Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/zL6Va8mz4-mL5dF-T8Ckn3SRIUc.roa
File: zL6Va8mz4-mL5dF-T8Ckn3SRIUc.roa (raw, json)
Hash identifier: Kfzl6+KPLIjmljlRdomaeCn9w4EH9DthiJPy82CrCpQ=
Subject key identifier: CC:BE:95:6B:C9:B3:E3:E9:8B:E5:D1:7E:4F:C0:A4:9F:74:91:21:47
Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial: 01A0389A8D0310750716D8A987EA1ACD70E5
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/zL6Va8mz4-mL5dF-T8Ckn3SRIUc.roa
Signing time: Tue 25 Aug 2026 11:07:27 +0000
ROA not before: Tue 25 Aug 2026 11:07:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204229
IP address blocks: 188.74.140.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:38:9a:8d:03:10:75:07:16:d8:a9:87:ea:1a:cd:70:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Validity
Not Before: Aug 25 11:07:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ccbe956bc9b3e3e98be5d17e4fc0a49f74912147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0e:d2:0b:01:7b:9c:61:e4:b6:66:15:1f:38:
ae:5d:b9:e8:32:45:53:f3:6a:4e:8b:50:06:8c:7c:
34:f2:c3:05:d3:ff:e2:98:8f:60:dd:ec:9b:63:f4:
57:af:a3:18:5a:d9:8b:5c:18:df:eb:90:7a:b0:18:
43:99:dc:bd:8f:b5:a1:14:71:9b:35:08:12:14:a6:
00:d6:80:3a:a6:3a:3d:fc:ac:23:88:9d:6b:69:2d:
b7:c5:dc:68:a4:7a:37:a5:cc:cc:09:2d:cb:70:ec:
3b:59:36:18:d9:0c:32:29:1b:d9:01:f7:df:38:b0:
99:03:ca:df:76:b7:e0:54:ee:ab:70:62:4b:bb:b7:
9a:94:63:bf:68:a1:ab:6d:6a:77:33:ba:58:fd:e1:
35:a9:ce:62:d3:ec:51:98:83:05:d4:96:79:0b:3c:
26:39:af:e3:ce:7d:db:13:52:44:a8:27:fd:df:f6:
f4:1f:f2:bb:ca:81:11:a5:9c:cc:5d:67:e4:a1:f5:
11:8f:c3:76:af:db:58:ba:e2:4a:de:9f:24:02:c0:
63:b8:0c:f2:23:14:94:68:50:df:d8:97:29:db:31:
b4:16:32:d0:ba:8e:d8:fc:f3:8f:88:5b:8f:f1:23:
9a:08:9b:41:65:77:7e:70:02:19:f9:19:e3:19:2e:
4c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:BE:95:6B:C9:B3:E3:E9:8B:E5:D1:7E:4F:C0:A4:9F:74:91:21:47
X509v3 Authority Key Identifier:
keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/zL6Va8mz4-mL5dF-T8Ckn3SRIUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.74.140.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:f9:1d:10:3c:db:ca:81:2f:0a:b4:7a:35:fb:e7:20:27:11:
66:f1:bc:35:71:62:ee:56:47:97:af:13:7f:63:8e:40:cd:3e:
55:c2:0e:10:d2:84:d9:f0:47:d9:ed:c0:56:23:d6:c1:90:ee:
fe:5f:17:17:4c:43:7e:2d:65:0d:48:e4:49:78:82:79:08:d1:
ce:86:29:a3:52:54:fd:26:81:8c:11:8b:2a:26:29:24:1b:ff:
7a:1a:fe:fe:f6:4b:30:35:27:63:d3:49:07:f4:12:cb:69:df:
43:65:b2:db:e6:5e:92:cc:00:3b:bb:22:63:36:00:59:fe:72:
00:c0:26:ad:64:88:06:ff:f7:27:e0:d3:9c:88:5c:46:b0:a3:
4e:81:62:63:0a:70:ed:db:70:a0:b7:c9:05:fd:22:ed:7c:76:
bf:43:d5:e9:5d:9a:8e:da:01:48:88:31:16:f1:34:cd:37:22:
60:55:91:03:ff:bd:a1:2c:0f:27:00:a8:e5:02:9f:c7:25:9a:
ad:94:68:82:3b:26:80:8b:45:b5:de:29:66:c6:88:e1:90:50:
0b:4b:fa:16:79:0a:2d:04:ea:49:b0:eb:58:d4:c6:c4:41:24:
cb:bb:42:34:51:32:02:91:fb:8c:ed:b5:e9:58:78:fb:e2:33:
2c:ba:03:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:17:26 2026 by rpki-client