Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/26c3e8-86a9-4f0c-a83f-4bdf24857211/1/zF2FGxoX0ZoqBJpAdIrHjnJr748.roa
File: zF2FGxoX0ZoqBJpAdIrHjnJr748.roa (raw, json)
Hash identifier: Or8elDoj8qDhg577TX6Kjac9Hx8P3Z6GCnTIDEkjYE4=
Subject key identifier: CC:5D:85:1B:1A:17:D1:9A:2A:04:9A:40:74:8A:C7:8E:72:6B:EF:8F
Certificate issuer: /CN=abe154d17ef6d13710be1472ae57f2d036ad6fd4
Certificate serial: 019C51661B5532F6696A47E48D9AE78569B5
Authority key identifier: AB:E1:54:D1:7E:F6:D1:37:10:BE:14:72:AE:57:F2:D0:36:AD:6F:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q-FU0X720TcQvhRyrlfy0Datb9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/26c3e8-86a9-4f0c-a83f-4bdf24857211/1/zF2FGxoX0ZoqBJpAdIrHjnJr748.roa
Signing time: Thu 12 Feb 2026 10:29:32 +0000
ROA not before: Thu 12 Feb 2026 10:29:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31598
IP address blocks: 194.42.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/26c3e8-86a9-4f0c-a83f-4bdf24857211/1/q-FU0X720TcQvhRyrlfy0Datb9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/26c3e8-86a9-4f0c-a83f-4bdf24857211/1/q-FU0X720TcQvhRyrlfy0Datb9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/q-FU0X720TcQvhRyrlfy0Datb9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:51:66:1b:55:32:f6:69:6a:47:e4:8d:9a:e7:85:69:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abe154d17ef6d13710be1472ae57f2d036ad6fd4
Validity
Not Before: Feb 12 10:29:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cc5d851b1a17d19a2a049a40748ac78e726bef8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cc:ae:aa:a2:05:d9:dd:7b:a0:36:bc:a1:c1:
4a:e4:a0:3d:ed:de:94:c8:60:85:9b:87:14:8e:af:
c1:c6:54:5f:0f:b2:8b:78:39:b2:2d:e8:82:03:6e:
7f:7f:f2:de:9a:8c:e0:65:b7:bf:21:fa:37:9a:ce:
ef:24:db:81:a2:04:0b:fa:b8:ea:cc:81:de:92:e9:
bf:cb:c8:8f:c0:93:7c:6c:d2:41:56:32:64:2b:d5:
9e:1b:44:99:c6:d2:5b:ca:fb:c4:65:d5:7e:ea:da:
3e:0b:94:a6:22:41:6e:7c:57:39:f4:68:03:f2:3b:
54:b4:51:bc:ac:75:dd:a2:fe:ea:6d:49:58:75:a5:
7e:05:ab:1d:34:79:2a:96:12:4c:39:32:ae:aa:85:
d7:6b:e5:28:48:6a:3d:b9:b8:48:1c:36:e8:37:4a:
5e:33:6d:60:5b:c7:e1:8f:97:d0:1a:e7:0f:3e:05:
a8:fc:48:fb:a7:6f:0a:34:86:c7:fc:df:50:89:b5:
ba:89:d5:a3:99:94:94:75:40:2a:cd:66:a4:f8:d7:
50:08:39:73:91:75:d0:6b:4b:e6:55:8d:5f:76:82:
38:12:7d:0b:94:98:4d:e5:8e:dc:ad:e7:0f:24:46:
35:b4:4a:a9:85:e1:24:29:95:1c:f6:a0:a3:a2:e0:
e6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:5D:85:1B:1A:17:D1:9A:2A:04:9A:40:74:8A:C7:8E:72:6B:EF:8F
X509v3 Authority Key Identifier:
keyid:AB:E1:54:D1:7E:F6:D1:37:10:BE:14:72:AE:57:F2:D0:36:AD:6F:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q-FU0X720TcQvhRyrlfy0Datb9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/26c3e8-86a9-4f0c-a83f-4bdf24857211/1/zF2FGxoX0ZoqBJpAdIrHjnJr748.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/26c3e8-86a9-4f0c-a83f-4bdf24857211/1/q-FU0X720TcQvhRyrlfy0Datb9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.42.107.0/24
Signature Algorithm: sha256WithRSAEncryption
29:1e:77:91:94:d6:56:e1:8d:9d:02:e1:05:de:2a:a1:52:0d:
02:52:31:7a:97:00:29:02:9a:05:da:d6:97:77:d6:09:06:2d:
eb:20:25:f1:75:2e:7f:6d:fa:da:15:ee:77:06:8d:3d:dc:bf:
cc:6d:3d:6c:05:cc:23:69:1e:af:d2:2c:09:66:eb:e8:13:5c:
de:8d:aa:3a:a2:8e:a5:26:9a:6b:8d:37:58:05:90:7b:41:1d:
8b:74:32:3f:4e:bd:77:58:1b:c5:1f:30:28:dd:b2:4c:cb:34:
46:9b:7f:d7:3d:81:63:cb:2d:7a:93:83:2c:78:b2:8b:54:80:
9b:2f:e6:57:21:2e:11:31:30:a2:0d:bf:2f:0d:9b:3a:72:ee:
87:bb:57:55:d7:79:ea:27:3f:52:2b:96:28:20:9a:04:d1:89:
4c:74:d9:d1:93:69:3a:31:47:dc:25:2d:3f:27:58:76:69:36:
c5:9a:46:c0:17:c2:8e:e1:1b:ea:7c:17:ab:64:34:8a:43:69:
21:8d:e1:0b:9a:d1:3a:c3:90:9e:c5:49:6a:a3:14:a5:bd:84:
4f:91:e2:27:45:c3:33:d1:b5:85:cb:08:28:3b:7c:cf:35:15:
6b:e8:c8:a1:1f:80:17:a8:9e:5a:5e:c9:07:bc:81:0c:88:b6:
60:17:8d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:49:22 2026 by rpki-client