Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/cZX-vXoSkiVX1DDpE2stQryxES0.roa
File: cZX-vXoSkiVX1DDpE2stQryxES0.roa (raw, json)
Hash identifier: DZ4toH+8MBJm3/Ie0kvOYB9O/Ot8hRGuCx70ecPDboc=
Subject key identifier: 71:95:FE:BD:7A:12:92:25:57:D4:30:E9:13:6B:2D:42:BC:B1:11:2D
Certificate issuer: /CN=d2c2b0ee187928409065d19ee9c0858e8c17ea13
Certificate serial: 019DB91D6E11BB20437F6414958DF69D4689
Authority key identifier: D2:C2:B0:EE:18:79:28:40:90:65:D1:9E:E9:C0:85:8E:8C:17:EA:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/cZX-vXoSkiVX1DDpE2stQryxES0.roa
Signing time: Thu 23 Apr 2026 06:53:26 +0000
ROA not before: Thu 23 Apr 2026 06:53:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1140
IP address blocks: 94.198.152.0/21 maxlen: 21
94.198.152.0/24 maxlen: 24
94.198.153.0/24 maxlen: 24
94.198.154.0/24 maxlen: 24
94.198.155.0/24 maxlen: 24
94.198.156.0/24 maxlen: 24
94.198.157.0/24 maxlen: 24
94.198.158.0/24 maxlen: 24
94.198.159.0/24 maxlen: 24
185.76.132.0/22 maxlen: 22
185.76.132.0/24 maxlen: 24
185.76.133.0/24 maxlen: 24
185.76.134.0/24 maxlen: 24
185.76.135.0/24 maxlen: 24
193.176.144.0/24 maxlen: 24
2a00:d78::/32 maxlen: 32
2a00:d78::/48 maxlen: 48
2a00:d78:147::/48 maxlen: 48
2a00:d78:153::/48 maxlen: 48
2a00:d78:155::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b9:1d:6e:11:bb:20:43:7f:64:14:95:8d:f6:9d:46:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c2b0ee187928409065d19ee9c0858e8c17ea13
Validity
Not Before: Apr 23 06:53:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7195febd7a12922557d430e9136b2d42bcb1112d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d9:8d:4d:91:e0:31:42:eb:7b:73:de:95:e1:
98:07:a5:49:81:70:bd:e0:97:4e:ec:49:b3:a8:9f:
ff:f0:3f:9a:6e:c8:bd:88:37:b2:73:b6:b5:bb:20:
7d:4d:ca:e7:03:dc:ab:0b:54:bd:d8:b1:72:1c:c5:
4e:f1:4b:82:53:d3:67:fc:46:30:2e:07:4a:a5:31:
05:b5:85:94:4f:6f:90:b8:94:b0:35:81:87:84:32:
a0:ae:02:02:7a:22:53:f7:0f:84:fd:9d:3f:f2:51:
d8:69:87:33:6d:6a:43:05:f4:a5:7c:48:ea:b4:25:
3e:e3:24:6d:7c:59:0a:7b:17:1b:74:70:21:8d:22:
9d:ae:11:ab:9f:bf:e9:49:d9:c2:7b:5d:d5:9d:82:
12:1d:85:6d:01:60:0a:d3:ef:33:77:5f:05:d6:75:
b1:09:05:7e:53:c3:ba:bf:79:e4:7a:e0:47:a0:7a:
3d:75:77:1a:5f:1a:90:76:c8:c5:d6:d1:75:71:f8:
b5:f8:d6:87:0a:fd:c0:1e:61:ab:a8:2c:94:9b:d2:
bf:09:8c:15:4f:ad:ec:e0:e5:ea:f5:a3:28:e3:ec:
8f:d6:da:f9:7e:ce:7a:e5:32:db:fd:e6:82:b0:46:
34:b6:4a:e4:73:01:13:63:cf:5d:e2:38:4d:87:cb:
ca:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:95:FE:BD:7A:12:92:25:57:D4:30:E9:13:6B:2D:42:BC:B1:11:2D
X509v3 Authority Key Identifier:
keyid:D2:C2:B0:EE:18:79:28:40:90:65:D1:9E:E9:C0:85:8E:8C:17:EA:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/cZX-vXoSkiVX1DDpE2stQryxES0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.198.152.0/21
185.76.132.0/22
193.176.144.0/24
IPv6:
2a00:d78::/32
Signature Algorithm: sha256WithRSAEncryption
38:aa:b3:85:b0:36:4f:3b:63:a5:e4:cd:0f:58:d7:ea:dd:1b:
42:38:ca:e0:14:d2:9a:b6:cc:b7:73:ef:18:9f:b3:bf:d9:1b:
d0:7d:e6:e9:6b:3c:1c:14:80:72:3a:84:79:94:f7:c3:46:0c:
97:03:89:69:a4:4d:b8:d4:8a:56:d2:bf:13:07:6a:a7:f4:76:
ee:d7:63:59:89:a2:19:7c:12:8e:1e:b7:e6:1e:ab:6e:ea:73:
6c:e0:04:e7:c8:25:c3:3e:94:5b:65:c1:79:54:58:93:3e:0a:
97:7a:4b:29:9b:2a:7c:14:4f:8c:c5:e9:a2:9a:10:ba:56:ea:
72:81:1b:db:41:61:0c:20:b8:8f:92:60:e1:ae:07:7e:af:a3:
a1:95:f7:45:f7:bb:2b:36:22:f5:cd:1a:1c:e5:4e:d2:66:2e:
dd:53:ee:ac:b2:e1:8d:a8:63:29:5f:a8:30:6f:88:ad:9c:4b:
44:7d:c8:89:9f:40:34:a8:32:fa:87:8c:08:a1:72:62:d9:f5:
0b:ce:f5:c6:40:87:35:8b:33:37:21:bf:a1:55:41:23:a5:d3:
73:8c:7b:e2:ee:a7:94:6d:f0:19:65:91:f2:4e:13:05:f3:81:
1c:7e:9c:fe:95:f0:08:37:2f:46:60:a3:a6:af:2e:0b:98:c4:
e4:47:54:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:37:10 2026 by rpki-client