Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/zr8O_UN6gAmIPgSFbeMYiMps4uY.roa
File: zr8O_UN6gAmIPgSFbeMYiMps4uY.roa (raw, json)
Hash identifier: PqX85sL4mPwzW59HjsjJOfQyxv/F8UnW0JbFrvYE6KU=
Subject key identifier: CE:BF:0E:FD:43:7A:80:09:88:3E:04:85:6D:E3:18:88:CA:6C:E2:E6
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01A1D4262B277A7FAAF0389640824C8032E5
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/zr8O_UN6gAmIPgSFbeMYiMps4uY.roa
Signing time: Fri 13 Nov 2026 09:03:53 +0000
ROA not before: Fri 13 Nov 2026 09:03:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 160.19.95.0/24 maxlen: 24
2a10:3c81::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d4:26:2b:27:7a:7f:aa:f0:38:96:40:82:4c:80:32:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Nov 13 09:03:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cebf0efd437a8009883e04856de31888ca6ce2e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:36:3c:7b:9e:cf:27:4a:6c:54:5c:39:d4:0d:
15:2e:31:bc:d8:3f:0f:8e:9f:c4:4a:f9:b1:ae:d7:
f1:5f:1a:cb:46:aa:9d:4c:9a:d0:35:4e:d1:df:9f:
83:08:1a:92:bf:95:8f:75:28:f2:0f:74:ed:a1:c2:
14:f0:07:5c:76:2d:20:13:a5:9b:97:e6:2c:46:e1:
9c:0c:88:a9:ec:f8:b7:30:51:87:c3:d8:e6:f9:f9:
bc:0f:ef:d8:67:a6:36:5d:9c:c8:b8:02:0a:dc:e6:
14:a9:94:3a:ad:48:d1:ed:fc:06:ed:ed:f0:3f:48:
80:aa:c7:b5:94:c5:0c:35:44:c5:62:d8:8b:fc:7d:
2e:d1:c7:02:e2:91:e7:ae:dd:b6:2e:47:18:a0:5a:
e3:58:15:84:be:24:72:b6:80:2a:65:03:82:62:46:
17:41:3e:df:c9:3f:7a:b9:64:eb:38:f2:de:ff:c5:
38:61:37:a7:16:f5:43:c9:04:92:f6:7b:b9:02:5a:
15:87:9a:ac:7c:a0:62:15:74:b5:8c:51:bb:4b:60:
bd:c7:4d:ac:dc:3b:7d:4e:fa:ca:dc:a1:cc:45:6d:
6a:c8:ea:93:e9:d4:ab:0a:8b:d1:35:40:46:1b:9b:
e1:85:18:fa:bc:9d:ac:62:36:d9:ce:17:19:9b:22:
f1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:BF:0E:FD:43:7A:80:09:88:3E:04:85:6D:E3:18:88:CA:6C:E2:E6
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/zr8O_UN6gAmIPgSFbeMYiMps4uY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.19.95.0/24
IPv6:
2a10:3c81::/32
Signature Algorithm: sha256WithRSAEncryption
33:b4:cb:bd:15:d7:df:36:2c:10:5c:b9:b8:b1:91:c4:3b:1c:
a2:c2:4f:a5:42:ab:90:7d:cc:82:4b:80:d5:b1:e9:06:3f:ed:
68:c5:bf:26:ce:22:be:9a:1d:96:34:c9:ea:eb:8c:41:8a:be:
90:d1:b2:11:2d:aa:73:92:4e:8d:6e:d9:6f:aa:ee:34:6b:25:
d5:ce:0a:60:d1:2b:6c:b9:01:43:f6:02:1c:00:f8:33:64:07:
a5:fb:49:00:75:bb:80:f4:70:79:50:f4:20:66:a5:ea:c4:44:
37:89:4e:ad:3a:bd:ee:85:70:73:ae:48:23:2f:13:ee:96:ba:
6e:ad:e1:3c:ec:82:ba:7c:d2:9f:b4:e8:57:72:11:3b:fe:1b:
a9:2f:dd:10:e8:c0:16:26:9a:d4:19:59:9d:6f:17:5a:65:99:
66:b6:cf:18:93:bc:c3:95:43:81:9e:14:fd:6f:4c:08:65:94:
e9:6a:85:c5:60:06:a0:9e:ba:ac:d4:63:77:bc:67:b4:80:c3:
43:52:0c:18:7c:ed:00:06:7a:95:ca:ef:87:80:21:27:b0:20:
af:79:57:ae:a6:42:81:4e:db:51:f7:15:72:cf:ee:1f:b9:15:
9e:fd:41:f7:98:a3:4a:bd:07:b7:8d:5c:66:d9:d0:13:38:2c:
40:1a:84:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:09:11 2026 by rpki-client