Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/ZhH5xW2gheYyInTwQ8pRFBBjXkU.roa
File: ZhH5xW2gheYyInTwQ8pRFBBjXkU.roa (raw, json)
Hash identifier: yfDKXKGgErkUGhG3MEwM/cjE5b53lmIOCNeBjtMcZ8A=
Subject key identifier: 66:11:F9:C5:6D:A0:85:E6:32:22:74:F0:43:CA:51:14:10:63:5E:45
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01A096CF5DF2A086D726EF09E93968B1F586
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/ZhH5xW2gheYyInTwQ8pRFBBjXkU.roa
Signing time: Sat 12 Sep 2026 18:09:27 +0000
ROA not before: Sat 12 Sep 2026 18:09:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 193.93.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:96:cf:5d:f2:a0:86:d7:26:ef:09:e9:39:68:b1:f5:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Sep 12 18:09:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6611f9c56da085e6322274f043ca511410635e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b2:53:b4:32:96:3d:a9:3f:2a:ea:08:10:b4:
1b:66:0d:97:67:71:d0:cb:a9:89:2f:c8:27:b9:db:
77:b2:e9:7c:34:ae:80:2d:f0:95:bf:27:ae:aa:b1:
2c:7e:9e:06:81:1c:7f:c9:06:c3:80:de:9a:74:b4:
2e:fb:8d:77:65:df:e0:85:a6:c4:0e:bb:4a:06:cb:
a5:9e:3c:51:5f:e5:24:63:cc:5e:33:bb:38:23:4b:
1d:8e:8a:cc:68:00:d2:9e:b1:51:da:5a:10:fd:37:
fa:ac:fa:c3:81:93:b6:d2:7e:1d:69:e9:8e:d1:ed:
ee:3b:8b:c0:87:ea:ed:c5:29:0d:69:5f:0f:af:4b:
c1:6c:e7:ed:2b:d7:b4:79:76:60:78:ad:8e:a3:ff:
7d:ba:c7:f6:09:e3:1d:2d:12:32:8c:1c:32:f5:99:
ba:fc:86:1a:91:0a:d2:d7:bf:34:cb:ab:d2:68:3a:
f0:f0:c2:07:b8:f0:16:21:72:93:39:88:73:ec:4d:
ad:e9:b8:a9:e0:74:30:47:5c:79:43:a7:7f:8f:3f:
ae:ff:3f:65:ec:75:99:fb:13:9b:bf:51:d0:03:4d:
4a:ff:4f:03:15:81:0b:5e:c7:83:a8:97:7e:c4:69:
41:95:30:14:9f:c5:46:47:50:cc:13:35:4d:7b:fd:
0e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:11:F9:C5:6D:A0:85:E6:32:22:74:F0:43:CA:51:14:10:63:5E:45
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/ZhH5xW2gheYyInTwQ8pRFBBjXkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.52.0/24
Signature Algorithm: sha256WithRSAEncryption
51:ed:96:1b:b7:36:c6:38:c2:d7:1c:9a:73:9c:f2:72:e1:79:
04:db:df:64:1a:10:3d:77:a7:ed:c2:ab:73:a6:e8:8f:5a:48:
0c:80:5a:48:3c:6d:12:ef:9e:2c:c2:e8:f8:a0:9f:e3:9d:40:
f8:50:cb:f6:45:8f:55:71:c9:50:01:4f:34:cf:84:01:6a:24:
c8:33:0e:9f:f5:94:34:82:4c:b0:1a:11:49:6b:98:e9:45:0d:
51:4e:25:ae:89:89:a2:b4:ef:0f:71:d4:91:cc:b2:fa:f1:2f:
16:e3:0d:96:06:7a:fa:dc:9e:1b:20:54:6a:d7:79:82:3e:3c:
b9:94:73:e1:34:f9:24:59:57:92:fa:9a:aa:e5:d2:8f:87:8b:
0b:5b:9f:1d:0c:48:cc:3c:96:f4:41:92:7f:29:6d:98:8f:fa:
e9:4c:be:17:67:00:4d:73:27:ee:ef:59:56:4c:b9:32:3d:6b:
29:27:60:e5:b1:24:63:c8:42:29:c5:3c:df:4b:7f:05:0b:d5:
fa:36:bc:43:7b:0d:27:de:93:1e:ce:e8:a9:df:f2:d8:51:f3:
91:12:6b:0d:a4:14:04:74:6e:f8:03:c2:91:03:d4:4c:70:0d:
81:8e:ed:4c:ef:aa:bc:47:e7:7f:91:03:fe:ea:b0:17:f7:87:
1a:b5:4e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:04:57 2026 by rpki-client