Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/C3TZvQ_1FiLujnsnS5txLHdX3-0.roa
File: C3TZvQ_1FiLujnsnS5txLHdX3-0.roa (raw, json)
Hash identifier: WPqRifdbE/iZ8UTmNAcTw90CByS2hScx4omMPgxhhpE=
Subject key identifier: 0B:74:D9:BD:0F:F5:16:22:EE:8E:7B:27:4B:9B:71:2C:77:57:DF:ED
Certificate issuer: /CN=66e92c341e769443fde1d27566044b4b65159060
Certificate serial: 01A1CE9B82916971A0C3D43103755D48FB68
Authority key identifier: 66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/C3TZvQ_1FiLujnsnS5txLHdX3-0.roa
Signing time: Thu 12 Nov 2026 07:14:20 +0000
ROA not before: Thu 12 Nov 2026 07:14:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34346
IP address blocks: 195.5.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ce:9b:82:91:69:71:a0:c3:d4:31:03:75:5d:48:fb:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66e92c341e769443fde1d27566044b4b65159060
Validity
Not Before: Nov 12 07:14:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b74d9bd0ff51622ee8e7b274b9b712c7757dfed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8f:f0:cf:31:2a:7d:41:ae:ac:7e:56:76:71:
b2:12:81:22:37:4c:ee:d8:ba:4b:a7:aa:75:6f:b4:
83:34:ca:9a:f0:47:17:29:50:9d:7a:ee:76:92:11:
b7:4b:28:13:9e:ff:2b:71:66:64:64:ae:8f:82:4e:
7b:2c:54:85:59:d4:19:a2:e7:1c:12:18:ba:81:69:
2b:84:d1:bd:fb:c7:88:ea:4e:0d:6d:df:1b:8c:50:
37:5c:ea:35:d2:14:20:ec:27:6a:76:b1:71:70:c4:
31:47:26:c3:f8:14:be:b6:24:88:e7:98:16:0a:c1:
ca:12:6a:05:62:f4:d1:27:9b:fd:97:41:01:1e:7d:
e3:90:49:92:5d:54:9a:8c:a2:35:d0:0c:72:27:61:
2f:86:22:ac:7f:f1:78:72:c0:04:6a:5b:81:8f:a2:
ba:a5:2c:e3:92:32:bc:20:5c:2e:c0:3d:2a:f3:fd:
22:b9:5b:0a:36:68:b1:8b:f9:60:12:08:1b:ae:3d:
59:4a:9b:e8:f9:ce:10:ab:9a:a6:3f:b1:23:ae:5d:
8b:9a:b4:39:3e:e2:21:c6:6b:49:89:13:4b:96:01:
b2:56:32:56:97:f7:73:60:63:35:c5:cb:60:5e:2c:
04:49:d7:52:7e:bd:bc:83:f9:47:e3:3c:4e:57:f0:
92:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:74:D9:BD:0F:F5:16:22:EE:8E:7B:27:4B:9B:71:2C:77:57:DF:ED
X509v3 Authority Key Identifier:
keyid:66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/C3TZvQ_1FiLujnsnS5txLHdX3-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.5.170.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:c8:91:03:db:8b:86:f9:f0:b8:1f:2a:ad:fa:0a:a8:f5:16:
ee:68:0f:06:01:b2:8d:c6:41:b3:c0:36:9c:ef:98:f2:84:2d:
a9:fd:1f:0e:df:e0:b7:48:57:ec:44:e6:dc:0f:53:d4:e2:61:
37:a5:80:7d:25:6f:e3:d9:df:d7:ca:03:52:d3:3e:e3:bd:d6:
f2:a1:79:96:41:09:4f:1c:94:df:36:81:22:84:27:18:04:fc:
33:fe:dd:ec:92:4c:aa:00:90:e4:c0:f0:d9:af:c4:0a:1b:b8:
e1:a4:fa:0e:e5:05:99:6f:22:ff:01:dc:b8:b6:3a:1a:f0:c0:
db:25:75:dc:67:b7:df:f1:14:fa:a6:ff:27:2c:d8:dd:b2:de:
1f:3e:98:ab:19:ac:fc:aa:d7:cf:4b:7f:2f:c7:db:d9:24:42:
a3:53:3d:e7:65:4f:3f:8c:28:04:91:25:18:f7:c1:57:44:bb:
fc:9b:28:0b:54:a6:33:48:4b:04:fe:a3:a9:6d:e3:54:33:5f:
12:fc:4f:42:98:f4:ef:9b:13:2c:f7:86:c0:3c:2c:2c:28:e9:
82:53:c8:56:86:06:c1:69:fe:d9:80:ff:c5:40:72:9f:96:df:
41:aa:15:0b:6e:d3:e4:f7:50:15:af:f8:0d:d6:49:97:5d:7c:
5f:ce:c4:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:32:35 2026 by rpki-client