Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Zu8hhw4NJk2Ucl00nSo39tN9ePc.roa
File: Zu8hhw4NJk2Ucl00nSo39tN9ePc.roa (raw, json)
Hash identifier: hokbYXUgTUXy4druOws0gYO5ojBLL1659or3rYiVHcQ=
Subject key identifier: 66:EF:21:87:0E:0D:26:4D:94:72:5D:34:9D:2A:37:F6:D3:7D:78:F7
Certificate issuer: /CN=5b7747fb1596ec1d081867e5e3d2a2b873848635
Certificate serial: 019F2368D849A82D5BBD5BF11D4964B44988
Authority key identifier: 5B:77:47:FB:15:96:EC:1D:08:18:67:E5:E3:D2:A2:B8:73:84:86:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W3dH-xWW7B0IGGfl49KiuHOEhjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Zu8hhw4NJk2Ucl00nSo39tN9ePc.roa
Signing time: Thu 02 Jul 2026 15:18:21 +0000
ROA not before: Thu 02 Jul 2026 15:18:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42873
IP address blocks: 193.196.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/W3dH-xWW7B0IGGfl49KiuHOEhjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/W3dH-xWW7B0IGGfl49KiuHOEhjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/W3dH-xWW7B0IGGfl49KiuHOEhjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d8:49:a8:2d:5b:bd:5b:f1:1d:49:64:b4:49:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7747fb1596ec1d081867e5e3d2a2b873848635
Validity
Not Before: Jul 2 15:18:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=66ef21870e0d264d94725d349d2a37f6d37d78f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:36:e7:85:a6:31:07:15:90:0b:a1:67:f2:53:
86:46:9a:1f:e1:ea:f8:a0:2f:45:46:0e:48:72:05:
30:b3:9a:8d:58:f2:f4:2b:e0:e5:fc:42:88:8d:43:
64:81:35:98:c5:a0:02:4e:ad:4b:61:1c:8a:40:3a:
bc:ca:22:a2:67:01:64:e9:70:a8:29:f5:5b:9c:12:
25:ee:f0:87:bc:74:0a:e0:53:e4:21:21:a9:39:b2:
e0:eb:21:26:4e:93:cc:db:61:aa:4a:47:b7:5f:54:
af:a5:48:c5:48:35:db:30:be:03:a2:dd:8a:9a:82:
20:7f:55:d5:a0:f9:ac:b2:0e:da:6d:e0:d3:ba:01:
5a:87:72:7e:a3:02:32:ad:1b:04:c5:83:09:bf:6a:
a2:3e:fc:93:81:8f:37:bd:13:47:4d:25:f3:3f:33:
73:4b:9a:a6:31:27:f8:77:5e:1d:93:ed:4a:47:3b:
c1:fd:06:99:ae:aa:68:27:64:6e:0e:e3:25:f2:ba:
21:7f:1b:c5:23:9d:d0:ca:fe:f0:09:98:d2:0e:80:
29:ee:38:2c:85:17:21:18:7e:b1:d6:9f:ea:39:f5:
0d:f9:73:d7:c2:79:c0:ab:d6:48:eb:da:48:97:40:
fb:ee:77:7c:29:b5:b0:33:d1:47:92:4b:87:bf:d4:
cd:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:EF:21:87:0E:0D:26:4D:94:72:5D:34:9D:2A:37:F6:D3:7D:78:F7
X509v3 Authority Key Identifier:
keyid:5B:77:47:FB:15:96:EC:1D:08:18:67:E5:E3:D2:A2:B8:73:84:86:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3dH-xWW7B0IGGfl49KiuHOEhjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Zu8hhw4NJk2Ucl00nSo39tN9ePc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/W3dH-xWW7B0IGGfl49KiuHOEhjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.196.12.0/24
Signature Algorithm: sha256WithRSAEncryption
28:79:c9:36:77:e2:d9:85:48:b8:3e:36:cc:a8:9e:59:7b:a9:
98:f8:80:10:9a:be:e0:74:3d:10:54:42:6a:fd:49:fd:0d:3c:
85:0f:f0:85:1a:39:73:44:a9:f8:ce:29:6b:66:be:19:52:73:
af:61:3c:28:c2:61:20:3b:45:e7:96:a1:5e:92:e7:f7:38:84:
d9:a7:fa:60:04:78:d6:17:49:3c:39:ad:0d:70:3f:92:0d:ff:
3a:68:15:8e:1b:19:dc:e1:fc:31:2e:5a:03:91:b0:59:d3:72:
2e:a0:42:0d:22:14:e0:97:0c:a9:cf:04:ad:97:a1:53:20:bf:
55:4e:de:d3:fe:e9:3e:f0:33:9d:43:27:f8:62:26:c7:5e:38:
cc:f9:14:21:bf:c4:34:e9:4b:39:72:9e:d4:da:12:58:03:0d:
4a:ac:cf:59:a2:f3:96:68:ef:d5:eb:34:2e:3d:a6:3c:91:d6:
d5:ed:e6:07:2c:8a:ec:97:d8:03:8e:68:a5:d3:db:c4:b7:de:
62:eb:f5:44:1f:17:37:46:13:a2:c7:e3:d1:44:bf:c9:1e:d2:
e8:c7:3b:6a:8d:83:e0:20:c5:5d:b0:bb:12:00:77:17:2a:53:
c1:e5:e7:3b:f0:59:5a:ab:84:bb:64:7a:db:6b:e2:e6:4b:4e:
ca:1b:43:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:05:46 2026 by rpki-client