Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/ZnrgwHwNrwHkHCjqAOMBUiVeGgI.roa
File: ZnrgwHwNrwHkHCjqAOMBUiVeGgI.roa (raw, json)
Hash identifier: /C9nvhOpxH/edCsTHustlCcBXTNh3eyI7qZ4pXnTyoo=
Subject key identifier: 66:7A:E0:C0:7C:0D:AF:01:E4:1C:28:EA:00:E3:01:52:25:5E:1A:02
Certificate issuer: /CN=c02ea5d99d10bcdd2949693725375190909ac782
Certificate serial: 019F23686BC3E240A6A49B1A8D1638C78660
Authority key identifier: C0:2E:A5:D9:9D:10:BC:DD:29:49:69:37:25:37:51:90:90:9A:C7:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wC6l2Z0QvN0pSWk3JTdRkJCax4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/ZnrgwHwNrwHkHCjqAOMBUiVeGgI.roa
Signing time: Thu 02 Jul 2026 15:17:53 +0000
ROA not before: Thu 02 Jul 2026 15:17:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47526
IP address blocks: 185.55.80.0/24 maxlen: 24
2a13:ccc0::/29 maxlen: 29
2a13:ccc0::/32 maxlen: 48
2a13:ccc1::/32 maxlen: 48
2a13:ccc2::/32 maxlen: 48
2a13:ccc3::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/wC6l2Z0QvN0pSWk3JTdRkJCax4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/wC6l2Z0QvN0pSWk3JTdRkJCax4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/wC6l2Z0QvN0pSWk3JTdRkJCax4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:6b:c3:e2:40:a6:a4:9b:1a:8d:16:38:c7:86:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c02ea5d99d10bcdd2949693725375190909ac782
Validity
Not Before: Jul 2 15:17:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=667ae0c07c0daf01e41c28ea00e30152255e1a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b0:ac:c7:a8:34:c0:d1:62:26:3f:7e:49:79:
ee:34:82:db:50:f5:88:5c:10:cc:3a:ae:b6:09:a4:
82:95:be:fa:6f:40:03:f7:85:a5:0c:70:a9:b3:0e:
6a:67:ee:52:ee:8e:1c:fc:82:22:bc:0b:f5:de:7a:
e2:2c:a8:b6:97:b7:44:f5:94:c1:5b:9e:aa:6e:1d:
4b:f5:80:a4:99:62:07:a0:a8:74:d3:18:d2:d1:22:
86:37:86:fe:d6:a0:c7:a0:1a:0d:65:db:3a:c9:5b:
39:87:11:2a:75:71:63:6e:62:d9:10:87:4b:c7:30:
9a:bd:f3:87:29:1e:05:f4:7d:1c:4b:d0:ec:b7:09:
39:45:9c:3c:49:73:5e:a7:bb:8e:0d:87:d3:97:9e:
6d:4c:b5:26:82:fe:0f:a3:80:2b:46:fd:62:5d:d4:
98:ad:41:49:59:54:68:e2:67:ce:b8:9d:fb:08:bc:
86:cb:0a:99:b1:15:6a:5f:00:65:fa:32:b8:2a:62:
61:71:83:a0:77:7a:95:4b:3a:e0:ba:e4:3c:bc:c5:
73:ae:62:9b:2f:65:13:98:b8:ad:a7:05:be:d1:7a:
2d:fd:5c:4f:2a:e3:35:be:2f:09:7b:67:37:df:5a:
cc:92:89:2e:79:61:71:b3:97:94:19:d4:4e:ae:00:
a8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:7A:E0:C0:7C:0D:AF:01:E4:1C:28:EA:00:E3:01:52:25:5E:1A:02
X509v3 Authority Key Identifier:
keyid:C0:2E:A5:D9:9D:10:BC:DD:29:49:69:37:25:37:51:90:90:9A:C7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wC6l2Z0QvN0pSWk3JTdRkJCax4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/ZnrgwHwNrwHkHCjqAOMBUiVeGgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/wC6l2Z0QvN0pSWk3JTdRkJCax4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.55.80.0/24
IPv6:
2a13:ccc0::/29
Signature Algorithm: sha256WithRSAEncryption
8f:3e:45:19:05:49:ee:82:fa:74:cc:5d:8c:df:d0:7f:78:69:
ce:b9:c6:ab:93:bc:44:d5:fc:e9:94:fd:04:a3:d7:27:6d:35:
89:f9:bd:29:b0:e1:a1:ae:8a:7d:29:a0:09:29:5a:dc:75:24:
60:66:23:9a:e8:9f:4f:e8:cb:50:2b:32:11:14:52:a3:c2:07:
45:cd:92:a5:04:76:14:b8:2b:0f:52:92:f0:33:e2:ad:a7:fc:
10:a2:86:ce:79:91:28:f6:37:80:4e:a1:05:40:5a:53:fe:90:
43:66:a8:7a:b9:83:7b:75:10:83:17:aa:fd:e0:73:a1:f6:e7:
67:77:66:ef:86:2c:85:2f:74:25:75:d6:59:3a:c6:a1:b8:86:
8d:e0:42:6e:33:24:e9:69:f9:86:6b:ec:63:91:09:74:45:2b:
3b:2e:da:48:52:60:43:1b:a6:13:65:0f:ca:4d:7e:18:c8:d9:
64:50:ca:c2:b6:36:f9:c6:37:6d:5f:f5:03:d7:55:86:a2:d0:
cf:06:2c:4d:af:2a:67:ac:cd:44:98:51:06:46:f9:ff:17:02:
0b:90:4b:60:54:b2:61:b9:1a:17:71:1b:1e:1f:a3:0e:5a:7b:
04:cf:09:36:eb:50:1f:a0:65:34:34:a0:35:c1:39:ad:53:4d:
02:c7:be:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:13:05 2026 by rpki-client