Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/7382e1-acd8-4f8b-92b8-107a27220071/1/CZNonHW5b2laMcNiz-RkJ3paLpI.roa
File: CZNonHW5b2laMcNiz-RkJ3paLpI.roa (raw, json)
Hash identifier: BCabOMNGYJLPIeJtdJTStxJaZvowIDEF4R270myPoJs=
Subject key identifier: 09:93:68:9C:75:B9:6F:69:5A:31:C3:62:CF:E4:64:27:7A:5A:2E:92
Certificate issuer: /CN=bea9f30ae939e2f2aef7ff56a702d0de7f7765c1
Certificate serial: 019FB771C968A0901745534C76F5C1D85E61
Authority key identifier: BE:A9:F3:0A:E9:39:E2:F2:AE:F7:FF:56:A7:02:D0:DE:7F:77:65:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqnzCuk54vKu9_9WpwLQ3n93ZcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/7382e1-acd8-4f8b-92b8-107a27220071/1/CZNonHW5b2laMcNiz-RkJ3paLpI.roa
Signing time: Fri 31 Jul 2026 09:11:55 +0000
ROA not before: Fri 31 Jul 2026 09:11:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 85.204.106.0/24 maxlen: 24
188.241.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/7382e1-acd8-4f8b-92b8-107a27220071/1/vqnzCuk54vKu9_9WpwLQ3n93ZcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/7382e1-acd8-4f8b-92b8-107a27220071/1/vqnzCuk54vKu9_9WpwLQ3n93ZcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqnzCuk54vKu9_9WpwLQ3n93ZcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 18:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b7:71:c9:68:a0:90:17:45:53:4c:76:f5:c1:d8:5e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea9f30ae939e2f2aef7ff56a702d0de7f7765c1
Validity
Not Before: Jul 31 09:11:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0993689c75b96f695a31c362cfe464277a5a2e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:8a:93:5c:ba:2c:e3:25:cc:55:cd:40:80:07:
c4:75:f0:af:d5:6e:a4:d1:cb:66:21:1b:24:d9:8d:
a4:6d:74:5c:a2:17:12:98:f5:d3:59:d4:e5:ce:b8:
67:56:82:e5:7d:86:5a:c7:6d:bd:f1:24:6d:c5:1c:
07:72:c4:6d:f7:93:49:47:73:ec:77:79:5c:07:3a:
6b:99:e7:58:50:7e:32:4c:f2:df:13:ca:08:ad:42:
14:0d:69:9e:82:88:1a:bc:d7:36:eb:44:37:91:b7:
f3:20:51:a4:40:59:31:ff:bb:3d:10:b6:35:2c:43:
ba:98:10:75:06:b3:d3:cf:9c:99:f3:8e:ea:65:c0:
6f:f1:35:5f:24:0e:4d:7b:38:77:5c:59:98:4d:63:
d5:cb:e5:e6:fd:ab:19:2e:6c:c0:2e:c4:f1:08:68:
e0:e2:18:9c:27:20:5a:f6:61:b7:71:28:38:8e:23:
84:64:cc:fc:94:69:03:6e:08:3b:43:bb:04:f6:65:
18:5b:bc:86:b9:d5:24:9b:49:7c:b6:68:70:0c:27:
43:6b:ab:91:2e:e5:d3:cb:9d:ad:92:f0:45:d1:fe:
8c:3e:1a:73:5e:0d:34:48:6a:a3:03:f1:5c:c2:9c:
d6:8d:b8:f0:89:84:65:04:07:49:96:9a:7f:1d:30:
58:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:93:68:9C:75:B9:6F:69:5A:31:C3:62:CF:E4:64:27:7A:5A:2E:92
X509v3 Authority Key Identifier:
keyid:BE:A9:F3:0A:E9:39:E2:F2:AE:F7:FF:56:A7:02:D0:DE:7F:77:65:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqnzCuk54vKu9_9WpwLQ3n93ZcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/7382e1-acd8-4f8b-92b8-107a27220071/1/CZNonHW5b2laMcNiz-RkJ3paLpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/7382e1-acd8-4f8b-92b8-107a27220071/1/vqnzCuk54vKu9_9WpwLQ3n93ZcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.106.0/24
188.241.220.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:e3:f3:53:c8:99:e8:de:d8:e0:9a:bc:0c:7d:54:3d:a8:45:
5e:b4:96:e8:55:e0:5f:32:02:9c:36:1e:d8:aa:73:94:8a:75:
61:00:42:86:c8:c0:d0:2a:d3:10:c8:b3:2c:8d:9b:13:54:22:
33:ee:8f:73:ae:54:ef:6e:f8:07:00:e5:93:75:28:0e:e1:5c:
dc:d6:bb:62:46:55:71:18:ee:a6:86:aa:43:5d:b7:49:da:c1:
9d:65:c1:fd:8d:e3:02:ea:24:2f:b4:b9:3e:9a:67:6e:cd:1a:
f8:7c:0c:7e:e3:03:61:5c:91:5f:cd:27:7e:6d:c4:92:fd:5e:
63:32:93:11:90:5a:6d:b2:c3:1a:5f:53:02:d3:e9:8d:df:87:
17:5c:d8:fa:ba:e6:a8:98:5e:4d:36:6e:ef:f8:b2:dc:53:dd:
81:fc:63:bc:07:79:90:8d:7f:4f:4a:30:f1:ba:bb:ca:9c:6f:
e5:82:d4:57:8a:25:ae:52:00:dc:e9:81:8e:2e:c6:25:3c:a1:
fd:fc:06:ef:76:a6:f1:97:50:df:70:b4:19:37:9a:67:81:6c:
08:99:c4:f7:fc:02:97:6d:96:c1:32:62:af:54:33:fb:83:77:
03:39:16:5f:7d:0a:56:b9:1c:16:e7:04:6c:2d:ab:ee:14:3c:
cd:e3:4d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 00:48:42 2026 by rpki-client