Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/Z48YcacIdaFOrbU7hl0nBrBdOnE.roa
File: Z48YcacIdaFOrbU7hl0nBrBdOnE.roa (raw, json)
Hash identifier: mNCCj8yHct24e5aYcSn4spJlToJ33LdwEpzI7Aa7J4o=
Subject key identifier: 67:8F:18:71:A7:08:75:A1:4E:AD:B5:3B:86:5D:27:06:B0:5D:3A:71
Certificate issuer: /CN=a621186413bbdfde20e592fbe5553de7f94e5987
Certificate serial: 019D0C1004E65E8CE4F4097FE0B646799BDC
Authority key identifier: A6:21:18:64:13:BB:DF:DE:20:E5:92:FB:E5:55:3D:E7:F9:4E:59:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/Z48YcacIdaFOrbU7hl0nBrBdOnE.roa
Signing time: Fri 20 Mar 2026 16:24:29 +0000
ROA not before: Fri 20 Mar 2026 16:24:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 185.131.228.0/22 maxlen: 24
185.131.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0c:10:04:e6:5e:8c:e4:f4:09:7f:e0:b6:46:79:9b:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a621186413bbdfde20e592fbe5553de7f94e5987
Validity
Not Before: Mar 20 16:24:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=678f1871a70875a14eadb53b865d2706b05d3a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fe:51:c4:59:36:b2:63:6e:96:71:98:b8:fd:
f9:5b:8f:fe:3e:01:07:af:89:9b:4f:6d:de:a4:c0:
03:d7:0b:01:1e:f2:f6:b6:06:17:87:88:42:68:a5:
7d:06:fc:a7:07:be:ba:39:a9:4b:af:96:ad:12:1b:
01:8e:10:87:3e:2c:1e:0c:08:0c:59:24:fd:1a:0c:
99:d5:a9:28:96:17:3a:ed:fc:41:f3:22:58:7c:d9:
f0:bd:61:28:1c:6f:69:a6:73:82:0b:d4:36:67:e0:
ba:7e:06:47:7c:cd:de:9f:a2:c3:09:8c:05:f6:37:
67:82:55:fc:99:14:6a:cd:d7:f4:28:0c:c9:5b:5e:
dc:c3:5b:47:99:90:7e:c5:52:94:3c:bd:8a:93:e9:
e1:db:f2:58:ad:b2:09:6a:b2:b4:82:6d:e7:29:d1:
28:9a:29:db:b6:60:a1:d7:ab:64:d5:f9:13:ac:43:
2b:00:b5:29:eb:15:c1:8d:a2:1c:90:39:1d:89:7e:
c3:76:cb:71:51:a5:74:d7:35:83:21:f4:60:12:34:
3e:97:11:3e:fd:1b:65:10:9a:8c:e9:8f:71:cb:42:
b6:a4:3a:db:77:1d:f0:e7:40:5a:8e:58:54:a3:e2:
b5:ff:37:dd:85:67:fd:87:6b:f0:93:c2:78:36:d0:
c4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:8F:18:71:A7:08:75:A1:4E:AD:B5:3B:86:5D:27:06:B0:5D:3A:71
X509v3 Authority Key Identifier:
keyid:A6:21:18:64:13:BB:DF:DE:20:E5:92:FB:E5:55:3D:E7:F9:4E:59:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/Z48YcacIdaFOrbU7hl0nBrBdOnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.131.228.0/22
Signature Algorithm: sha256WithRSAEncryption
58:a6:26:ce:d0:48:5e:90:0c:02:35:b3:af:13:73:9a:8c:17:
6b:1a:54:7c:99:23:bc:83:3f:7e:43:a6:21:d0:72:ff:c0:be:
23:b1:d7:09:2c:bd:3f:65:91:72:cd:af:cc:8c:44:ca:88:cf:
71:5a:11:b0:ae:da:95:61:dd:ac:e5:a1:ef:ed:b0:e3:76:0c:
91:72:f1:d4:ad:db:00:e2:30:77:87:e5:84:a1:d8:88:86:ac:
25:37:12:1c:30:0f:e7:83:ed:8b:ae:f0:97:73:62:54:fc:cb:
cc:2f:c7:96:9e:f7:28:b6:f8:4a:1a:12:ee:ae:ce:bc:ec:ac:
16:c0:84:37:3c:81:88:9f:bf:be:78:41:d9:56:70:fe:b5:d0:
a1:dd:5b:a6:3a:32:f8:04:2e:eb:43:f1:b3:65:4b:80:44:62:
8b:7c:09:2c:0d:68:7a:53:3b:b2:a5:ec:d6:77:07:c2:5c:ae:
6c:64:1a:f7:f8:34:15:fa:93:99:24:c7:fe:bc:3f:8f:e6:6c:
d7:9e:4d:a1:67:a2:19:1e:fe:1e:22:c6:6d:3a:69:a6:cb:5d:
45:92:ae:aa:83:b4:97:7e:52:0c:d6:19:cf:74:1d:1b:d8:d1:
b8:37:2a:98:a3:7b:69:45:dd:c1:bb:68:6f:09:49:80:17:53:
55:6a:d6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:25:02 2026 by rpki-client