Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/zhrj0as10ahWXIxCrY159dKecDc.roa
File: zhrj0as10ahWXIxCrY159dKecDc.roa (raw, json)
Hash identifier: WKHK2NUh5/br1N6wow0LQOUivGXAj9GLsqWUzqhFbYc=
Subject key identifier: CE:1A:E3:D1:AB:35:D1:A8:56:5C:8C:42:AD:8D:79:F5:D2:9E:70:37
Certificate issuer: /CN=c4d8c1985c50c7ead4cfd8d3a93d63e5611f6fb6
Certificate serial: 01A0813E05318A6666750F402FF1A0DE6764
Authority key identifier: C4:D8:C1:98:5C:50:C7:EA:D4:CF:D8:D3:A9:3D:63:E5:61:1F:6F:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/zhrj0as10ahWXIxCrY159dKecDc.roa
Signing time: Tue 08 Sep 2026 13:38:40 +0000
ROA not before: Tue 08 Sep 2026 13:38:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29695
IP address blocks: 185.230.128.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:81:3e:05:31:8a:66:66:75:0f:40:2f:f1:a0:de:67:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4d8c1985c50c7ead4cfd8d3a93d63e5611f6fb6
Validity
Not Before: Sep 8 13:38:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ce1ae3d1ab35d1a8565c8c42ad8d79f5d29e7037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e5:16:2a:9a:d0:d6:6a:f8:0d:22:0d:86:07:
46:b5:c8:39:9b:f0:5b:86:ac:b1:09:1e:45:22:8a:
da:d7:e3:41:84:8a:fa:15:6f:6a:39:7a:21:9a:22:
d5:e9:b3:53:8f:49:c9:c9:c9:49:f6:e2:f4:4d:58:
79:40:c5:52:5b:9a:b6:48:09:f3:3e:a2:67:17:4c:
99:c8:6a:70:bc:28:b2:00:1f:97:9e:fe:89:7d:fe:
21:2d:fb:03:2a:72:82:0a:69:ac:cd:f8:c9:f1:2c:
59:f7:43:1b:b0:9b:40:a9:b0:be:ba:4a:58:13:56:
21:3a:0c:a0:20:f4:6b:27:04:d6:75:b6:11:8c:0c:
57:ca:e6:32:eb:f1:4c:9d:e4:b0:90:c2:cc:83:3b:
c5:c0:17:4a:ac:cd:4e:ef:96:6f:31:06:e2:a9:71:
51:4e:1a:fb:d1:f2:59:03:32:16:5d:2b:27:eb:fe:
00:d5:ac:2e:4f:1b:77:cb:81:1d:82:9d:d9:c1:ec:
53:43:2a:c3:29:3a:cb:2b:26:8c:f7:4e:38:74:b0:
8f:78:db:03:2c:f8:45:33:46:1a:ad:5b:2c:31:98:
cd:19:56:25:5d:9c:ed:59:8d:44:53:5c:19:6d:f1:
3e:9b:c6:5e:a0:a5:6d:4c:f8:1f:09:53:43:26:80:
c5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:1A:E3:D1:AB:35:D1:A8:56:5C:8C:42:AD:8D:79:F5:D2:9E:70:37
X509v3 Authority Key Identifier:
keyid:C4:D8:C1:98:5C:50:C7:EA:D4:CF:D8:D3:A9:3D:63:E5:61:1F:6F:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/zhrj0as10ahWXIxCrY159dKecDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.128.0/22
Signature Algorithm: sha256WithRSAEncryption
54:a7:be:05:69:60:ac:6e:bf:cd:cc:65:38:cc:44:c0:71:2b:
83:44:55:5b:56:c2:30:af:51:35:95:c3:99:ad:b9:d7:13:e7:
0a:0b:ab:06:71:d9:60:b0:7f:eb:1f:99:b8:dd:eb:de:22:96:
09:79:ca:80:3e:91:33:fd:d3:77:62:71:fe:b2:4d:5d:d4:7e:
a7:2a:20:bf:5c:cc:d8:b5:25:bf:86:4a:19:5e:2d:de:87:8b:
d9:2d:f9:5d:88:60:b8:e4:da:82:2a:03:5b:f3:1c:ea:3a:21:
0f:9c:6a:9a:60:11:28:b2:c1:ec:6a:97:f8:d5:31:f1:d9:57:
b2:30:42:af:5a:76:f7:90:e0:c5:56:7f:92:07:ae:3c:1f:f0:
b5:5a:e6:24:4d:f5:27:6a:1a:9a:46:3b:a3:e4:7b:8c:6a:d1:
a7:77:3b:22:d8:54:69:f4:a9:8d:ef:a8:f7:b8:d6:06:b2:2a:
07:92:c4:7b:00:8a:31:ff:f5:db:f6:22:2c:ad:84:94:e4:91:
75:03:b8:c3:0a:cd:e0:82:87:04:02:eb:35:3a:6b:ae:92:e4:
3a:e1:b0:1c:4b:32:31:df:4b:93:92:b9:4d:0e:a9:64:ae:50:
de:cc:80:99:99:2d:25:e7:57:7a:0d:99:6f:b6:e8:35:09:b2:
8e:78:2b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:45:34 2026 by rpki-client