Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/ZTKu8gdoLdeYc0pPxKTooYFCHxc.roa
File: ZTKu8gdoLdeYc0pPxKTooYFCHxc.roa (raw, json)
Hash identifier: erAoxsfhYp93JTHbGo/zctv75TY4p8dxC7HF08lucDA=
Subject key identifier: 65:32:AE:F2:07:68:2D:D7:98:73:4A:4F:C4:A4:E8:A1:81:42:1F:17
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01A18772278E46A8C2DD8894EA1781793F58
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/ZTKu8gdoLdeYc0pPxKTooYFCHxc.roa
Signing time: Thu 29 Oct 2026 11:36:07 +0000
ROA not before: Thu 29 Oct 2026 11:36:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214483
IP address blocks: 195.252.160.0/24 maxlen: 24
195.252.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:72:27:8e:46:a8:c2:dd:88:94:ea:17:81:79:3f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Oct 29 11:36:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6532aef207682dd798734a4fc4a4e8a181421f17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:17:c8:40:99:ba:71:bd:6f:90:d4:fc:83:da:
f2:75:43:c9:15:0d:b0:e8:45:13:ba:c1:94:e6:f6:
54:67:42:d4:cb:0d:44:b8:66:60:f6:2c:8b:c6:1c:
60:1c:3f:c4:7c:07:f0:3b:9e:bc:1e:4d:01:06:00:
47:03:32:07:ca:0b:9b:53:75:05:2b:4c:c1:78:5f:
55:86:84:75:e3:e7:43:0a:a5:a5:00:68:79:54:c3:
92:8a:8f:1f:96:6f:22:6d:42:b3:57:6c:c6:dd:bb:
e8:5b:86:7d:4b:7d:54:64:02:42:e1:db:a6:29:21:
95:8e:a6:21:8a:1f:56:03:58:c1:97:38:b4:e6:97:
26:4e:78:01:28:1c:9e:85:b6:8b:d2:a2:18:fc:30:
bc:10:69:47:f6:11:3b:bb:5a:dd:7e:df:2c:21:c7:
ac:a6:90:be:8d:2b:37:61:54:f6:84:52:63:e4:fd:
8c:ad:5f:a5:9b:ae:96:13:6a:3d:56:08:f8:da:80:
8b:7c:0b:f1:a5:b7:ac:65:0e:97:56:e4:96:d4:44:
ee:65:8a:e2:f6:09:7c:f7:a9:25:3c:81:e6:cc:83:
da:dc:e7:a9:ff:17:52:5f:4a:61:01:12:db:94:9b:
5d:92:d3:d3:51:a3:f2:19:af:37:dd:30:98:7c:12:
34:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:32:AE:F2:07:68:2D:D7:98:73:4A:4F:C4:A4:E8:A1:81:42:1F:17
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/ZTKu8gdoLdeYc0pPxKTooYFCHxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.252.160.0/24
195.252.176.0/24
Signature Algorithm: sha256WithRSAEncryption
72:64:9a:9e:52:95:da:36:ea:66:1a:57:fb:19:78:05:b4:08:
15:d8:51:ab:6b:4f:df:fe:87:3f:75:40:97:1c:fc:dc:7b:fd:
c8:d5:88:d0:de:f9:ff:7e:83:ad:32:2e:fc:3f:40:cc:6a:96:
f3:91:d4:52:97:ed:ba:21:e6:fc:9d:92:6b:f8:08:e4:9d:e6:
91:2d:00:6e:00:f0:69:ba:cc:d1:9e:d5:7b:f8:92:f0:ca:b7:
1c:c3:9e:2c:4b:8e:6c:6f:85:02:6e:11:2a:ac:2e:6b:49:03:
42:e4:c3:94:db:4c:25:0e:a7:42:fe:ab:74:38:41:c7:86:ff:
7c:35:bb:ab:c6:1b:fb:8b:95:22:81:09:fc:9b:cb:00:3c:b5:
b2:11:cf:84:62:b3:46:ee:a6:75:07:fd:ea:af:21:b4:1e:72:
4e:52:be:36:16:57:65:f8:46:3f:23:72:ff:ab:85:ec:58:d5:
f7:8d:94:2d:f0:71:51:e3:b9:e1:fd:8e:01:a5:24:13:84:9c:
60:b9:d4:2d:9f:fe:0b:94:ac:7f:03:78:cc:ac:81:4b:50:8d:
85:8c:e2:94:29:63:67:da:41:fa:a3:65:a6:d8:0d:b4:c8:4a:
d5:97:99:5a:68:ab:c6:01:fc:8e:e4:6e:9d:c9:ea:30:11:0f:
4f:43:16:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:23:30 2026 by rpki-client