Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/zK5cZx2ZW-xmyDIJU358ymaV5Ak.roa
File: zK5cZx2ZW-xmyDIJU358ymaV5Ak.roa (raw, json)
Hash identifier: 3S5vYbxXzZt2zqDtbG7ZnUleaiNLeLPmjTrEYTmSEuE=
Subject key identifier: CC:AE:5C:67:1D:99:5B:EC:66:C8:32:09:53:7E:7C:CA:66:95:E4:09
Certificate issuer: /CN=86170339c2bc664d600fa98b8061269d48e4f2c6
Certificate serial: 019EEC0A3B16487ACF20290949EF927800F5
Authority key identifier: 86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/zK5cZx2ZW-xmyDIJU358ymaV5Ak.roa
Signing time: Sun 21 Jun 2026 21:15:53 +0000
ROA not before: Sun 21 Jun 2026 21:15:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153947
IP address blocks: 205.178.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ec:0a:3b:16:48:7a:cf:20:29:09:49:ef:92:78:00:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86170339c2bc664d600fa98b8061269d48e4f2c6
Validity
Not Before: Jun 21 21:15:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ccae5c671d995bec66c83209537e7cca6695e409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a2:45:e5:48:9a:b8:c7:c2:79:e3:a0:54:41:
c7:ea:63:3f:98:8b:36:4e:00:7c:f4:d7:1b:13:88:
28:58:ca:82:8a:93:1b:35:4e:64:1a:e5:f7:2e:ee:
0c:1b:93:f0:62:9e:a4:27:e6:b9:ca:58:04:b0:d4:
a7:22:94:9f:b6:94:54:2b:a1:2e:89:b2:5f:03:22:
fa:e6:2d:b6:51:3a:2a:13:34:17:33:df:75:0d:d1:
30:b1:80:45:e9:0e:a0:5d:22:ab:98:a2:48:6e:58:
82:b1:e6:2b:1c:c2:34:35:b8:bd:2f:ac:7c:7d:59:
ec:60:5b:f2:2a:d4:81:01:09:4d:39:3c:10:c9:f7:
31:04:40:de:90:1f:56:3d:39:95:a5:38:93:4e:b5:
27:19:f6:13:dd:68:3a:7c:83:c5:75:33:69:15:42:
7d:e4:7e:bf:3e:a4:53:f6:ce:dc:11:0a:3d:e1:52:
6e:95:8d:a4:25:a0:05:93:9e:cb:ce:38:47:78:73:
40:12:bb:f1:48:e3:3b:de:fc:1e:5f:a8:d6:1f:7e:
4d:39:55:91:90:8d:9f:9d:e0:7c:ab:91:bd:17:51:
23:6d:e5:cb:bb:b0:b6:3c:9b:41:62:35:02:22:ac:
ec:4e:0b:8f:21:11:be:ed:5f:df:3a:cd:d3:59:19:
8d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:AE:5C:67:1D:99:5B:EC:66:C8:32:09:53:7E:7C:CA:66:95:E4:09
X509v3 Authority Key Identifier:
keyid:86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/zK5cZx2ZW-xmyDIJU358ymaV5Ak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
205.178.176.0/24
Signature Algorithm: sha256WithRSAEncryption
46:14:51:de:7d:06:f7:3d:27:49:1c:fb:b6:19:a7:87:bc:cf:
92:ad:5d:e2:24:d6:06:06:95:5e:23:18:26:ad:87:d0:67:a9:
b6:94:ad:b6:73:ae:32:6c:9b:b2:24:b7:9e:55:ce:00:2d:e5:
75:8b:23:7e:0c:33:ea:82:20:50:e5:79:92:02:7e:8f:5f:80:
65:56:bb:12:7b:5d:94:e4:46:3d:18:11:4d:e6:a1:61:0d:76:
3e:22:e8:7c:b6:63:57:ba:35:a7:05:d5:b6:84:27:d7:3e:52:
ef:71:a1:e9:64:af:ef:d3:dc:d2:9b:90:14:2b:1d:c0:6e:5e:
e7:d1:55:4e:d0:94:98:43:02:06:bf:16:62:e5:91:04:49:89:
ec:a6:05:d0:71:49:47:5d:51:3c:11:cf:f3:11:be:67:44:01:
01:ea:0c:1e:00:e6:ae:ce:94:3d:f4:51:97:1b:4f:00:3c:01:
ce:5e:42:72:d9:7d:09:3e:e3:24:bd:ff:19:33:d0:f4:e5:16:
64:d6:c2:84:cc:1f:d1:77:3e:30:3c:88:2f:c7:f0:d8:d3:35:
12:54:70:f9:79:7c:2c:e5:c5:f0:5d:b1:fc:d9:02:79:24:b2:
4e:7c:9b:99:b9:ec:21:ca:91:4e:6e:9a:54:b6:f3:4b:9e:ba:
99:95:f6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:15:29 2026 by rpki-client