Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/1zTKaDP4-Zj9mUt7-S5YAcY_mVo.roa
File: 1zTKaDP4-Zj9mUt7-S5YAcY_mVo.roa (raw, json)
Hash identifier: 5+5yfPGg5lDhghBfx+dnbTS3tC9lex/WG7QMbZj26A4=
Subject key identifier: D7:34:CA:68:33:F8:F9:98:FD:99:4B:7B:F9:2E:58:01:C6:3F:99:5A
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 019EA6E6978AE8BC1E236EB65594EF739F3D
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/1zTKaDP4-Zj9mUt7-S5YAcY_mVo.roa
Signing time: Mon 08 Jun 2026 11:03:10 +0000
ROA not before: Mon 08 Jun 2026 11:03:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151338
IP address blocks: 213.145.82.0/24 maxlen: 24
213.145.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 11:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a6:e6:97:8a:e8:bc:1e:23:6e:b6:55:94:ef:73:9f:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Jun 8 11:03:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d734ca6833f8f998fd994b7bf92e5801c63f995a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c6:4e:db:e5:bd:1c:ab:c4:e9:c7:09:96:b2:
b4:54:9c:79:49:79:93:a3:34:9b:21:d0:58:e6:13:
4e:ba:94:1c:95:c4:4d:d1:9e:02:40:a4:5d:0c:1a:
03:02:3a:9a:ff:8c:4e:3b:48:dd:59:6c:5b:97:36:
f5:db:2d:6a:5b:6e:69:85:5c:9e:4d:58:51:22:9b:
01:04:58:2f:ba:ba:55:64:ec:e4:20:9f:38:96:27:
f9:ad:1b:f6:fb:d5:e0:31:07:1c:07:64:54:a5:1b:
d2:3d:92:45:de:28:58:20:dc:f0:be:c2:75:d2:3d:
3c:1a:63:60:d4:b5:e3:36:f7:6b:00:32:6e:4f:b5:
9f:b4:41:6b:f2:70:98:e6:e1:4a:3c:6d:9d:d5:ad:
bc:51:aa:a1:7d:84:0d:35:9b:01:df:e4:77:83:f3:
7b:01:3f:7d:78:4a:5c:13:b4:3e:4f:04:32:61:1c:
e4:b3:7c:8b:9e:4a:11:bd:34:e7:32:13:ff:88:87:
82:af:73:61:c5:13:7e:54:bf:7b:e8:fe:45:f0:ea:
ed:87:f8:d0:a3:70:16:fc:9f:db:5c:3f:82:83:de:
df:ed:2f:5c:a2:d3:52:02:cf:0f:92:67:ee:44:9b:
0b:25:90:6c:db:e4:16:b4:69:57:45:4e:61:5a:08:
4a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:34:CA:68:33:F8:F9:98:FD:99:4B:7B:F9:2E:58:01:C6:3F:99:5A
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/1zTKaDP4-Zj9mUt7-S5YAcY_mVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.82.0/24
213.145.87.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:06:95:eb:e4:95:a4:96:82:88:42:d9:bb:86:51:2d:6d:80:
fe:1f:43:32:bf:7e:d9:dd:40:c3:52:42:c2:e3:ee:a9:74:ae:
a2:67:50:fc:54:62:f3:a0:a8:3c:88:d0:31:f8:00:88:2f:59:
18:df:be:2d:31:6b:24:61:08:60:ba:69:9e:da:31:6e:4c:5e:
26:9a:7e:74:1c:c1:7d:e6:04:85:ef:55:c2:9b:9f:38:fe:bc:
37:a7:65:4b:20:bf:89:e2:2b:52:f4:90:0f:71:a3:ee:69:39:
78:5f:47:b9:2a:17:77:64:30:16:6a:5d:47:60:5d:fc:aa:ba:
46:89:ff:ea:ab:ac:48:37:bc:23:6a:f3:f9:16:03:c7:bd:95:
b0:b8:fb:b3:a0:d9:b7:bc:5a:2a:03:e9:71:eb:ff:ef:73:01:
36:c7:7c:17:ce:6d:7b:6e:9f:7a:8a:92:e5:15:6b:bf:fc:86:
ab:bd:cc:cb:c1:8e:0c:4b:1b:e9:81:c9:74:d5:6e:27:cd:18:
bb:e2:4e:3f:08:4a:2c:99:c1:3c:f0:47:86:cb:a0:d7:4b:30:
78:89:9f:03:40:a0:b4:87:96:b0:58:28:c3:42:3a:7d:6c:05:
99:a1:cf:8a:16:39:29:d4:e5:1f:71:e3:07:37:15:5d:12:4f:
f0:1a:2a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 19:13:06 2026 by rpki-client