Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/PeOXfSZMnew5e_ZaK5RGGoLGxLw.roa
File: PeOXfSZMnew5e_ZaK5RGGoLGxLw.roa (raw, json)
Hash identifier: 2bwgX6alcfG6bwWkmprYu/om11cgA4NiJ/hDujrHrhg=
Subject key identifier: 3D:E3:97:7D:26:4C:9D:EC:39:7B:F6:5A:2B:94:46:1A:82:C6:C4:BC
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 01A1450CE1AB498BEBEBF05F1ADF99F0832D
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/PeOXfSZMnew5e_ZaK5RGGoLGxLw.roa
Signing time: Fri 16 Oct 2026 14:10:34 +0000
ROA not before: Fri 16 Oct 2026 14:10:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 195.216.172.0/24 maxlen: 24
195.216.178.0/24 maxlen: 24
195.216.179.0/24 maxlen: 24
213.182.193.0/24 maxlen: 24
213.182.195.0/24 maxlen: 24
213.182.202.0/24 maxlen: 24
213.182.205.0/24 maxlen: 24
213.182.219.0/24 maxlen: 24
213.182.220.0/24 maxlen: 24
213.182.221.0/24 maxlen: 24
213.182.222.0/24 maxlen: 24
213.182.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:45:0c:e1:ab:49:8b:eb:eb:f0:5f:1a:df:99:f0:83:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Oct 16 14:10:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3de3977d264c9dec397bf65a2b94461a82c6c4bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:8b:bf:0b:55:3b:3b:92:7b:b4:25:fb:44:c2:
77:ed:06:aa:42:f5:57:a4:a4:4a:b1:b3:0f:18:59:
b2:77:84:ba:a0:77:81:d9:d3:f2:0c:1e:9d:82:ac:
c6:b9:63:43:32:7e:f2:60:f4:51:81:0f:bf:93:3a:
40:3c:70:be:af:b9:27:32:52:4c:14:94:7a:71:2f:
ec:1d:d5:b5:07:af:8a:3d:3b:5c:74:a5:6f:93:cf:
d4:26:e4:1a:44:35:b7:1b:32:6b:60:8c:2d:0c:69:
b5:7c:10:43:8e:33:e7:ad:a3:c0:02:ff:af:34:bf:
a1:d4:07:7f:40:d9:a3:81:2e:7f:9b:38:bf:60:a3:
de:46:19:41:7c:9e:c3:bc:bc:df:35:7b:ae:60:3c:
45:c2:21:97:da:4c:3c:cd:01:52:31:95:37:e7:d2:
2b:f0:c3:11:c2:9f:68:2c:f2:f4:18:8a:b8:c4:13:
01:2d:86:70:ef:83:b6:a4:e9:92:55:73:ec:5e:13:
c3:38:a5:91:54:9d:1c:16:05:10:31:98:46:53:f5:
55:66:a9:52:da:30:7d:25:e1:26:9e:84:df:26:c1:
d2:ac:0e:59:84:e2:05:16:ee:e7:48:96:7e:a3:e8:
81:2d:08:46:ac:d4:07:8b:13:1c:f3:28:e9:5f:3c:
8f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E3:97:7D:26:4C:9D:EC:39:7B:F6:5A:2B:94:46:1A:82:C6:C4:BC
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/PeOXfSZMnew5e_ZaK5RGGoLGxLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.172.0/24
195.216.178.0/23
213.182.193.0/24
213.182.195.0/24
213.182.202.0/24
213.182.205.0/24
213.182.219.0-213.182.223.255
Signature Algorithm: sha256WithRSAEncryption
5c:8c:1e:0d:41:b6:c8:76:24:f8:ef:6c:fe:59:69:12:dc:60:
1a:25:94:93:92:56:90:9c:7c:e3:5c:d4:ea:9c:80:8d:1d:6a:
68:3c:ca:10:a3:be:37:f0:ea:21:e3:9b:64:da:1d:bd:82:81:
aa:01:69:6d:b5:90:d5:90:bf:51:1b:d9:36:27:70:2a:3b:18:
42:81:bc:5b:57:da:06:17:ab:ea:c2:68:2d:31:d6:b6:74:9e:
d3:ad:de:ae:85:d3:65:91:2d:ad:be:53:0d:d6:26:a5:10:ef:
5a:7f:70:ee:d6:6a:67:a8:c6:18:0b:75:91:32:70:af:89:bb:
44:03:fa:23:fb:35:8f:1e:89:4e:04:03:c7:08:74:92:95:0d:
f3:71:38:57:18:b6:22:05:d7:29:e4:35:94:aa:57:bd:ae:59:
f6:06:33:ff:0e:04:25:43:69:9b:73:13:ac:62:67:57:bd:9a:
59:9c:b4:c8:f4:12:05:a7:6e:ad:05:11:8b:ff:f9:8e:d1:bd:
a5:01:fe:3c:c5:83:1e:25:86:9d:a7:5e:d7:ed:b7:00:a8:9e:
c5:0c:01:39:38:38:ba:ad:4d:76:87:44:6a:a1:1f:c5:35:24:
15:a1:fe:e2:a6:c6:ba:ba:1d:a6:2b:e2:fb:0b:09:04:18:73:
cc:a2:48:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:50:11 2026 by rpki-client