Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/zrNA7EO-aqfQRhRNBG4VKp78FXg.roa
File: zrNA7EO-aqfQRhRNBG4VKp78FXg.roa (raw, json)
Hash identifier: t2kI/cFlrzrBr7Cb/Sn2KYFTTynlTaXh6qfK8ZN7nAE=
Subject key identifier: CE:B3:40:EC:43:BE:6A:A7:D0:46:14:4D:04:6E:15:2A:9E:FC:15:78
Certificate issuer: /CN=e6f1dedaf4dbda60da990d685650e68c888c6100
Certificate serial: 019F6FBF1ED4563DEEC49A81ABB847EA4341
Authority key identifier: E6:F1:DE:DA:F4:DB:DA:60:DA:99:0D:68:56:50:E6:8C:88:8C:61:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vHe2vTb2mDamQ1oVlDmjIiMYQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/zrNA7EO-aqfQRhRNBG4VKp78FXg.roa
Signing time: Fri 17 Jul 2026 11:03:43 +0000
ROA not before: Fri 17 Jul 2026 11:03:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209854
IP address blocks: 185.204.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5vHe2vTb2mDamQ1oVlDmjIiMYQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6f:bf:1e:d4:56:3d:ee:c4:9a:81:ab:b8:47:ea:43:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6f1dedaf4dbda60da990d685650e68c888c6100
Validity
Not Before: Jul 17 11:03:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ceb340ec43be6aa7d046144d046e152a9efc1578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9f:28:74:cd:51:77:7e:e3:57:c5:9d:8f:a1:
06:66:ef:7f:5f:f2:31:47:7b:15:83:79:f4:4f:6d:
59:80:6f:93:c9:de:7e:fe:f4:b9:82:f3:66:81:f1:
fa:d0:b4:1d:31:b4:b9:60:bb:13:6d:31:09:45:46:
29:32:de:83:47:8e:09:d8:5e:06:b5:2a:15:27:2c:
a3:6d:f8:fa:4c:69:d9:a2:d8:ab:b9:bb:52:98:a9:
b4:76:01:93:26:99:59:81:b8:02:fa:ba:ee:b8:da:
f9:56:47:65:80:52:e2:68:de:ff:59:55:90:f4:d1:
a2:fa:48:ab:64:05:31:31:12:e6:97:6b:f0:87:68:
f7:89:b6:ef:21:af:d7:d8:8a:1a:3f:25:b8:74:90:
f6:58:9d:3b:a0:83:55:89:e7:94:a0:38:15:6e:58:
c4:86:52:f9:30:38:8b:98:5b:dc:a9:07:cb:23:95:
54:f8:81:87:82:09:b7:35:0c:0a:02:0d:d5:9c:c8:
f0:08:00:b6:21:99:79:7f:29:78:60:15:3e:66:53:
55:57:58:8f:2e:5c:ad:64:f4:e8:25:fb:f1:6c:80:
7d:68:99:7c:aa:84:dc:b3:75:2d:dc:98:2e:8a:91:
81:fd:92:52:80:3c:b1:b7:dc:b9:c0:67:e3:0b:ee:
b0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B3:40:EC:43:BE:6A:A7:D0:46:14:4D:04:6E:15:2A:9E:FC:15:78
X509v3 Authority Key Identifier:
keyid:E6:F1:DE:DA:F4:DB:DA:60:DA:99:0D:68:56:50:E6:8C:88:8C:61:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vHe2vTb2mDamQ1oVlDmjIiMYQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/zrNA7EO-aqfQRhRNBG4VKp78FXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.92.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:a8:d7:b9:67:17:9a:db:48:3f:00:3e:e7:58:d2:c0:83:94:
b8:0d:90:9e:42:a2:10:3f:2d:f5:7e:5c:a7:3f:7b:a6:0a:32:
13:c4:4e:90:2e:99:32:1c:8a:11:5b:08:81:f8:04:4f:af:b2:
02:e6:53:e7:19:b5:b5:da:cc:9a:a7:ab:73:88:01:62:71:5b:
d1:7f:4e:57:1e:c2:f3:8d:90:66:e6:a8:ee:0c:42:b4:80:e9:
fa:0e:85:24:70:e8:d2:87:52:29:42:d2:09:00:44:1f:21:50:
e3:9e:85:7d:d0:e7:86:97:28:1c:b0:03:27:66:c8:38:f6:f3:
46:77:43:a8:39:d4:e3:f3:9a:0a:45:80:9b:42:c9:8b:7d:d9:
43:55:b2:78:37:7a:e2:79:37:09:3b:da:a3:0f:44:b0:cd:cd:
70:28:5c:8a:fb:b8:e8:d8:a2:f1:01:1b:d4:ff:04:e7:62:34:
26:ad:50:24:d1:9c:2f:36:7d:3a:94:b4:22:f6:89:55:7b:50:
4b:2b:df:61:34:e8:e0:e2:26:1d:a7:56:73:71:0c:58:4e:8e:
36:c2:e4:e1:73:8a:3e:36:fd:97:e6:9c:25:06:7a:46:9c:24:
e3:53:59:6c:db:09:a7:99:60:ed:01:79:39:76:37:8c:ee:53:
69:27:e4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:42:02 2026 by rpki-client