Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/ZpVr-oOXRalXl3fxDT4ShZx5jMI.roa
File: ZpVr-oOXRalXl3fxDT4ShZx5jMI.roa (raw, json)
Hash identifier: UzHcOtz9eNTUdP6Kd324OaavBXklzzooqtwDCEZLsN8=
Subject key identifier: 66:95:6B:FA:83:97:45:A9:57:97:77:F1:0D:3E:12:85:9C:79:8C:C2
Certificate issuer: /CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Certificate serial: 019ED1CBD32A3E5E6BE11BDBB968988D80CA
Authority key identifier: C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/ZpVr-oOXRalXl3fxDT4ShZx5jMI.roa
Signing time: Tue 16 Jun 2026 18:57:36 +0000
ROA not before: Tue 16 Jun 2026 18:57:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219463
IP address blocks: 195.123.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 23:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d1:cb:d3:2a:3e:5e:6b:e1:1b:db:b9:68:98:8d:80:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Validity
Not Before: Jun 16 18:57:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=66956bfa839745a9579777f10d3e12859c798cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e0:31:4f:fd:07:db:f6:51:96:7a:e8:2b:f2:
36:76:d8:01:25:45:95:70:1d:31:75:33:32:be:9b:
fc:84:7d:d8:36:97:c6:c7:6b:88:8a:93:b6:1a:b7:
f6:23:83:25:4f:f5:6f:09:86:cb:2f:3a:b0:a4:e9:
33:b9:f2:d4:85:b0:27:6a:86:fa:cb:ca:83:63:3c:
1a:46:c0:aa:6c:a6:e1:1b:6b:30:2b:e8:b9:0c:5a:
d4:ac:96:83:29:01:a9:fe:6a:9a:e4:bf:2f:80:80:
1d:d3:e0:a5:36:a0:79:fa:c1:4c:43:4e:c8:da:e6:
9a:24:e6:a2:0c:5f:90:b2:d7:b1:c1:98:f9:96:d3:
5e:14:75:a4:99:b3:bd:f6:6a:71:ca:7c:f8:40:01:
cd:48:16:fa:57:29:84:a1:eb:15:00:19:f5:8c:03:
af:a4:5f:a2:ed:72:4b:77:12:48:7f:30:98:06:fe:
1f:57:31:f4:a8:6c:2b:17:7b:f4:e5:ee:45:03:05:
65:13:76:ab:67:28:c9:1c:ce:d7:bf:87:36:8d:07:
ee:1e:f1:dd:3c:d2:eb:3b:81:1d:9d:b3:f3:30:8e:
93:5a:38:fe:2d:f0:16:06:d6:82:37:09:08:3e:d5:
31:58:ff:1f:8e:05:3e:a4:77:e9:64:85:9f:1a:95:
18:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:95:6B:FA:83:97:45:A9:57:97:77:F1:0D:3E:12:85:9C:79:8C:C2
X509v3 Authority Key Identifier:
keyid:C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/ZpVr-oOXRalXl3fxDT4ShZx5jMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.123.172.0/24
Signature Algorithm: sha256WithRSAEncryption
00:ce:4d:f6:ad:3d:b5:fa:c8:a0:ac:db:59:83:40:83:1b:77:
34:35:e1:50:96:c6:79:19:6a:d6:58:e3:04:16:8e:19:46:7f:
46:95:9d:3a:b9:f6:f2:1a:04:5c:07:d5:5c:7b:29:69:be:35:
a3:27:2a:83:c0:3f:25:fb:0e:71:f5:94:3e:2a:3b:63:1b:b0:
ed:23:58:0e:08:19:f7:a1:b8:1f:0b:aa:ed:66:ca:e1:05:15:
a7:d1:d9:14:75:15:18:6b:82:da:36:1e:29:17:c5:91:60:98:
7e:37:f9:52:93:a9:b1:33:04:20:31:ac:d9:59:08:74:2e:d6:
fc:26:37:1b:74:6c:f0:79:b6:b3:2c:2c:40:f6:15:77:c9:ab:
31:b3:b9:c6:e3:5f:1d:4a:94:b9:1d:a1:99:21:a3:9f:b9:34:
1e:a0:f4:2e:b4:c5:6b:ae:00:83:9e:1e:69:02:a1:2b:9a:ce:
bb:e8:0c:86:be:7b:a7:21:25:5b:2a:f1:2e:9c:eb:a4:ae:58:
6e:a6:f2:b4:64:5f:f2:d9:79:8a:33:24:3b:7f:c9:3e:8a:29:
6d:be:ca:85:0a:43:94:2c:d6:6c:2f:cf:e9:04:4a:b7:4b:cc:
a5:48:1a:97:91:c5:2e:6a:08:91:83:78:0b:f6:93:51:a0:e9:
a3:13:ed:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 06:12:32 2026 by rpki-client