Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/9ZgZs-Vd2gmhDwkrfdXfk6Mnf2s.roa
File: 9ZgZs-Vd2gmhDwkrfdXfk6Mnf2s.roa (raw, json)
Hash identifier: zbSyKpxfxb7Ot1kO+swaTwtnivYLTQqhTgg4Bng+swo=
Subject key identifier: F5:98:19:B3:E5:5D:DA:09:A1:0F:09:2B:7D:D5:DF:93:A3:27:7F:6B
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A178BC8EB05F935C9DA119A1DD2FDB2B7D
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/9ZgZs-Vd2gmhDwkrfdXfk6Mnf2s.roa
Signing time: Mon 26 Oct 2026 15:03:05 +0000
ROA not before: Mon 26 Oct 2026 15:03:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198969
IP address blocks: 46.34.22.0/24 maxlen: 24
194.242.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:bc:8e:b0:5f:93:5c:9d:a1:19:a1:dd:2f:db:2b:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 26 15:03:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f59819b3e55dda09a10f092b7dd5df93a3277f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1e:77:23:ea:04:ed:bf:3c:a8:9d:56:aa:56:
50:b7:ad:1d:93:3c:b8:81:8c:31:f6:e0:64:f3:b1:
d6:86:9e:3e:4c:aa:58:21:7a:5e:28:23:94:89:c4:
89:b5:66:93:10:53:b4:01:e3:b8:0f:ec:85:73:a7:
11:ce:60:f8:f1:d3:81:6d:6c:2a:c7:07:7d:80:e7:
a6:be:d6:4a:ab:c3:c5:bd:ce:3e:fc:ba:0e:83:cc:
ce:d1:54:72:f9:7d:17:66:8e:1f:96:f2:9b:1b:ab:
4f:91:21:18:69:30:c5:00:d0:16:86:0e:0d:50:f1:
c4:e2:94:52:ce:e4:a0:2c:94:e2:39:f9:3a:23:b2:
7d:33:fe:2f:6f:b7:5e:48:29:26:be:8c:5f:3e:48:
31:13:e7:16:56:2c:90:dc:ac:2c:35:7e:49:a1:8b:
e7:7e:e8:6a:b2:9f:46:20:6b:a2:8f:0b:68:d3:ac:
bb:cf:f2:b5:2f:60:a6:b9:13:8a:3d:64:a2:49:b6:
7c:6e:2e:e1:94:2a:78:02:e8:7f:92:fc:4c:f7:d9:
ab:61:51:70:be:7a:66:16:3d:0b:0a:c2:55:9e:bc:
08:ab:99:46:70:5e:75:fd:d5:ae:a4:9a:67:ce:f0:
c3:f7:47:7e:a3:bc:02:5b:ee:c8:e7:d6:27:e7:ab:
6b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:98:19:B3:E5:5D:DA:09:A1:0F:09:2B:7D:D5:DF:93:A3:27:7F:6B
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/9ZgZs-Vd2gmhDwkrfdXfk6Mnf2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.22.0/24
194.242.135.0/24
Signature Algorithm: sha256WithRSAEncryption
28:a6:0e:83:17:53:6e:91:95:f0:fa:3e:ab:fb:c9:7c:f2:53:
54:88:f8:4b:32:8d:05:87:b0:a0:be:8b:ad:99:f5:f2:5a:e7:
5b:1a:4d:cc:08:b9:06:5b:65:a7:6b:64:52:a2:0e:25:a3:ef:
41:65:a8:fc:08:03:4e:3c:42:25:0e:46:a3:d7:27:2a:66:3b:
2c:10:83:29:63:6c:4c:e9:1b:5e:2a:17:2f:be:a0:26:6c:e3:
e7:23:a2:c4:b9:d5:bc:49:56:2a:f6:fd:42:96:a3:38:21:3d:
0c:7c:ae:2f:7d:5d:5a:bc:bf:9a:f2:3d:83:72:3a:c1:a0:ad:
ce:07:9c:69:cd:c4:ec:69:57:bf:ab:ed:fd:58:54:b1:6e:26:
90:06:40:34:97:44:a3:a6:f1:83:61:66:f4:af:fa:8e:2b:cb:
6d:f1:01:55:5d:7f:59:7c:d4:38:3a:0a:b4:1a:47:90:86:86:
d3:0e:77:43:d8:61:50:92:7c:28:06:f9:c2:e1:19:6a:f9:af:
e5:ac:16:b9:ee:71:15:6d:d1:7c:ca:60:78:15:b9:c5:38:21:
03:f8:0f:72:d4:a6:a2:0f:ae:54:5b:f7:6a:83:ac:ca:b8:18:
94:b5:fd:08:c3:e3:b9:14:57:29:fb:3c:e8:2b:e9:d6:6d:db:
b2:d2:94:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:43:02 2026 by rpki-client