Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/z_CtgXkP8jFHRAPlb_0WHOVWk_w.roa
File: z_CtgXkP8jFHRAPlb_0WHOVWk_w.roa (raw, json)
Hash identifier: 1AnOmJE7jzbQyN7up6vsvpPbwqFxmSsOlfJMIHV8LFw=
Subject key identifier: CF:F0:AD:81:79:0F:F2:31:47:44:03:E5:6F:FD:16:1C:E5:56:93:FC
Certificate issuer: /CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Certificate serial: 01A10B38872607847BDB34DC55DA5C4A877D
Authority key identifier: 52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/z_CtgXkP8jFHRAPlb_0WHOVWk_w.roa
Signing time: Mon 05 Oct 2026 08:40:16 +0000
ROA not before: Mon 05 Oct 2026 08:40:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211912
IP address blocks: 65.98.125.0/24 maxlen: 24
65.181.120.0/24 maxlen: 24
65.181.121.0/24 maxlen: 24
65.181.122.0/24 maxlen: 24
65.181.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:38:87:26:07:84:7b:db:34:dc:55:da:5c:4a:87:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Validity
Not Before: Oct 5 08:40:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cff0ad81790ff231474403e56ffd161ce55693fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:bc:01:f5:2e:ef:c6:9d:3f:60:17:10:f3:00:
52:92:b7:d8:7f:a1:31:aa:01:f2:b1:a5:9e:86:af:
d1:64:3c:5c:68:70:2d:e0:fb:f1:59:00:4d:2c:e8:
9b:7d:97:4a:39:ca:d0:74:a2:e6:12:d9:42:7d:09:
6c:29:c0:b7:be:35:5a:f7:23:14:06:e9:8d:71:ed:
e4:2e:33:f7:eb:2b:54:a5:95:4c:2c:d0:3d:2d:df:
7b:b6:2a:03:e1:c3:a4:9c:a0:fb:00:df:83:58:c7:
2a:ac:6a:1f:e8:7b:87:06:f3:15:53:4c:6a:2f:1a:
90:eb:f3:70:e4:10:e2:43:72:9e:58:ba:81:2e:58:
68:21:20:cc:89:b8:fc:6c:b8:ff:64:3d:75:a6:74:
f0:cf:48:b5:f2:c9:61:34:33:78:25:f7:2b:91:20:
f8:70:dd:19:cb:62:31:9a:d4:08:81:ab:af:1a:4b:
39:1b:5a:f6:89:87:13:a5:c5:71:76:ca:ed:85:84:
7d:a5:4b:f4:e0:98:6f:e4:9b:4c:5e:c0:18:0e:17:
5c:2a:1a:39:52:fd:22:af:8b:2f:19:ee:72:6e:af:
b1:95:ef:62:3f:b4:fd:41:4c:1b:55:b5:d6:88:93:
88:5a:d6:2e:11:4d:76:f4:cc:32:71:30:8d:40:b5:
ce:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F0:AD:81:79:0F:F2:31:47:44:03:E5:6F:FD:16:1C:E5:56:93:FC
X509v3 Authority Key Identifier:
keyid:52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/z_CtgXkP8jFHRAPlb_0WHOVWk_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.98.125.0/24
65.181.120.0-65.181.122.255
65.181.126.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:5e:c5:f9:99:3f:04:ec:00:e4:d3:8c:51:30:7d:aa:73:b8:
44:c6:67:6b:38:34:3d:67:fc:66:53:f1:0f:63:e0:5a:f2:76:
75:0f:54:63:f2:a5:5c:17:1a:43:d0:31:43:39:46:3d:02:3d:
e6:75:a5:2b:5f:96:da:e4:d8:22:a5:28:49:26:78:6e:3c:7c:
3e:23:e9:03:d2:cd:d8:fb:ea:13:e0:e6:50:ce:4e:8a:b6:17:
c2:30:88:5b:f8:2b:82:4f:41:91:a9:dc:2d:8e:46:15:0a:5f:
ab:f0:7f:7e:58:ad:c4:3c:54:48:c2:00:d4:b6:cc:b3:3c:68:
82:bd:1d:ff:ce:d5:be:21:2d:bb:3b:e1:c0:63:7a:24:7b:01:
4d:82:3f:5e:1c:a9:f7:fa:7f:a8:90:ee:11:8d:a7:ef:07:0b:
ba:0a:56:57:6e:b0:38:93:e9:e0:05:b1:92:c4:59:66:65:0f:
17:e8:1b:44:1f:ab:68:ce:8a:52:f6:5a:fb:7d:14:8e:41:f9:
94:77:2b:ef:3a:45:97:3b:41:45:fd:c4:96:ca:82:4e:af:b2:
e8:a8:78:d3:10:12:94:75:9b:0e:79:94:37:bb:88:f9:1e:3d:
12:95:55:5d:d5:01:24:33:9c:1e:cd:18:1c:c2:51:07:23:85:
a1:d9:f6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:29:15 2026 by rpki-client