Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/zbTHDH9LU749bEfUed073aAvOHA.roa
File: zbTHDH9LU749bEfUed073aAvOHA.roa (raw, json)
Hash identifier: if3xsyUoOBbtpFgR7N97hqm8tjyBtb1quPPeOE4N1vI=
Subject key identifier: CD:B4:C7:0C:7F:4B:53:BE:3D:6C:47:D4:79:DD:3B:DD:A0:2F:38:70
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 01A02A11D8800F3DC9BE7A825CAF4E46A44B
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/zbTHDH9LU749bEfUed073aAvOHA.roa
Signing time: Sat 22 Aug 2026 15:23:27 +0000
ROA not before: Sat 22 Aug 2026 15:23:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204603
IP address blocks: 213.109.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Aug 2026 09:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:2a:11:d8:80:0f:3d:c9:be:7a:82:5c:af:4e:46:a4:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Aug 22 15:23:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cdb4c70c7f4b53be3d6c47d479dd3bdda02f3870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:94:f9:f6:05:24:5a:3c:75:f6:79:77:15:3c:
7e:2d:33:ee:e3:bf:fd:96:20:e2:f8:e0:a6:e5:e7:
8a:73:0e:1a:0e:39:b4:57:27:1e:47:46:fa:17:f8:
de:fa:17:d4:3f:c3:0a:7b:ab:95:be:64:70:8e:1c:
8e:57:1c:0e:1c:94:1e:f2:11:4e:6e:4d:1c:67:50:
42:59:24:eb:0b:0c:72:a0:c6:54:d7:48:5d:27:5a:
19:56:63:f9:32:92:52:3f:af:26:03:36:a5:a4:45:
41:93:e0:7a:e3:e3:a1:46:2c:04:ba:d8:42:a7:6f:
c6:e3:75:9b:8b:1a:47:94:df:1e:ba:ce:24:8d:38:
5b:82:14:05:aa:ab:8d:7a:e7:00:1d:b7:88:02:6f:
03:34:59:64:89:96:22:08:26:e5:c4:7b:d4:e8:2b:
39:8a:e6:88:21:21:a1:b8:79:1e:47:9e:bc:07:7f:
6e:93:55:e7:fe:cf:30:f3:05:6d:a8:42:1a:ae:ef:
bc:84:eb:45:68:62:34:de:1a:72:df:cf:0e:ee:1e:
a8:31:78:45:f5:25:59:09:05:e5:b3:ce:6b:95:73:
25:90:0c:54:a4:0a:c7:81:5a:ff:20:6f:da:ce:b0:
b8:88:80:e2:21:9d:56:7f:a7:1d:0d:6f:a8:16:29:
52:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B4:C7:0C:7F:4B:53:BE:3D:6C:47:D4:79:DD:3B:DD:A0:2F:38:70
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/zbTHDH9LU749bEfUed073aAvOHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.183.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:25:e1:72:9e:30:b0:01:4e:e8:38:c4:10:88:67:9b:0c:be:
76:57:ef:fc:4a:fc:bc:fe:d0:e6:da:4a:05:98:8c:32:0e:cc:
3c:a6:1e:18:ec:41:74:ee:34:f9:ee:49:a3:8b:cd:c7:49:0a:
75:99:77:10:6f:31:53:fc:64:46:e7:1a:1b:ae:93:86:5e:3e:
a5:d4:fb:3b:c7:40:52:0f:6a:d8:e9:aa:63:5d:4e:f0:d0:7b:
05:74:b3:71:b7:f1:08:1d:26:b9:0c:93:61:eb:94:f7:58:88:
19:b1:12:ae:2c:49:f9:95:16:1b:a2:08:90:99:13:ef:3b:e2:
6d:3a:70:4d:d3:aa:9b:80:34:3e:6d:d5:7a:84:56:cf:e1:19:
9b:d4:0b:aa:b0:55:ee:0d:03:14:f5:1c:25:fd:6e:3e:bb:3d:
a6:3c:5f:26:f2:3a:41:36:dd:1b:86:b6:4a:91:64:cf:90:01:
ff:89:85:57:93:7f:6f:1b:59:2a:d9:f2:17:d7:29:60:57:89:
df:85:aa:b8:b0:c0:eb:9b:07:7b:0f:4e:74:76:08:2e:d4:7e:
da:9f:f4:50:a6:70:88:30:6c:5b:af:3b:c8:48:ff:15:7b:5d:
86:be:30:ff:82:10:72:8c:61:4b:1e:71:2a:d5:53:66:64:11:
35:63:92:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 18:09:25 2026 by rpki-client