Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/Zc-3buCmpkxcSPLtDxmT9skS6LY.roa
File: Zc-3buCmpkxcSPLtDxmT9skS6LY.roa (raw, json)
Hash identifier: zC97RSvuPPJ+rDjI+CneKiQgS8s6aa4yZHNe6jWz970=
Subject key identifier: 65:CF:B7:6E:E0:A6:A6:4C:5C:48:F2:ED:0F:19:93:F6:C9:12:E8:B6
Certificate issuer: /CN=e24d7158bdfd463c391f16cbeb0b709e41a6fc96
Certificate serial: 01A162957FD823422E1CB9F6C2CD456BB813
Authority key identifier: E2:4D:71:58:BD:FD:46:3C:39:1F:16:CB:EB:0B:70:9E:41:A6:FC:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4k1xWL39Rjw5HxbL6wtwnkGm_JY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/Zc-3buCmpkxcSPLtDxmT9skS6LY.roa
Signing time: Thu 22 Oct 2026 07:48:47 +0000
ROA not before: Thu 22 Oct 2026 07:48:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 680
IP address blocks: 147.189.192.0/20 maxlen: 20
194.61.20.0/22 maxlen: 22
2a12:c940::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4k1xWL39Rjw5HxbL6wtwnkGm_JY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 10:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:62:95:7f:d8:23:42:2e:1c:b9:f6:c2:cd:45:6b:b8:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24d7158bdfd463c391f16cbeb0b709e41a6fc96
Validity
Not Before: Oct 22 07:48:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=65cfb76ee0a6a64c5c48f2ed0f1993f6c912e8b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e4:e3:75:6b:3c:17:55:39:bd:0f:96:60:ca:
c3:20:2e:7a:a0:d3:43:5c:02:ce:4c:1d:b6:ae:ee:
49:fb:11:0a:f0:84:3f:2c:8d:d5:85:50:0c:dd:d0:
3e:e9:c9:18:1b:5d:3f:66:2c:cc:54:e0:98:09:fc:
9a:e4:18:9f:68:de:8f:27:d8:1b:a1:43:af:e6:ef:
6f:d4:28:9b:3c:f3:b5:99:ec:e5:cb:7f:77:e2:20:
33:4b:39:44:ee:f2:c2:f9:36:61:ab:2f:28:2c:1e:
19:bc:bb:0c:5b:cc:a9:f1:72:54:47:0e:fe:b7:b5:
c8:e1:c6:46:7d:11:be:23:37:d0:b2:1f:0a:bf:d4:
1e:e7:b9:29:f0:8e:dc:7d:44:e3:7a:22:e5:3c:4a:
b1:4d:ef:86:31:53:fa:25:50:e0:99:15:29:15:8b:
be:6b:b3:97:fd:03:b7:e5:17:0c:86:ef:7d:68:ef:
00:f2:aa:37:c5:bb:34:2d:62:7b:d3:d8:0a:0d:1f:
2b:3f:7b:10:21:e2:45:46:65:ee:46:b4:35:97:89:
56:b6:3c:d0:77:0a:29:f4:da:e3:0a:07:22:32:94:
92:cf:d8:44:b4:f9:70:8f:97:70:82:0c:23:69:1a:
ad:49:44:4e:61:5c:e0:c4:93:2b:ad:b9:e2:9d:5e:
8b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:CF:B7:6E:E0:A6:A6:4C:5C:48:F2:ED:0F:19:93:F6:C9:12:E8:B6
X509v3 Authority Key Identifier:
keyid:E2:4D:71:58:BD:FD:46:3C:39:1F:16:CB:EB:0B:70:9E:41:A6:FC:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4k1xWL39Rjw5HxbL6wtwnkGm_JY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/Zc-3buCmpkxcSPLtDxmT9skS6LY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.189.192.0/20
194.61.20.0/22
IPv6:
2a12:c940::/29
Signature Algorithm: sha256WithRSAEncryption
0d:f0:de:7f:77:2f:eb:fc:9a:52:9b:ae:46:33:13:87:f3:b5:
df:30:11:da:1c:cc:04:2c:f6:03:ee:82:c3:87:ad:96:5e:ba:
58:19:43:62:2e:79:4e:6c:d9:94:23:87:70:86:14:c0:7d:37:
8e:83:68:80:40:8a:36:5d:65:f5:04:de:69:eb:7f:9a:b8:57:
de:4a:54:93:7d:77:92:22:2b:f4:88:cf:05:99:62:8f:92:2b:
d2:f3:f8:60:09:5d:bd:f1:b4:8a:20:80:d7:eb:df:11:7f:0e:
84:76:94:42:6b:38:b7:1d:3d:27:35:1b:38:5d:88:19:90:46:
b0:86:44:ac:30:c3:fb:8f:44:c8:9d:7c:b5:cf:f1:25:0d:78:
b1:b6:99:28:fa:ac:50:df:c7:dd:a3:b8:50:02:2b:d8:1b:93:
8d:60:ba:b3:c7:3d:50:ea:0e:4d:db:af:a8:4f:0c:e8:b3:cb:
32:9f:0c:59:b7:5c:ad:0e:b7:6e:41:43:54:83:d6:de:30:3c:
52:a6:8d:07:f4:66:2a:78:e4:ea:78:d7:c8:ea:fd:83:76:34:
9d:d9:c4:6e:7f:e4:8f:53:57:15:43:63:e5:6b:b5:db:8b:f9:
6a:cb:c6:66:e3:53:d1:1f:75:3a:86:50:4a:0a:d9:16:f3:fd:
1c:92:88:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 21:16:30 2026 by rpki-client