Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/rZRJXwJNJ3BfK_DT3CgjF4Gzyag.roa
File: rZRJXwJNJ3BfK_DT3CgjF4Gzyag.roa (raw, json)
Hash identifier: rFZHyfSVT5PCl89WaarZZiQd7lJ5nZroQNMf7o6RjwQ=
Subject key identifier: AD:94:49:5F:02:4D:27:70:5F:2B:F0:D3:DC:28:23:17:81:B3:C9:A8
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 019CD735278AC87735A49A79EE94B4860BD7
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/rZRJXwJNJ3BfK_DT3CgjF4Gzyag.roa
Signing time: Tue 10 Mar 2026 10:05:10 +0000
ROA not before: Tue 10 Mar 2026 10:05:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44188
IP address blocks: 185.165.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d7:35:27:8a:c8:77:35:a4:9a:79:ee:94:b4:86:0b:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Mar 10 10:05:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ad94495f024d27705f2bf0d3dc28231781b3c9a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9d:5d:fc:af:d6:26:82:de:10:a0:d3:75:85:
ef:ec:87:4e:c6:dd:da:20:07:d4:5f:a4:75:0e:0b:
28:aa:25:c0:fb:55:a6:e1:1e:fc:85:53:56:f0:88:
7b:e1:0c:d0:ce:f0:b2:94:9e:32:82:79:7c:d4:bf:
b6:77:82:39:50:ef:c7:c6:d4:2a:59:11:80:58:ac:
8a:6f:83:6c:b2:e4:1d:88:e4:bf:3f:bd:b2:70:e1:
d5:4e:1b:a1:9f:54:9d:62:17:65:18:0c:0b:1b:47:
f6:3c:91:55:9c:0c:3b:ef:11:35:06:57:a9:c8:9b:
f8:06:ec:3f:7f:98:35:dc:95:0a:b5:99:39:8d:db:
f8:16:f3:1f:6f:8b:50:bc:c8:bc:23:a4:1d:4c:82:
c7:9e:2e:53:d1:64:de:ab:34:5b:17:ee:a5:ef:bf:
cc:e2:84:92:28:82:55:4e:f0:c1:3c:0e:4d:2e:62:
16:d6:f5:6a:d9:94:f8:81:fc:0c:3a:48:59:bf:e8:
06:d2:ab:4c:11:ce:24:fc:28:0a:e9:e3:8b:e9:8d:
f4:49:6f:6c:a1:eb:b7:be:6c:c8:2e:5a:98:40:0f:
e1:56:61:2b:49:25:dd:73:52:49:bd:59:ab:3c:05:
7f:f2:ce:c3:ec:10:03:4d:fb:5e:1d:93:b7:2c:8e:
1a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:94:49:5F:02:4D:27:70:5F:2B:F0:D3:DC:28:23:17:81:B3:C9:A8
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/rZRJXwJNJ3BfK_DT3CgjF4Gzyag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.4.0/24
Signature Algorithm: sha256WithRSAEncryption
59:b6:5e:de:d2:a8:eb:7a:fa:a6:4b:31:22:16:35:ff:20:b6:
77:6d:12:d2:4e:d0:bd:59:5b:74:6e:0b:b7:2a:44:5a:75:97:
59:bc:ac:5a:dc:3d:50:6f:0e:ee:05:cf:93:89:37:dd:be:97:
90:1a:a4:11:98:a0:cd:11:ef:eb:e5:22:29:0a:0e:b0:44:df:
e1:a5:ec:2c:43:2e:72:c0:ba:ab:1d:fe:dc:da:75:25:1d:f5:
0c:01:19:9c:2d:b4:e6:fe:7b:7f:88:89:eb:ef:bf:f4:ea:a9:
df:8a:72:21:e1:03:0d:2f:ad:37:cb:fe:70:fb:03:73:9d:ec:
01:26:b5:14:e0:a4:02:c5:cd:13:91:87:ad:c7:10:9d:eb:31:
af:29:99:86:0c:55:88:92:53:1f:2d:4e:f9:d8:bf:8e:8d:17:
42:32:e5:ca:47:84:c2:eb:76:0a:fe:65:47:b5:f7:19:a8:61:
73:e4:1f:5c:fb:1b:39:68:6c:14:95:c9:83:4a:76:8e:09:c8:
21:98:d9:83:37:b2:f1:3a:46:3c:9d:b3:dd:6b:b4:05:82:59:
89:53:06:b8:c0:d7:81:4a:b7:48:c2:8d:ae:4b:80:72:de:ad:
13:2d:05:01:e9:34:ad:68:3f:b4:77:85:71:07:2b:b1:c0:93:
ae:4b:8a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:28:42 2026 by rpki-client