Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/zU2HJ5PgtcQML8iTOjpgWXwSlDM.roa
File: zU2HJ5PgtcQML8iTOjpgWXwSlDM.roa (raw, json)
Hash identifier: A0t7MhTNtsKvXgVF3m6f1b9L8qaHqIE+QXT/0l0lYYw=
Subject key identifier: CD:4D:87:27:93:E0:B5:C4:0C:2F:C8:93:3A:3A:60:59:7C:12:94:33
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 01A13F153F267F31199C51A43008447B81A2
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/zU2HJ5PgtcQML8iTOjpgWXwSlDM.roa
Signing time: Thu 15 Oct 2026 10:21:59 +0000
ROA not before: Thu 15 Oct 2026 10:21:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218687
IP address blocks: 195.216.175.0/24 maxlen: 24
213.182.201.0/24 maxlen: 24
213.182.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:15:3f:26:7f:31:19:9c:51:a4:30:08:44:7b:81:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Oct 15 10:21:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cd4d872793e0b5c40c2fc8933a3a60597c129433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c7:fd:18:85:cf:3d:33:2d:79:39:60:d3:d4:
31:e8:0b:3a:f3:5c:fa:a0:92:8c:ba:56:0f:39:e8:
9c:ee:a5:b7:35:b1:36:23:3d:2a:06:c1:55:f8:fa:
0e:aa:2d:ab:73:29:ba:10:d9:a6:8f:2f:c7:b4:7b:
9b:46:91:ca:92:dd:57:de:f8:78:48:7e:5d:7e:00:
2e:73:b6:47:b1:b4:76:91:78:75:12:c6:82:40:08:
4c:0d:04:28:b4:8e:0e:a0:e4:9f:4c:48:dd:ac:7d:
eb:c5:5b:76:a7:88:e6:3d:0d:63:eb:f0:3f:0b:bd:
b8:88:ce:d6:ed:11:52:d0:fa:c6:ed:59:d0:11:17:
60:76:88:d0:af:75:f9:a8:0f:eb:02:fe:1b:90:f0:
af:d9:4d:d1:01:c4:6a:a6:76:ef:08:34:11:0b:3d:
33:4d:0f:33:fc:be:ca:39:8c:b7:ee:4b:1a:6f:f7:
c0:b0:a3:0d:62:d6:06:d3:47:da:8b:3d:2d:b0:28:
f8:3d:6f:18:32:67:21:65:39:20:7b:64:21:d9:69:
08:3c:12:f0:c0:36:60:c3:7d:27:15:14:9e:67:3b:
0d:44:67:19:4e:42:e5:37:88:1c:2e:7e:b7:9f:0b:
52:71:70:1f:49:bb:a0:1b:07:f6:48:e6:3e:ac:5c:
67:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:4D:87:27:93:E0:B5:C4:0C:2F:C8:93:3A:3A:60:59:7C:12:94:33
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/zU2HJ5PgtcQML8iTOjpgWXwSlDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.175.0/24
213.182.201.0/24
213.182.206.0/24
Signature Algorithm: sha256WithRSAEncryption
13:8d:18:7a:e0:47:41:a2:f1:de:52:46:57:9d:4b:23:91:c7:
13:2c:db:f5:2b:d6:bc:9a:3f:ec:0d:27:b8:2c:dc:39:a1:62:
0f:63:5b:e7:f6:b3:0b:b7:83:c3:f3:59:76:ad:35:1e:94:36:
07:83:d6:a0:c1:62:4b:d3:82:dc:97:84:45:8a:14:78:07:de:
ff:d3:c7:73:69:86:ec:84:ef:6e:6f:8e:ec:4c:81:78:9a:d6:
cc:53:fe:80:e1:93:09:97:61:94:90:08:04:2b:2f:fb:4d:da:
83:61:b0:9f:da:52:a0:a6:1b:2d:1d:92:c3:a5:0f:80:80:02:
66:b9:2c:5d:c5:b0:54:3b:67:c8:10:c9:4b:e6:e1:fc:02:0b:
4c:03:90:63:23:87:d6:2c:db:cf:e6:10:a3:6c:24:d9:b4:9c:
55:61:f7:5f:cb:93:d7:63:37:e0:5c:61:a1:6e:5a:61:47:24:
22:7c:a5:f1:ff:a7:95:87:c2:4a:6d:b6:86:35:e0:76:e6:18:
3d:cc:c6:1f:d3:c9:a6:81:ff:81:ae:31:8d:21:bb:0c:11:fc:
b7:d3:8f:ff:ab:76:4a:b0:8c:c9:9a:88:f8:cb:fd:85:a3:68:
32:1f:98:35:79:eb:ce:4e:70:49:32:27:b8:88:32:91:8f:7d:
28:56:f8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:13:03 2026 by rpki-client