Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/dZTs0EIjPnxi68tbTokfAbw6h7g.roa
File: dZTs0EIjPnxi68tbTokfAbw6h7g.roa (raw, json)
Hash identifier: /Yw0GBij2t0h3+q9/KbDbCPzij5LVOg+e269LitDfx4=
Subject key identifier: 75:94:EC:D0:42:23:3E:7C:62:EB:CB:5B:4E:89:1F:01:BC:3A:87:B8
Certificate issuer: /CN=5a1b1acf226f3c2ffc31c1eb2b6a5194b50b52f4
Certificate serial: 019E9854BA8212519A33DA90EACC91F44C25
Authority key identifier: 5A:1B:1A:CF:22:6F:3C:2F:FC:31:C1:EB:2B:6A:51:94:B5:0B:52:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/dZTs0EIjPnxi68tbTokfAbw6h7g.roa
Signing time: Fri 05 Jun 2026 15:09:09 +0000
ROA not before: Fri 05 Jun 2026 15:09:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8758
IP address blocks: 193.239.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:98:54:ba:82:12:51:9a:33:da:90:ea:cc:91:f4:4c:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a1b1acf226f3c2ffc31c1eb2b6a5194b50b52f4
Validity
Not Before: Jun 5 15:09:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7594ecd042233e7c62ebcb5b4e891f01bc3a87b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:99:d7:8a:6c:c2:7c:41:7b:7e:fe:3b:38:16:
1c:eb:60:15:88:c8:f8:a3:72:03:11:01:ec:1e:b1:
63:8e:0e:30:14:92:e4:cc:44:50:df:25:bd:6d:87:
b1:8f:ee:d9:74:c1:c7:62:e7:9d:99:94:93:28:59:
3b:c7:ff:ab:44:a9:1e:fc:af:1c:53:be:53:87:8c:
7a:05:aa:7d:3a:6c:f9:cd:09:76:21:0d:d1:f1:9a:
a2:7b:aa:ba:9f:14:33:4c:38:22:6c:80:7e:9a:72:
2a:05:4b:6f:37:80:90:15:e2:d7:ec:91:ea:fc:df:
9e:ee:1d:c6:74:8a:e0:df:3b:61:a7:d6:ac:1c:b1:
63:11:df:06:a4:bc:79:1a:f6:dc:7d:32:39:75:c7:
ec:7b:6d:73:47:d7:e8:cd:e3:60:dd:82:10:20:06:
cd:7d:ea:b4:2c:5d:90:a4:1f:f3:35:c5:5f:70:0d:
4a:f8:c7:31:e1:20:24:7e:85:79:18:aa:d4:ac:a3:
3d:ba:d1:85:92:8f:c6:37:7b:f6:e4:97:c8:c5:cf:
67:89:30:46:71:6c:e3:34:69:d2:9f:c4:15:4a:dc:
da:d5:6c:40:e4:66:4e:55:7d:7e:1b:53:11:94:fc:
6a:8e:81:bd:28:e9:80:57:52:a9:03:6d:b7:81:3c:
19:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:94:EC:D0:42:23:3E:7C:62:EB:CB:5B:4E:89:1F:01:BC:3A:87:B8
X509v3 Authority Key Identifier:
keyid:5A:1B:1A:CF:22:6F:3C:2F:FC:31:C1:EB:2B:6A:51:94:B5:0B:52:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/dZTs0EIjPnxi68tbTokfAbw6h7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.20.0/22
Signature Algorithm: sha256WithRSAEncryption
54:41:85:b8:03:cc:72:35:6c:5b:13:50:3c:43:a6:da:f8:af:
5c:07:a8:0b:3e:69:8a:6a:fa:b3:da:77:e7:40:4f:7e:54:08:
2b:a5:c1:b8:16:41:12:89:0e:c6:37:70:f7:f2:65:8d:f2:2f:
0c:44:0e:c7:90:1b:6a:51:f2:52:46:ea:76:ff:ee:7f:bd:8c:
7b:c0:3d:c6:42:9d:7e:91:de:c4:a1:4f:96:7a:c2:e7:aa:ee:
17:4f:f9:02:cb:5c:52:ad:8f:e4:40:1f:c9:55:ed:ea:09:4e:
28:84:8a:25:b2:45:e1:1d:ca:7e:02:6e:d5:08:b9:18:47:dd:
0b:3f:48:b7:96:44:3e:50:40:f2:f3:9b:f1:b3:b5:ee:b8:55:
f5:32:08:27:46:52:fe:a2:b5:24:a2:27:50:0f:00:22:df:a8:
ac:38:28:35:60:46:b9:c0:3c:2b:ad:9b:03:21:43:30:e3:5e:
e3:3b:03:26:3a:5b:5d:3f:9b:82:8f:81:4e:1b:0a:46:36:3f:
19:60:bb:83:a6:5e:c6:55:eb:7d:62:cd:d1:0d:c7:96:b3:62:
41:5e:2b:62:67:df:97:86:24:be:bc:1a:18:28:67:1a:b8:14:
7c:a3:cc:13:22:22:c2:a0:86:f3:a5:6b:21:d9:d6:2e:e1:81:
e5:83:78:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:09:12 2026 by rpki-client