Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/ZVtTxijOLWFcJSO6efo4DmD_3no.roa
File: ZVtTxijOLWFcJSO6efo4DmD_3no.roa (raw, json)
Hash identifier: EQQUPUJE6DPaF7qwNTT9ymoPg6GQS/wPlAo+XhsXQps=
Subject key identifier: 65:5B:53:C6:28:CE:2D:61:5C:25:23:BA:79:FA:38:0E:60:FF:DE:7A
Certificate issuer: /CN=68fe2339ebe097ff698ab30e5b63ecc21a2a23ab
Certificate serial: 019F8F21559AFD7668FE269E15EB51653832
Authority key identifier: 68:FE:23:39:EB:E0:97:FF:69:8A:B3:0E:5B:63:EC:C2:1A:2A:23:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aP4jOevgl_9pirMOW2PswhoqI6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/ZVtTxijOLWFcJSO6efo4DmD_3no.roa
Signing time: Thu 23 Jul 2026 13:19:14 +0000
ROA not before: Thu 23 Jul 2026 13:19:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207626
IP address blocks: 130.193.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/aP4jOevgl_9pirMOW2PswhoqI6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:21:55:9a:fd:76:68:fe:26:9e:15:eb:51:65:38:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68fe2339ebe097ff698ab30e5b63ecc21a2a23ab
Validity
Not Before: Jul 23 13:19:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=655b53c628ce2d615c2523ba79fa380e60ffde7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4e:55:19:b5:8b:57:79:22:47:25:34:cf:1a:
b7:40:99:eb:f9:1b:1f:0f:ac:f9:26:b2:f6:11:da:
b6:13:a1:1d:37:e8:bb:c6:3b:88:ec:9f:72:9e:c8:
c7:1b:6c:d7:a8:da:fe:f3:ef:97:b1:55:12:7e:09:
ee:49:e4:f2:dc:ea:12:f2:47:13:68:52:f6:bf:ca:
bd:5a:e2:0c:ef:8c:80:f3:98:e8:c0:77:a3:66:ff:
a8:01:bf:05:49:a3:ee:a4:fa:74:46:82:75:63:78:
33:46:4b:ac:33:20:51:d4:65:3a:9b:25:64:d1:48:
12:eb:db:62:db:78:1d:9b:ee:52:63:55:9d:b7:bb:
cf:2d:4b:84:0d:ce:0e:60:b9:a8:c8:2e:62:08:48:
a4:76:e8:8a:00:79:4f:ba:12:a5:54:2e:ad:f5:22:
e2:fd:9b:d5:52:72:97:bb:c9:c1:83:1c:82:4c:7c:
73:61:fb:05:36:1e:1c:ce:23:e1:c8:d7:02:eb:09:
30:18:39:21:51:fb:a7:11:db:d6:9c:75:13:82:d8:
9a:77:b3:ba:83:43:3a:8b:36:cc:79:b8:00:a5:a0:
60:bb:ce:15:ff:3e:46:b0:9d:b1:89:6f:bd:c9:0e:
a5:71:dc:f3:75:87:37:28:3a:c5:16:c5:23:f1:42:
1d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:5B:53:C6:28:CE:2D:61:5C:25:23:BA:79:FA:38:0E:60:FF:DE:7A
X509v3 Authority Key Identifier:
keyid:68:FE:23:39:EB:E0:97:FF:69:8A:B3:0E:5B:63:EC:C2:1A:2A:23:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aP4jOevgl_9pirMOW2PswhoqI6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/ZVtTxijOLWFcJSO6efo4DmD_3no.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.193.25.0/24
Signature Algorithm: sha256WithRSAEncryption
32:5b:b8:04:2c:24:4a:df:a2:ca:ba:77:08:ae:6e:0b:b4:e6:
c5:25:3d:53:a0:5f:1c:41:38:db:e7:d7:9e:bd:3c:ee:2e:cc:
1b:49:38:ca:cd:79:d7:39:05:c8:07:9e:14:19:0a:02:a6:19:
54:4a:53:44:1b:ae:ca:d0:44:b8:f2:84:ab:30:60:d5:f8:31:
d5:f4:02:f2:e1:ed:d4:7d:70:e5:44:af:1f:97:d4:26:2c:93:
c2:83:2d:29:1e:d3:c2:ea:1c:3b:fe:f4:02:09:f4:fb:d5:1d:
5c:3f:28:7c:21:5d:55:3f:75:68:96:d2:cf:03:c3:44:49:9d:
ae:09:21:3e:e5:01:4b:00:2a:08:56:07:94:dd:b5:40:df:9b:
f2:61:4d:e3:93:e4:90:ee:34:f2:a2:9c:2d:8f:54:72:65:0c:
ee:7b:13:05:47:9a:23:68:39:88:53:72:b4:8c:89:49:01:e2:
61:4b:68:a6:a2:49:9d:30:c5:02:18:1b:25:f3:eb:b7:eb:9d:
e5:17:97:0b:56:38:a9:59:af:d5:e5:ee:92:31:10:16:42:6f:
b4:7d:21:4e:31:18:9b:a9:1d:2f:b3:8c:ab:f9:28:14:9d:ab:
aa:1e:97:80:e3:ed:51:3b:f5:73:92:68:de:2d:fa:80:ed:7b:
34:fe:64:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:07:23 2026 by rpki-client