Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/zFRac6adXgpgg8c3L42RPaRN8oE.roa
File: zFRac6adXgpgg8c3L42RPaRN8oE.roa (raw, json)
Hash identifier: Q0a/QYyQCpjrndssnRuOwEUZszXkG3r42+9e5dOpprk=
Subject key identifier: CC:54:5A:73:A6:9D:5E:0A:60:83:C7:37:2F:8D:91:3D:A4:4D:F2:81
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 019E0629B519520CCA694CD9C7016388D907
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/zFRac6adXgpgg8c3L42RPaRN8oE.roa
Signing time: Fri 08 May 2026 05:57:36 +0000
ROA not before: Fri 08 May 2026 05:57:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213563
IP address blocks: 109.111.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:37:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:06:29:b5:19:52:0c:ca:69:4c:d9:c7:01:63:88:d9:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: May 8 05:57:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cc545a73a69d5e0a6083c7372f8d913da44df281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:76:83:57:15:6b:d1:94:cd:66:9e:8c:5a:f1:
78:6c:b8:92:ab:81:f2:63:3c:4c:26:b7:2b:68:b5:
c0:de:52:c5:ca:5a:e2:ba:82:c3:b8:f3:b6:07:d1:
79:92:63:5f:82:85:9d:2e:27:72:a3:19:c6:94:30:
6f:bb:fa:92:e0:59:ce:2f:44:ea:f2:ec:cc:33:b5:
6e:42:4b:16:b9:ad:2f:4f:39:2f:36:e9:42:22:06:
98:1c:10:01:73:e5:c0:07:5e:02:bf:6d:66:00:18:
62:49:d9:da:2d:f9:b7:ba:69:27:9d:d2:ca:ad:03:
6b:92:91:48:bd:18:8b:36:b1:76:fc:23:43:67:51:
93:00:35:78:f1:f3:d2:e4:b2:ce:3b:87:cf:fb:5e:
cf:7a:9e:ec:27:21:ec:a5:4d:db:24:1e:b9:24:d4:
92:55:4f:36:bc:bc:6b:33:30:76:19:39:8d:a0:f6:
bb:79:35:9b:32:5f:c3:28:ea:a0:b9:cb:ca:ae:f4:
38:a2:3d:76:f8:bd:17:13:5c:6b:17:32:ca:7f:e5:
41:c4:c8:e7:39:3b:39:5b:07:a8:88:4c:57:a9:f5:
45:ee:63:73:97:fa:c3:15:99:d0:ce:40:c9:4a:01:
e6:84:12:0c:f7:16:95:19:67:d2:4f:2f:88:9b:29:
00:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:54:5A:73:A6:9D:5E:0A:60:83:C7:37:2F:8D:91:3D:A4:4D:F2:81
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/zFRac6adXgpgg8c3L42RPaRN8oE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.255.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:17:22:b4:72:0e:e0:ec:79:1f:0f:9b:4e:a5:27:29:96:83:
43:a9:3e:91:54:b6:08:03:7a:d1:4e:ac:b2:89:f0:21:34:1d:
d7:d7:79:45:6a:b5:a8:10:35:26:cb:2d:e1:72:73:09:dd:fa:
43:1d:2c:5b:a6:f7:cc:ad:bb:2b:e5:78:1a:ce:31:0b:1e:25:
3d:a6:e9:26:c3:ca:d3:3c:21:cc:ae:c8:aa:14:8b:cb:2a:87:
b2:46:24:e8:ea:86:f6:42:6a:50:79:fa:f3:90:5d:e7:df:60:
98:78:19:a3:a2:79:cf:d1:0e:86:74:8d:39:c8:99:38:b7:a3:
33:82:53:a4:40:62:b3:56:5d:3b:f0:96:17:29:6e:dd:2f:47:
55:2a:4b:09:04:78:4a:7c:b2:55:98:04:3f:f8:26:e9:d1:a6:
15:0e:57:27:5d:2d:cf:92:56:c2:50:f6:66:2c:5c:bb:db:eb:
04:05:43:a7:18:fd:21:29:2f:9c:ce:cf:66:04:09:24:6f:68:
55:e1:f5:01:40:cd:5c:60:d8:00:23:cb:3c:e1:c5:4d:c2:13:
dd:29:fa:f2:51:11:4b:fd:2f:d3:24:16:b5:a1:f5:9f:1b:c8:
47:a7:32:82:b0:4f:39:bb:aa:26:d0:3d:32:ca:6e:41:a5:35:
b2:b8:5a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:42:23 2026 by rpki-client