Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/zvVC2CdS_Vys1pvzmxe_hKJxz9g.roa
File: zvVC2CdS_Vys1pvzmxe_hKJxz9g.roa (raw, json)
Hash identifier: Y5vKf0NFPya3WpVfMqZzvw2PJOdgljS8wUAGM1LsFLs=
Subject key identifier: CE:F5:42:D8:27:52:FD:5C:AC:D6:9B:F3:9B:17:BF:84:A2:71:CF:D8
Certificate issuer: /CN=2d3c3987e7c34b366aa0f09c40ea4c80bfed0e01
Certificate serial: 019D1C09D1EE331F83296091A0DD22D9203A
Authority key identifier: 2D:3C:39:87:E7:C3:4B:36:6A:A0:F0:9C:40:EA:4C:80:BF:ED:0E:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/zvVC2CdS_Vys1pvzmxe_hKJxz9g.roa
Signing time: Mon 23 Mar 2026 18:51:38 +0000
ROA not before: Mon 23 Mar 2026 18:51:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 194.150.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1c:09:d1:ee:33:1f:83:29:60:91:a0:dd:22:d9:20:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d3c3987e7c34b366aa0f09c40ea4c80bfed0e01
Validity
Not Before: Mar 23 18:51:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cef542d82752fd5cacd69bf39b17bf84a271cfd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4d:a6:8f:f4:24:1b:c6:18:14:c9:03:a5:f1:
11:a1:78:66:57:fb:18:49:f0:4f:47:74:d6:9d:ce:
7a:b7:73:a9:71:27:1e:e1:93:e2:9f:59:39:51:8e:
35:61:3e:04:ec:fb:91:e0:92:32:a9:93:10:7a:03:
c5:31:78:7e:d5:24:c7:83:6d:ce:c8:44:a1:9e:c7:
8c:fc:86:a7:2f:1e:f9:4c:0e:8c:2a:c8:b4:eb:0c:
b5:c7:f0:f8:d5:b4:2d:88:15:40:12:6c:2e:d8:df:
1e:56:cd:de:d6:4c:0b:9e:3a:49:ed:fc:0f:60:51:
91:9f:b1:78:82:e0:f1:08:8e:6d:0c:c6:b1:51:52:
c1:81:25:48:5c:ef:cf:a0:02:03:ed:d5:68:ab:75:
1f:72:b6:fd:25:98:ec:52:76:6e:db:61:ff:15:7d:
ce:e8:06:e4:e4:13:7f:de:d5:2c:8a:8f:6b:ac:2d:
ae:f0:bd:5f:b9:c2:79:57:28:68:66:e4:95:aa:69:
b5:fa:98:6c:43:c5:29:54:87:70:a5:06:bd:c7:98:
9d:b2:ab:45:4b:76:40:f3:53:79:92:2f:cf:f9:7a:
18:22:c5:e4:2e:84:2a:76:4b:bc:dd:cb:25:73:80:
6c:cc:92:be:a0:74:c6:e4:65:d2:c6:0b:d9:ce:93:
2e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F5:42:D8:27:52:FD:5C:AC:D6:9B:F3:9B:17:BF:84:A2:71:CF:D8
X509v3 Authority Key Identifier:
keyid:2D:3C:39:87:E7:C3:4B:36:6A:A0:F0:9C:40:EA:4C:80:BF:ED:0E:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/zvVC2CdS_Vys1pvzmxe_hKJxz9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.74.0/24
Signature Algorithm: sha256WithRSAEncryption
72:8e:43:a0:2a:c1:73:0e:12:fb:58:a7:11:66:86:be:0b:74:
b1:b8:bf:fd:93:5e:0c:1c:7e:d5:47:61:31:0c:3e:b5:42:04:
06:57:12:67:98:93:53:f7:f9:7d:76:5e:bb:c0:1b:dc:82:0d:
23:99:76:be:ec:77:6c:01:eb:05:22:60:38:f7:2c:07:82:1d:
f2:21:4e:bf:f4:27:a7:15:0b:18:52:e2:1c:7d:91:d1:4a:2d:
cd:59:a6:3a:3b:58:62:3e:93:c9:f1:5a:4b:b5:2e:e4:29:d7:
0d:10:a0:9d:28:bb:23:51:67:95:00:09:f6:2d:bb:e1:6f:d0:
b6:cb:fd:7b:e1:fc:e8:63:5a:af:a9:fb:f0:84:02:fb:f6:96:
b6:bd:72:57:17:ad:d5:7e:76:74:06:af:86:5b:95:b5:f3:34:
a1:a9:92:f2:db:dd:8d:a4:90:3f:1b:49:8f:d3:88:62:68:7f:
0a:3d:8a:b7:41:21:26:35:a4:fb:ab:59:70:b9:6b:0b:92:8a:
e3:c5:75:9e:d0:f3:51:32:86:3e:59:84:59:17:1c:72:91:f8:
4e:c2:21:6f:cf:e5:73:97:07:36:ca:9d:9c:ae:ac:72:b8:fe:
34:82:61:ab:6e:54:5b:63:41:0e:81:fb:c2:28:d8:b1:b8:00:
bf:28:c1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:44:54 2026 by rpki-client