Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/_zsc5_HWN7rK9-RP1VE7dyMRgpI.roa
File: _zsc5_HWN7rK9-RP1VE7dyMRgpI.roa (raw, json)
Hash identifier: PFEZ/FgDsWuT+P8VXgvLEP9fry1TNZZsprqcn28hp8Y=
Subject key identifier: FF:3B:1C:E7:F1:D6:37:BA:CA:F7:E4:4F:D5:51:3B:77:23:11:82:92
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01A1789705CD32E82320129E46DEBC5AAAB0
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/_zsc5_HWN7rK9-RP1VE7dyMRgpI.roa
Signing time: Mon 26 Oct 2026 14:22:05 +0000
ROA not before: Mon 26 Oct 2026 14:22:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218850
IP address blocks: 185.231.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 14:29:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:97:05:cd:32:e8:23:20:12:9e:46:de:bc:5a:aa:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Oct 26 14:22:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ff3b1ce7f1d637bacaf7e44fd5513b7723118292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8d:7f:15:3e:88:8c:e4:46:c1:b8:ba:b7:af:
03:e5:9f:09:58:9a:1c:f7:23:fd:da:8d:9c:22:e2:
38:fd:15:a3:ec:d1:26:cc:bf:89:23:35:e7:54:4a:
d4:14:80:3f:92:7c:8c:77:7c:0c:fb:93:73:ff:e9:
ee:74:38:19:19:0e:ea:85:e6:67:a1:1d:ef:de:c5:
a8:3e:05:9a:5c:5d:ab:ee:c0:69:98:03:4a:fa:d8:
4f:9e:99:10:02:38:14:7b:4f:9c:cb:74:93:b4:a4:
27:88:d3:a6:0b:96:ed:26:85:3b:49:ce:1b:0f:82:
25:3d:78:03:d6:b8:dc:30:d4:3b:47:a0:d5:0c:2c:
61:1a:08:3e:01:58:81:d4:fb:b8:b6:e8:fb:b3:14:
44:bb:43:2a:66:3e:74:77:d8:17:ee:3d:5e:f9:55:
ce:8b:f1:fd:c8:a4:97:59:ca:8e:80:61:7d:df:53:
43:bc:38:36:b6:fa:4f:53:34:3e:de:ec:8f:71:7e:
c4:5d:e3:06:9a:03:65:28:23:3f:fa:cd:d3:0b:65:
9b:3c:21:63:83:24:e6:fd:e9:87:89:63:0d:bd:7f:
01:3a:c0:bf:58:4e:df:25:d3:d6:01:91:f0:f3:da:
37:10:92:64:46:ba:5a:3d:c6:97:e4:ed:bd:fc:6a:
db:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:3B:1C:E7:F1:D6:37:BA:CA:F7:E4:4F:D5:51:3B:77:23:11:82:92
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/_zsc5_HWN7rK9-RP1VE7dyMRgpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.226.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:1e:6d:03:9f:e7:28:3d:18:51:97:55:be:67:2d:a5:e4:fa:
40:ac:ca:8a:b1:01:93:c1:fc:e2:da:ab:ce:ad:58:a7:2f:28:
5e:a8:a3:76:5d:86:10:1c:bf:43:81:88:d9:ab:74:32:3d:21:
94:33:f7:15:32:74:3e:b8:f9:8b:b7:67:f0:3e:e0:db:a8:6f:
e2:ce:97:e8:66:ed:8c:9f:50:de:05:9e:98:05:97:12:9e:ed:
e8:51:1a:28:7f:19:14:1e:97:aa:cc:1c:85:bc:a1:0e:d8:77:
0b:b7:2f:cb:4e:4d:44:3a:d1:bf:20:19:de:26:38:8f:d1:bf:
7b:c0:00:ef:4e:52:35:90:35:10:74:19:f8:a1:cc:1c:f9:57:
bd:f4:61:1a:37:a1:90:5a:f6:8e:83:59:54:aa:31:53:fb:f7:
5c:a9:83:55:61:02:66:97:e3:25:83:1a:7c:a9:bb:28:66:f5:
c9:ca:68:41:1d:3c:90:5d:5d:f7:23:1d:30:07:69:b4:b0:3a:
3a:80:ee:98:38:2e:61:94:4d:f9:0b:5b:8c:54:a5:c3:dd:7a:
4f:47:7f:d8:30:3b:30:37:a4:5f:0f:78:33:5f:fc:65:2d:00:
a5:68:76:07:68:28:c4:07:33:31:20:da:62:2a:09:45:ff:85:
38:c3:74:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:46:43 2026 by rpki-client