Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/z-nb9OR5wIGAbyf08ty4Ed8fMZg.roa
File: z-nb9OR5wIGAbyf08ty4Ed8fMZg.roa (raw, json)
Hash identifier: FLCXcVtn+EsJj17lJtNlohF0/PRzkddHbk2X/6qv4zM=
Subject key identifier: CF:E9:DB:F4:E4:79:C0:81:80:6F:27:F4:F2:DC:B8:11:DF:1F:31:98
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 01A18BCF9C66974F1F6F2B4A020237F488BA
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/z-nb9OR5wIGAbyf08ty4Ed8fMZg.roa
Signing time: Fri 30 Oct 2026 07:56:41 +0000
ROA not before: Fri 30 Oct 2026 07:56:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397044
IP address blocks: 94.131.52.0/24 maxlen: 24
94.131.55.0/24 maxlen: 24
94.131.57.0/24 maxlen: 24
94.131.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 10:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8b:cf:9c:66:97:4f:1f:6f:2b:4a:02:02:37:f4:88:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Oct 30 07:56:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cfe9dbf4e479c081806f27f4f2dcb811df1f3198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:aa:87:3d:aa:e4:72:b3:17:f9:e6:24:aa:d7:
e8:55:ba:95:18:ba:82:f5:ab:73:64:fd:25:a3:3b:
b7:ca:9d:be:5d:8a:a4:96:fd:e3:ec:8e:a3:ba:29:
6b:7e:59:d9:aa:05:e5:ac:b4:20:b6:0f:9f:ab:8b:
ec:1f:b2:ac:f5:20:56:ec:d0:e4:e0:9a:e7:23:9b:
3a:6c:12:86:9d:94:ba:34:b0:30:19:45:c8:e3:c8:
22:6f:ad:91:e4:f2:39:3d:69:f9:f9:0b:7c:6c:c3:
fa:7c:fd:7f:60:a6:c3:fa:45:63:88:a5:22:e8:e4:
ba:80:82:52:73:a7:a8:ca:af:7e:34:a3:c8:0c:54:
84:36:3e:20:93:42:8b:b3:34:fe:1f:60:40:35:b6:
7a:72:31:d9:b9:8c:e0:da:6a:aa:c3:9a:9e:1d:ff:
35:9a:21:0a:96:c3:f4:4d:49:f3:a2:78:91:e8:0d:
17:b2:7a:68:f0:55:cc:83:62:60:34:d4:d5:64:e4:
6a:34:3b:cb:5c:49:e2:aa:9a:ae:4b:f5:a8:da:ef:
01:96:c8:9b:82:e9:de:51:b5:d0:f1:5e:da:16:68:
0d:9a:76:f3:09:7d:a5:e0:4d:88:02:8d:7a:69:94:
7d:af:97:a9:13:51:4f:bc:71:5d:ac:fb:dd:ca:fa:
56:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E9:DB:F4:E4:79:C0:81:80:6F:27:F4:F2:DC:B8:11:DF:1F:31:98
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/z-nb9OR5wIGAbyf08ty4Ed8fMZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.52.0/24
94.131.55.0/24
94.131.57.0-94.131.58.255
Signature Algorithm: sha256WithRSAEncryption
52:40:7c:d5:38:48:df:6f:ff:46:87:4b:a6:14:5b:36:c9:bb:
52:68:cd:ba:1a:5a:46:cd:10:52:8b:06:7c:f0:bf:b8:7f:45:
54:04:c8:33:83:3c:4e:30:93:de:be:4d:99:b0:10:a5:0d:8e:
37:f5:a2:a9:9d:b1:cd:b2:4a:45:94:97:42:6b:ec:4f:f5:52:
d4:4c:92:50:a2:dc:9d:b7:17:39:ab:e9:96:d3:84:33:91:86:
bc:12:17:28:ac:c3:fe:d1:eb:ac:6c:a2:5d:05:79:53:2f:43:
21:69:56:5f:3e:d7:23:dd:36:3a:94:d9:cf:fa:72:83:48:0a:
9c:f8:10:0c:d3:de:48:7b:5e:7c:c1:16:bd:c5:81:62:fa:62:
21:f6:fb:e1:78:03:f7:59:e3:66:9f:3e:ec:29:d8:2e:f8:93:
e1:cc:60:44:2f:57:e9:ff:e7:01:93:e2:11:78:e9:f7:29:5e:
da:ab:e5:93:5f:36:69:d7:46:5c:1b:ad:e2:05:cc:05:26:21:
24:19:8d:94:60:25:fc:23:0a:94:da:73:17:8f:a2:80:69:12:
8f:92:b8:b0:1a:f2:1c:5a:2b:41:6b:06:0d:ae:39:35:51:7e:
b2:c2:ff:70:a6:60:7a:be:0a:21:0e:ec:3f:52:a6:63:d7:2a:
c1:62:c9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:45:34 2026 by rpki-client