Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/zzUbUpJ0U8kfFS2hASb8CbCU2v8.roa
File: zzUbUpJ0U8kfFS2hASb8CbCU2v8.roa (raw, json)
Hash identifier: 1v46TTMiM6bmhWJ6+XTKdjmLOVZT8oef0QAXT9c3TME=
Subject key identifier: CF:35:1B:52:92:74:53:C9:1F:15:2D:A1:01:26:FC:09:B0:94:DA:FF
Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial: 019FDC25C7104D37660996A9F7A4D7B6AD78
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/zzUbUpJ0U8kfFS2hASb8CbCU2v8.roa
Signing time: Fri 07 Aug 2026 12:14:51 +0000
ROA not before: Fri 07 Aug 2026 12:14:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154383
IP address blocks: 193.106.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dc:25:c7:10:4d:37:66:09:96:a9:f7:a4:d7:b6:ad:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Validity
Not Before: Aug 7 12:14:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf351b52927453c91f152da10126fc09b094daff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5b:1a:10:37:95:90:55:2c:1c:c4:a6:f0:73:
39:08:19:3d:be:a3:7d:15:1f:43:d2:d1:0d:d4:ad:
88:39:b9:d8:95:cf:a1:c4:f8:7f:67:af:8b:26:21:
ea:60:43:56:94:ee:8a:46:e9:1d:00:c7:a8:10:cc:
45:1d:3c:d9:ad:c9:26:1c:dd:1e:54:6b:76:f5:c9:
3a:08:47:b8:0a:f7:e4:3c:cc:0b:41:b0:6f:30:ee:
f0:53:74:54:fa:73:24:60:2b:6b:15:b4:e5:00:6b:
9d:aa:eb:af:79:e8:de:c7:8f:66:a0:70:c5:6f:45:
27:6b:6c:b2:85:62:3f:53:48:93:7b:fa:e9:ed:4b:
cb:28:23:cd:25:91:30:e9:6f:b3:e7:bc:b2:11:f4:
93:a0:8c:6b:bb:15:00:b3:e6:09:4e:3a:ce:66:91:
91:7b:c8:52:a4:7a:9a:2e:ad:22:fa:09:0a:bd:10:
ee:09:2c:31:5d:15:25:23:ae:9e:48:3b:7d:d1:8f:
2c:62:16:e2:d7:9f:75:3a:88:5b:89:ba:82:be:0a:
d1:a1:66:5d:e7:51:44:10:ef:29:ad:aa:29:6e:6e:
24:fc:e8:6a:9c:f7:08:98:7f:22:d7:08:5f:dc:64:
c3:d5:dd:d7:29:74:d0:3a:c2:6c:46:1c:5d:d2:cc:
eb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:35:1B:52:92:74:53:C9:1F:15:2D:A1:01:26:FC:09:B0:94:DA:FF
X509v3 Authority Key Identifier:
keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/zzUbUpJ0U8kfFS2hASb8CbCU2v8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.198.0/24
Signature Algorithm: sha256WithRSAEncryption
66:81:bb:aa:76:c3:e9:b0:27:86:43:f4:62:cd:da:ad:1e:74:
42:3d:61:5d:50:f3:85:38:54:39:d6:4c:c8:25:8c:be:a5:1f:
89:5a:3a:1d:0d:ea:b8:67:24:3a:f2:c4:d3:e6:19:f0:7e:27:
9e:3c:ef:09:5d:3c:32:04:7b:26:ec:73:e9:d4:19:73:70:8e:
44:11:b9:5c:d9:ba:02:4d:0d:3d:42:80:af:f5:ce:46:b6:ee:
2e:82:7b:32:7d:ee:74:84:ec:36:3d:85:8c:84:7a:2e:ba:e4:
0a:87:90:67:e4:7e:9f:66:c0:08:4a:b4:1c:cc:5a:d1:73:34:
a3:b9:31:a7:83:23:f0:fa:dc:40:e9:63:37:29:ae:bd:74:7e:
62:66:39:d0:12:cf:ae:35:de:76:69:40:a9:26:7e:ed:5f:c2:
31:8e:aa:f3:45:16:0a:44:23:9b:eb:7d:91:2c:d8:93:2d:43:
43:83:82:fd:ff:f0:cc:6c:47:ab:9b:11:25:1b:1c:ac:7c:48:
62:8d:08:fe:ea:54:76:dd:c2:25:57:8e:e0:df:96:be:25:38:
23:a7:06:e8:a7:cd:ed:66:f0:2d:f7:d6:55:f0:4d:02:2d:e1:
09:67:64:3f:80:db:dd:4a:23:64:66:8d:e0:c9:19:fe:90:b2:
4c:70:3b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:25:05 2026 by rpki-client