Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/znRtvDjx6p6QKqOpN-UH1Bqd7ao.roa
File: znRtvDjx6p6QKqOpN-UH1Bqd7ao.roa (raw, json)
Hash identifier: +4jJSJNUJ8eFyd4hEIFej6uo6SX/BvFj2H5hv/FUtHo=
Subject key identifier: CE:74:6D:BC:38:F1:EA:9E:90:2A:A3:A9:37:E5:07:D4:1A:9D:ED:AA
Certificate issuer: /CN=3a00807698f0b097d69ab3926917d1dcc838a624
Certificate serial: 019DECF54197E51EA88B878203DEE3A5662E
Authority key identifier: 3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/znRtvDjx6p6QKqOpN-UH1Bqd7ao.roa
Signing time: Sun 03 May 2026 08:29:49 +0000
ROA not before: Sun 03 May 2026 08:29:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213220
IP address blocks: 5.180.99.0/24 maxlen: 24
45.81.32.0/24 maxlen: 24
45.81.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 22:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ec:f5:41:97:e5:1e:a8:8b:87:82:03:de:e3:a5:66:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a00807698f0b097d69ab3926917d1dcc838a624
Validity
Not Before: May 3 08:29:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ce746dbc38f1ea9e902aa3a937e507d41a9dedaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:00:5c:55:83:d1:bc:35:af:fa:ac:f0:99:2d:
30:2a:83:7e:4a:78:2d:61:4b:4a:1b:1d:df:34:2a:
a9:17:fd:c7:bd:e5:fa:a8:0c:7e:6a:35:7f:13:f8:
85:6e:c3:33:f1:a1:5b:f8:41:d1:2c:cd:96:f0:e7:
90:7b:54:ca:7c:29:1f:f5:30:b2:2a:11:44:a7:38:
15:72:e7:d1:77:bf:33:10:39:6b:10:8d:04:2e:fc:
06:a8:13:25:c4:32:9a:48:c5:64:84:b8:b8:e0:01:
6a:42:0a:ca:be:5f:72:83:6e:23:3e:60:4b:b7:7d:
b6:99:3a:1e:a6:0c:bc:d7:67:df:7e:53:20:95:18:
5a:81:cd:d6:ce:3a:70:c7:1c:ae:d2:ae:20:53:23:
fa:ce:fb:75:44:90:89:13:f3:11:eb:33:f8:1b:a9:
c8:62:19:00:b6:31:cd:da:a1:df:49:a8:6c:ff:b1:
05:29:34:5a:b6:29:96:c7:07:62:02:8b:84:75:57:
79:89:c5:a8:82:78:d6:9d:f1:ad:2f:1a:2a:53:8f:
b5:8d:f1:1c:85:31:d9:1f:a9:e1:97:0e:df:ee:50:
f5:55:8a:8b:9f:db:6c:28:c6:68:c7:9e:3a:f4:ff:
bc:7b:9f:f9:bd:7f:e3:1f:c0:1c:90:03:e3:71:90:
f4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:74:6D:BC:38:F1:EA:9E:90:2A:A3:A9:37:E5:07:D4:1A:9D:ED:AA
X509v3 Authority Key Identifier:
keyid:3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/znRtvDjx6p6QKqOpN-UH1Bqd7ao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.99.0/24
45.81.32.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:7a:0a:93:5a:7d:df:9c:6e:60:83:34:82:aa:77:68:ca:3d:
ac:79:2d:3c:99:21:7b:2a:76:83:3d:be:a5:f5:0f:20:ce:dc:
cd:c6:10:35:62:f8:70:9c:8f:5c:cd:7f:52:f9:4f:a1:d5:9b:
08:76:69:65:9a:4e:41:93:db:b0:fb:01:47:c8:b9:b9:95:a8:
f0:10:1f:e5:00:d6:95:a2:e2:7d:bd:7c:18:b8:9e:a4:41:94:
ca:b3:5b:dc:57:8a:8d:05:5b:60:02:33:5e:4c:d5:91:b1:68:
16:1a:0b:a2:cb:2c:6b:51:3c:7b:37:b4:05:00:ea:74:3a:96:
9a:7e:3d:04:f4:85:45:51:76:4d:48:d0:1b:62:7c:b6:73:e7:
5c:2a:e3:96:c9:9d:74:40:ad:5a:a4:74:79:c4:d5:d4:8b:bb:
08:82:57:b7:54:9c:0a:1f:f4:79:a0:98:f7:85:12:bd:6a:93:
ff:71:f2:12:23:92:9f:51:f6:03:3a:52:17:b7:cd:cc:a4:9d:
8d:86:08:a5:5f:5d:d7:b2:bc:2d:76:2d:b7:5a:cd:37:a1:71:
1d:7d:4c:6a:9d:20:be:40:1d:a1:99:e6:49:ea:c4:19:30:0f:
c0:8b:2c:12:6c:bd:57:10:6c:c5:8a:de:bc:60:f3:53:cb:f6:
db:cd:37:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 05:36:20 2026 by rpki-client