Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/zJGb3Lul2qWqsdQWq6H5oY9xOlk.roa
File: zJGb3Lul2qWqsdQWq6H5oY9xOlk.roa (raw, json)
Hash identifier: ACUNLiQwIOVvK5QO8tZK5nBFvvrwZsL2CqbibHt06oQ=
Subject key identifier: CC:91:9B:DC:BB:A5:DA:A5:AA:B1:D4:16:AB:A1:F9:A1:8F:71:3A:59
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F89D8336AB37F30E446F143541C09C692
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/zJGb3Lul2qWqsdQWq6H5oY9xOlk.roa
Signing time: Wed 22 Jul 2026 12:41:15 +0000
ROA not before: Wed 22 Jul 2026 12:41:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401450
IP address blocks: 194.242.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:59:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:89:d8:33:6a:b3:7f:30:e4:46:f1:43:54:1c:09:c6:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 22 12:41:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cc919bdcbba5daa5aab1d416aba1f9a18f713a59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:17:b2:fd:ad:51:75:b8:43:dc:b9:9d:4c:89:
54:54:99:56:85:ca:62:9a:23:2c:1c:85:6e:8d:fd:
7a:f2:4b:fb:1e:4d:f3:87:ed:4d:66:2b:f0:7a:f1:
09:1d:04:8a:42:87:80:7d:3e:11:95:ba:fd:55:29:
95:58:98:6c:d9:09:58:7d:3c:ff:f1:ca:f2:cf:c8:
26:ac:1e:9a:4a:e0:74:6c:73:0b:ce:f1:b3:52:56:
18:32:3a:f7:cc:58:cf:8c:4c:64:ea:29:69:da:c6:
42:9e:33:2f:0a:49:e8:ed:e0:97:aa:15:b1:b4:f6:
60:18:47:24:92:c8:15:8a:2d:c1:d4:5c:17:20:a7:
e5:2b:da:d2:4f:d2:00:c9:c1:65:77:8a:9b:d3:a0:
eb:92:7f:0d:d9:b5:f7:36:47:b6:60:1e:0c:e9:45:
00:d5:e1:77:06:81:76:02:d4:27:ea:eb:3b:62:46:
57:46:0e:ba:bf:6d:46:1f:e8:06:85:0d:14:47:4c:
71:9d:60:6f:46:76:bd:e3:49:73:e0:40:4d:47:c2:
a5:76:74:68:01:4a:cd:96:d2:86:13:d6:0f:77:49:
cb:5b:e2:9a:90:9c:ba:80:40:a2:cf:cc:b9:84:d7:
60:01:38:8f:bf:73:b3:3f:fc:5f:85:73:f6:59:a2:
0d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:91:9B:DC:BB:A5:DA:A5:AA:B1:D4:16:AB:A1:F9:A1:8F:71:3A:59
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/zJGb3Lul2qWqsdQWq6H5oY9xOlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.242.158.0/24
Signature Algorithm: sha256WithRSAEncryption
41:86:85:c7:dd:42:c5:99:bd:9e:f5:57:ef:fd:07:a5:5d:35:
58:b0:47:25:08:aa:84:16:55:2f:0a:92:20:62:ac:d2:6d:d5:
28:b9:ad:70:d0:83:92:c1:09:3c:73:b7:8c:29:bb:44:90:ca:
52:3d:b2:31:5b:d6:6f:ab:87:43:26:d8:34:bb:ce:39:2e:ae:
c4:bd:af:d8:0f:92:b4:75:40:c4:fa:cc:30:80:0c:81:3d:89:
1d:8b:66:1b:9c:23:8b:a7:92:7c:10:56:4a:18:ef:ca:96:9d:
f5:e7:3a:f3:41:a3:0d:70:57:36:7a:b0:23:84:f0:3b:74:85:
bc:1a:d8:e5:ff:26:29:76:cc:e1:c8:da:c3:98:05:db:cd:cc:
ff:bf:a5:ad:70:ab:c3:12:ac:61:00:bd:e1:84:40:bf:8d:c6:
8c:86:4a:a4:a0:87:97:8f:19:d1:a6:23:72:de:76:02:d1:75:
8f:8c:e2:ae:75:a8:d6:51:b1:0f:d7:e3:c5:ce:ce:12:32:ed:
ca:e3:b1:b9:f8:6d:7d:59:2f:f0:68:d6:43:25:58:98:89:64:
26:73:24:b7:9b:e7:3f:8c:f9:33:10:b1:20:f6:4c:05:cf:91:
b2:45:12:f3:08:e0:d0:67:5b:81:ea:99:e4:25:b2:25:21:6b:
1f:98:e0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:38:02 2026 by rpki-client