Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/df2e60-5b0f-4960-b9cd-55a3547abbd6/1/ZGnoRW5cVvJJj2NLujSWP8-p4ME.roa
File: ZGnoRW5cVvJJj2NLujSWP8-p4ME.roa (raw, json)
Hash identifier: SVrmw2kPu3uWDYtUFMQIl+Wr3E0Z77xS+MusJocEbUE=
Subject key identifier: 64:69:E8:45:6E:5C:56:F2:49:8F:63:4B:BA:34:96:3F:CF:A9:E0:C1
Certificate issuer: /CN=9e795dd011953414715cc6875dfd39c61e5181c8
Certificate serial: 019F8F24149DDF752FFFBFC2B1541099B5D8
Authority key identifier: 9E:79:5D:D0:11:95:34:14:71:5C:C6:87:5D:FD:39:C6:1E:51:81:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nnld0BGVNBRxXMaHXf05xh5Rgcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/df2e60-5b0f-4960-b9cd-55a3547abbd6/1/ZGnoRW5cVvJJj2NLujSWP8-p4ME.roa
Signing time: Thu 23 Jul 2026 13:22:14 +0000
ROA not before: Thu 23 Jul 2026 13:22:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207243
IP address blocks: 185.161.228.0/22 maxlen: 22
185.161.228.0/23 maxlen: 23
193.168.232.0/22 maxlen: 22
193.168.234.0/23 maxlen: 23
2a09:6f80::/29 maxlen: 29
2a0b:c000::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/df2e60-5b0f-4960-b9cd-55a3547abbd6/1/nnld0BGVNBRxXMaHXf05xh5Rgcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/df2e60-5b0f-4960-b9cd-55a3547abbd6/1/nnld0BGVNBRxXMaHXf05xh5Rgcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nnld0BGVNBRxXMaHXf05xh5Rgcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:22:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:24:14:9d:df:75:2f:ff:bf:c2:b1:54:10:99:b5:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e795dd011953414715cc6875dfd39c61e5181c8
Validity
Not Before: Jul 23 13:22:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6469e8456e5c56f2498f634bba34963fcfa9e0c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:75:9b:19:e9:0a:0e:12:27:d1:c5:7a:0d:c8:
fd:3e:78:9a:cf:a0:c4:f6:77:01:23:d4:15:29:9c:
51:ee:44:03:a8:a1:d9:c9:f4:57:34:6a:b7:0f:13:
4a:0e:a5:6d:dc:6b:02:51:ce:5c:97:2e:b2:b1:22:
56:ed:05:0d:27:dd:5e:b4:44:da:2b:7c:1f:09:c5:
a4:d0:4c:66:a9:ca:29:48:88:82:31:5e:6b:53:e3:
ed:0b:09:28:e3:a8:08:41:8c:a5:de:3f:fa:1f:dd:
d9:54:c3:79:5d:e5:9b:fb:f4:36:61:84:9f:88:10:
44:f3:34:2c:0f:34:08:5f:03:53:36:a3:5f:42:d9:
31:78:b0:8d:d1:24:be:ac:95:db:41:2c:fc:b2:fa:
6e:49:b8:75:96:5d:63:3a:5e:5a:f6:8e:97:15:fd:
58:24:0b:28:30:45:cf:e9:da:cb:fb:04:1c:f1:1a:
54:91:ba:7e:b6:1b:ec:88:4c:12:e8:0e:5e:94:af:
fc:bf:da:cf:b0:d1:b9:fe:8a:1c:e6:b0:de:a1:5f:
d8:aa:78:63:69:15:42:df:b7:a7:6f:69:12:49:57:
77:53:73:a9:b2:6c:7c:7d:2c:f3:d3:1c:a4:0b:e3:
6c:20:cc:a1:26:c6:0e:78:8b:11:55:e6:97:8a:55:
c9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:69:E8:45:6E:5C:56:F2:49:8F:63:4B:BA:34:96:3F:CF:A9:E0:C1
X509v3 Authority Key Identifier:
keyid:9E:79:5D:D0:11:95:34:14:71:5C:C6:87:5D:FD:39:C6:1E:51:81:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnld0BGVNBRxXMaHXf05xh5Rgcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/df2e60-5b0f-4960-b9cd-55a3547abbd6/1/ZGnoRW5cVvJJj2NLujSWP8-p4ME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/df2e60-5b0f-4960-b9cd-55a3547abbd6/1/nnld0BGVNBRxXMaHXf05xh5Rgcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.228.0/22
193.168.232.0/22
IPv6:
2a09:6f80::/29
2a0b:c000::/29
Signature Algorithm: sha256WithRSAEncryption
3d:be:30:b3:19:f5:1a:db:62:64:e6:db:f4:9a:9d:d8:a1:cc:
78:04:ee:b8:89:cc:97:25:19:ff:41:56:f0:8d:97:f3:26:4b:
3f:a4:5a:35:78:2a:8e:37:a7:9b:65:74:32:40:29:61:cd:21:
15:c8:90:8e:c5:bb:06:12:91:1f:38:8e:d1:a7:1c:9a:a7:9f:
2c:09:e6:77:0b:76:5e:de:f9:71:d4:ed:f6:50:16:7d:1a:fa:
df:10:4a:13:c5:91:b2:fd:ac:78:eb:33:b4:03:46:34:c1:a0:
be:50:69:89:e0:c1:9a:8d:db:b0:d6:0d:95:58:49:e6:c6:f2:
dc:58:f5:63:42:46:1c:75:78:15:c1:38:9b:3b:1d:c9:a5:10:
47:78:46:94:ec:c3:95:65:71:34:78:d8:6e:85:c2:e0:7b:24:
8c:d9:65:23:70:cc:7b:70:76:c3:4a:95:cd:5b:f6:13:29:69:
df:43:55:d8:93:d0:5b:ce:64:6b:85:03:d7:25:49:2b:da:93:
e1:93:07:f2:a7:29:e3:ac:98:e7:99:3c:ea:0b:24:c0:56:1f:
74:00:5c:41:83:42:56:99:03:cc:fb:85:21:a4:ac:90:fa:ad:
3b:2d:24:3f:93:0f:f5:82:ec:2f:ab:67:5b:73:6f:cb:74:87:
bc:f7:3d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:32:05 2026 by rpki-client