Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/zgYDkmvAGI8BspccK9JmTAYBRPA.roa
File: zgYDkmvAGI8BspccK9JmTAYBRPA.roa (raw, json)
Hash identifier: +/N/svQkaAWguAU7Ksruh8qP1PBm4maWw1DDJcR7hZs=
Subject key identifier: CE:06:03:92:6B:C0:18:8F:01:B2:97:1C:2B:D2:66:4C:06:01:44:F0
Certificate issuer: /CN=92660b23fe3b8642d6bf475f8eb7fcad9d13c413
Certificate serial: 01A116D0846149FE745589138A296321313E
Authority key identifier: 92:66:0B:23:FE:3B:86:42:D6:BF:47:5F:8E:B7:FC:AD:9D:13:C4:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/zgYDkmvAGI8BspccK9JmTAYBRPA.roa
Signing time: Wed 07 Oct 2026 14:42:06 +0000
ROA not before: Wed 07 Oct 2026 14:42:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218503
IP address blocks: 9.211.240.0/23 maxlen: 23
9.211.242.0/23 maxlen: 23
9.211.244.0/24 maxlen: 24
9.211.245.0/24 maxlen: 24
9.211.246.0/24 maxlen: 24
193.148.160.0/19 maxlen: 23
193.148.178.0/23 maxlen: 23
2a05:b540::/29 maxlen: 48
2a05:b540:f000::/48 maxlen: 48
2a05:b540:f001::/48 maxlen: 48
2a05:b540:f002::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 11:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:16:d0:84:61:49:fe:74:55:89:13:8a:29:63:21:31:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92660b23fe3b8642d6bf475f8eb7fcad9d13c413
Validity
Not Before: Oct 7 14:42:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ce0603926bc0188f01b2971c2bd2664c060144f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:11:2a:9a:a5:a8:1c:99:51:02:b9:46:ce:8d:
b5:c0:9e:8d:3b:c7:5f:8f:4d:2b:21:f7:bb:68:a2:
e8:93:66:83:a8:19:dd:f5:ea:5f:92:07:c4:45:0e:
1a:4c:21:54:93:74:bc:31:1f:8f:86:86:90:ff:ae:
71:8e:26:5a:97:bf:28:c1:29:36:84:ad:b0:bb:69:
3e:07:83:81:d6:9f:1f:55:1b:87:14:95:a6:73:b0:
a5:90:af:31:29:0e:6f:92:25:2e:aa:b7:34:bb:ea:
29:3b:99:b1:c5:2f:ef:d5:fb:f5:78:fd:75:42:27:
70:9b:01:83:d3:da:98:07:ec:4e:c8:3b:e1:b1:22:
e2:7d:ed:ae:a1:ea:ac:ab:83:87:83:27:49:3f:31:
e0:d0:ce:82:f6:37:69:29:4f:32:13:e2:fc:0d:cd:
7f:14:06:e3:4a:ac:7e:e6:31:fa:31:e7:6d:48:51:
5c:0b:8b:ed:2b:92:0b:27:09:a7:d2:4c:ce:9b:63:
72:c1:58:67:13:1f:f0:9e:32:1a:0f:3d:3c:06:85:
ac:e6:69:ba:cc:92:c7:69:35:68:a7:82:f3:b7:3e:
a9:f2:a8:3e:83:e2:30:c4:93:49:49:59:34:1c:53:
aa:53:03:13:41:c2:1c:97:06:71:68:32:0b:6d:b0:
5f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:06:03:92:6B:C0:18:8F:01:B2:97:1C:2B:D2:66:4C:06:01:44:F0
X509v3 Authority Key Identifier:
keyid:92:66:0B:23:FE:3B:86:42:D6:BF:47:5F:8E:B7:FC:AD:9D:13:C4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/zgYDkmvAGI8BspccK9JmTAYBRPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.211.240.0-9.211.246.255
193.148.160.0/19
IPv6:
2a05:b540::/29
Signature Algorithm: sha256WithRSAEncryption
62:d7:8e:9f:c3:e8:79:ee:af:e0:cc:2a:3b:97:d7:39:bc:e5:
e4:68:4c:78:9a:bd:91:08:59:74:06:30:42:8b:1f:7d:92:0d:
5f:ba:9b:32:87:34:17:9b:7a:6a:a3:45:b9:d2:07:b3:7a:a5:
0a:41:76:df:32:6d:d6:54:80:34:74:88:cc:57:52:59:e8:a2:
e9:c1:83:68:e4:af:d0:e3:b0:ae:f4:f2:a5:11:71:f4:e7:30:
67:6d:2d:92:c1:c9:64:1a:f4:0a:19:fe:a5:6f:a9:99:3d:f4:
52:60:c5:d7:6d:45:97:37:24:c2:de:46:05:f7:fa:85:61:90:
9d:6b:4e:c0:20:0d:0e:08:15:1c:89:17:da:3a:73:74:f7:2e:
7b:17:02:0a:bc:8f:b2:e2:9c:1e:09:cd:2e:82:46:7b:ab:90:
d7:72:6a:13:77:01:95:27:66:dd:0d:1d:91:f0:57:0f:75:b3:
0c:e1:0e:10:ef:09:25:99:9d:6b:af:ee:be:82:13:3b:00:3b:
9e:be:28:d5:84:57:67:d2:05:32:3b:a3:93:83:fb:b5:ee:d4:
13:6e:1d:23:62:ce:f9:fe:73:c3:df:1b:09:7e:4a:c6:91:ae:
7a:6b:22:b3:9e:ed:a5:f5:43:4f:13:a3:8d:e3:b2:c0:c1:8c:
8d:bf:12:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:56:44 2026 by rpki-client