Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/nzg1Wy5iDrgZN6cFhF2wIXzEoL4.roa
File: nzg1Wy5iDrgZN6cFhF2wIXzEoL4.roa (raw, json)
Hash identifier: 7c3WobtnQbFwAsfBBLzCJIOIEFbRalJlUeFDgCh2yaA=
Subject key identifier: 9F:38:35:5B:2E:62:0E:B8:19:37:A7:05:84:5D:B0:21:7C:C4:A0:BE
Certificate issuer: /CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
Certificate serial: 019F13D41E9A5A9517D516A74EB5958CC561
Authority key identifier: A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/nzg1Wy5iDrgZN6cFhF2wIXzEoL4.roa
Signing time: Mon 29 Jun 2026 14:41:36 +0000
ROA not before: Mon 29 Jun 2026 14:41:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15465
IP address blocks: 185.181.24.0/24 maxlen: 24
185.181.25.0/24 maxlen: 24
185.181.26.0/24 maxlen: 24
185.181.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:d4:1e:9a:5a:95:17:d5:16:a7:4e:b5:95:8c:c5:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
Validity
Not Before: Jun 29 14:41:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f38355b2e620eb81937a705845db0217cc4a0be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:59:8d:55:16:93:ee:fb:34:fd:0e:4d:5d:bc:
3b:8b:a7:04:d4:9e:cc:6c:6a:fc:55:58:38:ca:5c:
7e:bb:4c:d2:f1:83:8a:46:fc:44:d5:90:6a:c1:33:
64:76:41:e1:74:15:82:e5:89:c0:0e:ca:c3:b1:97:
81:a1:f8:bf:01:87:29:7a:bc:d1:08:84:bf:d8:e5:
12:88:0f:21:a1:a4:c5:4a:ce:70:c0:14:da:85:2e:
ab:c9:78:8f:06:d4:b9:2c:e5:5f:7e:c9:ef:c8:3d:
0e:5f:72:90:04:76:f6:12:05:e4:46:d9:95:96:c1:
91:67:9a:02:fe:57:c2:ba:8a:c0:5d:bc:42:80:50:
a4:41:4f:08:ce:12:d4:84:29:7e:69:f0:d5:b6:e9:
2d:f8:82:92:98:e3:4c:3c:fd:8e:c6:81:b5:c0:3d:
46:c0:6d:67:11:07:c6:bd:e3:e9:9c:6a:45:29:bb:
37:48:70:69:44:fd:e6:59:48:36:70:6b:63:93:e3:
b3:9a:26:58:c3:66:a0:39:ae:8f:fb:28:1b:a5:f5:
a8:99:ff:f3:fb:c3:41:3e:83:46:e9:ec:bf:54:c0:
20:06:bc:f1:4c:06:26:47:cd:bb:90:3b:7d:be:0b:
61:8c:0d:2c:cb:8d:d7:92:a2:0c:80:90:ea:83:fe:
68:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:38:35:5B:2E:62:0E:B8:19:37:A7:05:84:5D:B0:21:7C:C4:A0:BE
X509v3 Authority Key Identifier:
keyid:A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/nzg1Wy5iDrgZN6cFhF2wIXzEoL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.181.24.0/22
Signature Algorithm: sha256WithRSAEncryption
17:d4:35:8c:cc:1c:23:e2:c0:8c:8e:87:be:f9:75:88:18:45:
af:9f:14:4d:78:13:ef:5f:4f:ee:16:ec:b2:dc:87:3e:8b:eb:
72:a3:1a:08:0a:48:4e:13:63:e7:39:b2:f1:d5:9d:69:98:b4:
45:56:62:5e:67:d0:6d:1a:61:90:40:69:00:cc:c0:fe:57:d8:
ff:23:f0:87:57:72:1c:9b:58:75:21:c4:eb:ac:28:63:b7:ff:
a1:48:2c:d3:00:ec:b1:94:2c:06:67:24:93:4d:39:af:43:e3:
25:56:e9:b8:c4:86:89:09:8e:de:db:7c:3c:e4:d1:51:53:f4:
07:6c:d9:25:5b:8b:1f:8f:37:04:54:e0:c5:61:03:86:ca:e0:
48:c6:d6:af:48:d3:ee:8a:85:80:97:17:b9:f8:4b:69:16:c6:
88:69:84:cd:01:06:7c:44:ab:f6:5a:cb:31:8c:2c:c0:66:b8:
b5:11:49:72:b8:73:82:81:0d:d5:70:d9:2c:ee:fd:a6:6b:89:
ab:33:e3:f8:c6:b0:67:a5:98:95:b9:69:15:2f:33:a8:39:13:
cd:8a:00:00:1a:c6:0a:f1:9d:28:24:55:50:53:99:b0:47:07:
15:f4:90:57:ca:9d:16:06:ee:a1:73:8c:d0:7e:31:82:f1:5e:
bc:ab:2a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:19:55 2026 by rpki-client