Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/RZQMyy5Mzg5d9uibtuU5J2s3ExY.roa
File: RZQMyy5Mzg5d9uibtuU5J2s3ExY.roa (raw, json)
Hash identifier: cNhKdW/jIBlVmgalNBzdMb1dmA2lXN3oMfaoDZgTu1s=
Subject key identifier: 45:94:0C:CB:2E:4C:CE:0E:5D:F6:E8:9B:B6:E5:39:27:6B:37:13:16
Certificate issuer: /CN=3e689fc422f0a62d6b5daee1aa6b879c605b6557
Certificate serial: 019F23692E878FDA90541E7E691C31DEDB9A
Authority key identifier: 3E:68:9F:C4:22:F0:A6:2D:6B:5D:AE:E1:AA:6B:87:9C:60:5B:65:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmifxCLwpi1rXa7hqmuHnGBbZVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/RZQMyy5Mzg5d9uibtuU5J2s3ExY.roa
Signing time: Thu 02 Jul 2026 15:18:43 +0000
ROA not before: Thu 02 Jul 2026 15:18:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208164
IP address blocks: 193.27.91.0/24 maxlen: 24
194.153.133.0/24 maxlen: 24
2a0f:2880:400::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/PmifxCLwpi1rXa7hqmuHnGBbZVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/PmifxCLwpi1rXa7hqmuHnGBbZVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmifxCLwpi1rXa7hqmuHnGBbZVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:2e:87:8f:da:90:54:1e:7e:69:1c:31:de:db:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e689fc422f0a62d6b5daee1aa6b879c605b6557
Validity
Not Before: Jul 2 15:18:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=45940ccb2e4cce0e5df6e89bb6e539276b371316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8a:88:64:94:65:ea:8c:4d:5c:40:c7:e8:f1:
39:b2:8f:45:b3:5d:1e:de:0d:7e:0c:26:40:38:13:
c6:79:8f:7e:62:b9:aa:95:bc:d8:20:24:d7:e6:42:
8c:4a:12:52:df:a2:57:71:2e:74:47:69:c9:66:48:
ec:91:b3:d4:75:49:0d:70:25:1a:8b:43:28:39:74:
f2:ba:91:44:66:d4:c4:97:2c:d4:83:c4:12:b4:fb:
82:41:83:8b:d1:73:9e:a5:09:b2:34:15:39:e7:e4:
e8:4d:05:94:08:ba:7e:b3:b1:3c:f7:bb:9e:52:87:
d5:fe:bc:7f:42:ff:ee:86:4b:3a:86:c4:ad:03:e4:
6c:c4:94:6e:49:22:ae:9a:88:0b:7e:e1:cd:fb:d6:
c8:ce:59:b2:0e:d0:28:9e:04:b9:aa:6e:42:08:4e:
d8:28:df:2c:51:3f:c5:ff:93:5e:54:f6:53:d0:6e:
18:96:9d:d3:21:2d:93:e5:cd:34:70:5e:72:e2:40:
4d:f2:53:d6:30:5d:17:59:75:ed:89:2a:e0:70:3b:
6b:fa:ee:1e:00:80:75:ea:31:b8:63:fa:b3:f5:4d:
05:89:8e:42:7f:7e:fc:bf:73:fa:f3:ca:2a:72:f3:
58:ab:e3:89:09:2e:54:4f:de:df:11:c9:77:42:d7:
58:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:94:0C:CB:2E:4C:CE:0E:5D:F6:E8:9B:B6:E5:39:27:6B:37:13:16
X509v3 Authority Key Identifier:
keyid:3E:68:9F:C4:22:F0:A6:2D:6B:5D:AE:E1:AA:6B:87:9C:60:5B:65:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmifxCLwpi1rXa7hqmuHnGBbZVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/RZQMyy5Mzg5d9uibtuU5J2s3ExY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/PmifxCLwpi1rXa7hqmuHnGBbZVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.27.91.0/24
194.153.133.0/24
IPv6:
2a0f:2880:400::/40
Signature Algorithm: sha256WithRSAEncryption
86:5f:05:b8:4e:f2:1b:a2:8e:b0:23:ea:ab:92:24:0f:26:c5:
2b:6f:f3:bb:de:75:e2:8b:bc:a7:8c:79:bc:91:24:1e:ec:6d:
62:69:c6:ed:9a:de:80:4b:17:de:29:c5:de:ee:ba:03:fb:a5:
c6:50:51:7e:f5:3b:f0:6b:21:22:14:f4:aa:69:51:bc:21:39:
57:82:1b:c5:01:46:19:ab:77:f3:56:99:a5:4a:9f:96:0e:8a:
7e:35:14:14:30:49:b1:96:01:39:03:4e:f5:cd:bb:d0:72:d8:
bc:32:e2:1c:8a:c4:5a:58:52:f7:98:fc:16:7f:52:00:32:8b:
58:88:5a:30:99:5b:1b:35:4f:1e:4a:d4:26:27:03:57:f0:5a:
28:06:ff:f7:9b:c5:65:9c:55:36:7f:ab:0a:d9:1b:5e:9b:8e:
fa:d5:71:c0:c4:d7:f6:8b:52:e7:fc:3e:60:12:50:0f:fc:db:
9a:f4:fd:a2:d2:ef:51:11:c5:de:5c:f4:b6:c8:ec:63:ca:f3:
64:92:40:2b:92:f7:fc:5e:c3:7b:3c:ea:60:15:de:99:ba:e9:
ea:1f:41:5c:5c:81:2f:1b:cf:13:32:34:ef:b6:cb:40:04:96:
92:8d:47:7e:5f:a8:df:1c:7e:0e:eb:c9:02:b6:70:f7:a6:bb:
ce:77:a8:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:12:00 2026 by rpki-client