Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/Z2PsFHzGHfJpiXggP6GvBqRLAAA.roa
File: Z2PsFHzGHfJpiXggP6GvBqRLAAA.roa (raw, json)
Hash identifier: KC3Q341PO0S+CruZwxM66TAXYBkzLabx+wJCPSLh8gs=
Subject key identifier: 67:63:EC:14:7C:C6:1D:F2:69:89:78:20:3F:A1:AF:06:A4:4B:00:00
Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Certificate serial: 01A0C80CF46A2D88C827290949B6057CAAB8
Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/Z2PsFHzGHfJpiXggP6GvBqRLAAA.roa
Signing time: Tue 22 Sep 2026 07:38:07 +0000
ROA not before: Tue 22 Sep 2026 07:38:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 141.98.148.0/24 maxlen: 24
141.98.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:0c:f4:6a:2d:88:c8:27:29:09:49:b6:05:7c:aa:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Validity
Not Before: Sep 22 07:38:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6763ec147cc61df2698978203fa1af06a44b0000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:67:9d:75:be:44:bf:0b:36:68:71:44:4e:f4:
e1:ef:e2:7a:95:bc:a0:d5:74:b9:95:8b:ad:55:41:
e6:fe:d3:3b:d1:3f:e3:ad:43:b3:bd:61:a6:14:c8:
a6:4f:32:dd:98:a9:83:e4:b8:d9:e8:1e:dd:61:91:
27:94:26:52:f7:d8:20:d1:de:03:c2:26:26:ce:5a:
62:6a:c1:27:9f:18:55:d5:f3:67:a7:5d:de:b3:10:
35:6c:7b:83:b4:ff:1b:3e:23:00:49:46:1d:71:48:
2d:4f:8d:29:38:9f:38:97:6f:51:d4:30:23:ae:b7:
a5:29:01:7f:be:de:a6:be:e8:fb:5a:b8:3d:41:38:
d6:94:a2:ee:ec:31:04:97:c0:ca:3f:d4:83:dc:8c:
2b:ab:69:1e:e3:11:68:95:f8:e2:46:af:7d:52:e3:
32:8c:e4:2d:d3:99:46:3b:b7:91:98:03:6e:4b:a9:
63:ad:f4:48:c6:0c:49:73:63:eb:8b:d8:eb:b8:5e:
20:c0:9d:43:a1:f5:b2:b3:0a:6b:ee:7c:01:0d:05:
3a:3a:fa:99:7f:d8:c1:2b:6b:c9:db:6c:23:a2:c4:
49:a0:81:70:8e:91:fe:11:10:35:8a:77:9c:b9:c9:
18:ac:f8:50:d0:37:95:2b:11:30:34:68:75:ea:b7:
02:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:63:EC:14:7C:C6:1D:F2:69:89:78:20:3F:A1:AF:06:A4:4B:00:00
X509v3 Authority Key Identifier:
keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/Z2PsFHzGHfJpiXggP6GvBqRLAAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.148.0/23
Signature Algorithm: sha256WithRSAEncryption
c7:2f:ff:ab:d6:f6:80:50:18:92:8c:2e:92:80:5c:80:2e:4a:
f0:db:e2:24:6d:e3:ea:e5:8d:12:a0:a5:04:f0:02:0a:51:4d:
9f:c7:ff:4b:ac:b0:b1:3a:7c:f3:fb:7f:69:3d:4b:a9:24:46:
72:d6:4e:70:34:6d:1a:4a:a0:48:48:9b:a3:5f:2e:23:f7:77:
1e:09:44:65:9b:f2:88:46:b1:c7:f8:d3:38:39:2d:f8:3c:e4:
70:d8:05:b5:12:af:65:bf:9a:ad:77:45:dd:5f:8b:96:55:bb:
a9:13:5e:d0:9f:6a:76:70:74:09:f1:bd:f6:35:0c:45:76:1f:
99:54:16:56:4a:d5:f0:d5:bd:ce:0d:a5:7a:c1:ff:a0:cc:8b:
75:59:bb:a4:26:1d:e4:23:b2:02:c5:8b:9d:5f:fe:3b:5a:ed:
3e:42:6d:de:05:34:c3:8e:1e:db:91:90:42:dc:59:28:4c:9f:
2e:9a:6e:f4:6e:f9:0f:a5:75:7c:62:1c:30:3d:e1:99:c0:48:
a8:b8:58:72:9d:86:8e:bd:6d:cc:f4:86:21:03:86:bd:07:cc:
db:c4:92:d7:7b:ef:8a:4b:12:c8:bb:4f:5f:28:2d:5a:61:19:
37:72:2d:ab:93:c0:23:a2:59:76:b1:44:8f:7c:be:1c:bf:19:
7b:01:71:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:09:13 2026 by rpki-client