Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ZX6HhwU5dJebdl1LOEhQt9ndDag.roa
File: ZX6HhwU5dJebdl1LOEhQt9ndDag.roa (raw, json)
Hash identifier: NmfyAMAVIO1vtg+ccj4WvaLDei4mM0Yx0f3Ifm3L7ZI=
Subject key identifier: 65:7E:87:87:05:39:74:97:9B:76:5D:4B:38:48:50:B7:D9:DD:0D:A8
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01A0A3DEAAD8FAABDC69F43941CAC4E7E1CD
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ZX6HhwU5dJebdl1LOEhQt9ndDag.roa
Signing time: Tue 15 Sep 2026 07:01:13 +0000
ROA not before: Tue 15 Sep 2026 07:01:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202656
IP address blocks: 195.133.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a3:de:aa:d8:fa:ab:dc:69:f4:39:41:ca:c4:e7:e1:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 15 07:01:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=657e8787053974979b765d4b384850b7d9dd0da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:24:8d:c7:a3:16:3f:79:ac:d6:71:13:09:05:
11:03:cc:6b:61:5e:6c:13:af:6c:cc:31:5f:a5:56:
67:f6:6a:c4:f7:17:93:97:b7:dc:01:91:4e:45:21:
20:8a:d8:81:8e:79:ea:48:4f:ac:19:97:23:a1:65:
62:3a:ca:d9:80:42:fd:40:e9:8e:ce:cc:1c:45:6b:
26:20:c7:06:28:fc:bc:4e:96:2b:60:19:95:fa:80:
75:e8:e8:fd:cb:97:82:b4:bf:40:ef:d7:12:40:2c:
e1:b5:3b:ad:c6:76:95:36:a4:d4:00:41:af:2d:11:
ab:87:06:43:b6:b4:f4:1b:ec:cf:28:aa:fd:7c:35:
fe:fc:89:bb:1d:5a:3e:12:c2:fc:19:c7:4d:68:ea:
e2:38:cc:e2:4d:a1:8d:b0:16:82:0a:aa:29:5b:5d:
ee:26:b5:a9:c0:1c:77:4b:8f:c0:93:50:99:ff:e4:
f1:d2:6f:bb:52:d4:90:17:8a:17:76:73:dd:43:11:
dd:da:0f:89:dd:14:22:69:f2:4b:55:c6:59:6b:ac:
cb:d5:34:e5:c4:42:f5:bb:67:53:6e:38:a8:f3:88:
d6:9d:d7:d6:64:6c:5b:4a:ad:df:65:ec:6f:af:3b:
21:10:37:33:4c:1e:a1:df:85:71:21:a3:10:30:60:
d0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:7E:87:87:05:39:74:97:9B:76:5D:4B:38:48:50:B7:D9:DD:0D:A8
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ZX6HhwU5dJebdl1LOEhQt9ndDag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.37.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:4d:cb:67:b9:62:bb:64:81:b8:fa:bc:de:e8:f3:10:33:d2:
b6:18:6e:b4:63:cf:dc:d9:c9:97:1a:bf:8b:6d:66:7d:3d:3c:
2e:1b:1f:13:0f:c3:14:e1:a7:14:cc:53:d0:31:c7:67:38:42:
98:2e:62:2e:34:e2:8c:90:c3:9e:05:c4:17:cc:38:cd:31:84:
6c:b5:78:01:6b:c6:52:ad:2e:c0:a7:78:cf:bb:be:5f:b0:ca:
15:05:89:ff:14:f1:fc:9b:d4:75:b1:1f:ef:36:c8:95:d0:eb:
bc:ae:a9:6e:a8:fd:8c:f6:31:56:02:e6:c9:75:1a:51:6d:bb:
ac:82:45:3b:12:aa:a4:3a:58:30:0b:39:2a:1f:ad:08:03:68:
fd:5b:6f:76:9a:95:1e:de:24:f6:02:c5:52:a0:2a:38:79:c7:
d5:3b:2b:87:5d:71:8d:3a:9c:ff:13:15:dc:09:42:b0:37:93:
ae:7e:ca:3f:51:17:d1:cb:55:d2:f0:65:40:03:27:4e:d6:ec:
46:cd:2c:4b:f4:bf:fc:38:82:38:3a:6a:6c:fe:29:af:2c:2b:
be:df:4a:74:d1:37:94:20:59:b5:31:2c:42:c5:d6:4a:f4:63:
21:cb:95:4f:c2:15:08:40:a6:26:94:f9:25:ce:86:33:12:c2:
95:3e:39:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:12:13 2026 by rpki-client