Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/sZCbewzNcJjTBjxem97hWYKvmvk.roa
File: sZCbewzNcJjTBjxem97hWYKvmvk.roa (raw, json)
Hash identifier: pBXuND0hdHjfR+PuCizv3EBh1tny6KBYU3iXmqWVtnY=
Subject key identifier: B1:90:9B:7B:0C:CD:70:98:D3:06:3C:5E:9B:DE:E1:59:82:AF:9A:F9
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 019CDB2F38D234B2CF203B3BC73BAA34DE6F
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/sZCbewzNcJjTBjxem97hWYKvmvk.roa
Signing time: Wed 11 Mar 2026 04:37:10 +0000
ROA not before: Wed 11 Mar 2026 04:37:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205489
IP address blocks: 195.170.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 14:15:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:db:2f:38:d2:34:b2:cf:20:3b:3b:c7:3b:aa:34:de:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Mar 11 04:37:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b1909b7b0ccd7098d3063c5e9bdee15982af9af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f6:8c:d8:0a:29:d0:ed:fc:21:90:bb:a2:fd:
07:b3:91:e9:05:6f:ef:4b:9f:b8:08:ab:f9:86:5d:
70:0d:04:f4:ae:71:26:6f:8d:6f:fb:9e:a5:00:a0:
29:a6:46:97:19:ae:dd:de:bb:be:b8:a8:93:a4:ed:
e8:4e:f2:b5:c6:7d:fc:16:c0:b9:7b:df:d1:37:94:
56:2c:0f:42:98:b9:64:41:a9:ee:29:ad:33:a9:f2:
eb:2e:38:f0:fd:62:fa:eb:17:8b:01:0b:0d:20:fc:
05:48:49:bd:c8:3c:93:44:4b:e2:f6:a6:9b:21:35:
94:9a:97:c6:63:28:e3:5c:75:fa:bc:62:0a:d1:05:
59:96:a6:cc:3b:40:8f:22:d7:bb:61:aa:3c:32:90:
e7:f8:cb:35:4f:b8:81:3a:38:36:79:9a:dd:04:36:
0b:2e:ca:d9:3c:47:ca:df:15:29:92:74:68:42:0c:
da:24:19:6b:79:cd:fd:0b:11:f4:48:62:fe:57:cf:
f5:76:26:77:85:cc:cf:b8:2a:88:e3:34:0d:28:cf:
0f:c9:70:1e:d4:23:f4:64:fd:ab:d5:3d:cd:33:ab:
15:d0:07:0d:79:fe:1c:e1:dd:e0:75:80:99:6f:78:
8d:e0:85:8e:1a:1e:97:e5:98:8a:53:e5:03:20:e2:
44:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:90:9B:7B:0C:CD:70:98:D3:06:3C:5E:9B:DE:E1:59:82:AF:9A:F9
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/sZCbewzNcJjTBjxem97hWYKvmvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.170.163.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:77:03:c6:56:bf:22:71:20:e4:0a:86:a4:21:fb:f9:a0:f2:
5a:6e:e8:17:d3:60:7c:c7:0d:8b:ce:52:2b:8a:7e:d0:ed:23:
3d:6f:51:55:86:1a:a4:bb:6b:19:b1:71:12:ff:39:e3:a8:36:
2c:a1:23:e6:ea:8a:86:7f:17:a0:ae:46:9e:ec:52:20:6a:d4:
7b:28:f0:4b:16:5f:a6:fa:12:fe:aa:34:2c:32:b0:08:fd:d6:
68:0d:56:56:b1:b8:7f:a9:79:01:d1:11:ef:79:9a:62:9a:6a:
06:e3:5f:50:d7:9e:59:5b:98:d9:07:65:80:eb:53:b6:29:81:
3b:36:0c:a2:16:31:a0:eb:f4:dc:63:da:59:fb:16:4f:40:ed:
bd:2e:cf:45:2d:76:a8:22:4b:63:d5:94:24:de:25:4e:3f:c8:
b0:29:5d:67:b0:0c:f6:e4:28:96:f3:ff:2a:51:19:4a:69:21:
90:bd:66:e2:75:e0:4d:f4:ee:db:1e:59:64:d9:5a:c5:20:45:
70:f1:e1:57:bf:ff:f7:1b:df:73:1d:a9:d9:61:e3:91:a0:3a:
73:74:0c:f1:25:44:13:a8:8e:8c:3b:de:f0:a9:f1:ff:e9:a1:
5f:ea:5d:41:9f:45:93:32:6f:b4:f4:73:d5:28:88:aa:ec:a5:
89:4b:92:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 21:31:37 2026 by rpki-client