32:a3:66:80:17:d4:2f:1a:d0:8e:70:f7:dc:34:78:62:a3:
13:97:b7:5d:74:5b:d9:39:70:2d:7e:2f:f6:22:2c:0d:d8:cb:
34:7a:2f:09:0f:a9:76:13:0a:81:49:63:bb:6e:3f:db:b0:77:
d0:5a:79:5d:0f:63:91:c2:cc:1b:e3:f3:88:8d:25:55:67:d4:
f7:d8:93:24:ae:51:01:27:a6:60:40:11:89:ef:00:38:80:90:
4e:0c:b3:df:d2:0b:13:b6:63:6d:b5:af:ef:0f:4a:31:9c:75:
36:76:23:5d:97:b6:8e:00:59:71:9a:e4:b4:f3:ab:21:2e:a3:
e8:18:36:da:d0:90:d0:d5:d7:14:3c:26:c3:b7:25:17:19:71:
8c:77:ef:e6:85:c6:37:b9:1b:41:8a:1b:2b:22:41:14:82:6c:
37:b6:f1:80:f0:a8:05:54:8f:ef:a0:79:f9:e7:f7:9d:81:cf:
20:93:7b:ab:47:d9:95:83:23:3e:76:d8:bf:53:93:5f:57:06:
91:f3:3d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 22:10:03 2026 by rpki-client