Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/zRdtGNLqz3DTStXWoWXkQVdYwlk.roa
File: zRdtGNLqz3DTStXWoWXkQVdYwlk.roa (raw, json)
Hash identifier: 7dOrZtxziMGSIF3EGdNDH44Ze2WHNrr7lOSga6pUGbk=
Subject key identifier: CD:17:6D:18:D2:EA:CF:70:D3:4A:D5:D6:A1:65:E4:41:57:58:C2:59
Certificate issuer: /CN=cb88a5ee7704889209de589b0e657961ed590c01
Certificate serial: 019F23684BD66810FE4FB75984A5B6E62682
Authority key identifier: CB:88:A5:EE:77:04:88:92:09:DE:58:9B:0E:65:79:61:ED:59:0C:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4il7ncEiJIJ3libDmV5Ye1ZDAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/zRdtGNLqz3DTStXWoWXkQVdYwlk.roa
Signing time: Thu 02 Jul 2026 15:17:45 +0000
ROA not before: Thu 02 Jul 2026 15:17:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6730
IP address blocks: 193.5.56.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/y4il7ncEiJIJ3libDmV5Ye1ZDAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/y4il7ncEiJIJ3libDmV5Ye1ZDAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/y4il7ncEiJIJ3libDmV5Ye1ZDAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:4b:d6:68:10:fe:4f:b7:59:84:a5:b6:e6:26:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb88a5ee7704889209de589b0e657961ed590c01
Validity
Not Before: Jul 2 15:17:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cd176d18d2eacf70d34ad5d6a165e4415758c259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d6:ff:d9:88:d4:c2:18:e3:bf:af:89:a3:c7:
07:c8:48:5e:b3:69:82:88:08:48:d0:ee:a9:14:4b:
e8:00:a4:40:76:92:d9:59:da:93:15:65:20:e0:3f:
51:65:bd:ae:f2:c3:c1:9d:07:52:7d:e6:34:3c:65:
ef:94:d9:9a:a3:67:1c:b9:4b:c6:4e:cc:30:ee:2e:
09:92:a7:79:01:d4:3d:52:4d:9b:a9:50:95:66:97:
4a:08:b3:a4:24:f8:cf:95:6d:89:64:e4:21:60:aa:
00:c7:8f:f1:cf:7a:a3:34:3f:4e:6a:c6:29:84:e2:
f7:fc:7c:b5:5b:19:2a:a9:ae:80:95:fd:ce:8e:ee:
ca:6c:08:94:77:d3:cd:9a:8e:3c:55:e1:4e:05:b3:
91:8f:95:87:53:43:ed:35:d4:67:cc:60:0e:7e:5c:
d3:78:bb:e5:84:fa:ed:80:86:fb:90:aa:47:9d:58:
b7:28:ef:3c:63:e3:44:67:a8:c6:4c:ac:b8:b2:c0:
dd:37:c8:25:25:a9:0d:c4:c9:c5:60:e7:fa:8b:44:
50:50:0a:e0:b9:4c:32:a5:db:e9:a7:3c:46:1d:72:
2c:bd:33:ff:c7:cf:9a:f4:1d:20:45:45:b4:07:57:
6e:c4:f8:e6:63:c6:6d:9d:78:f2:ad:8e:eb:5b:67:
10:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:17:6D:18:D2:EA:CF:70:D3:4A:D5:D6:A1:65:E4:41:57:58:C2:59
X509v3 Authority Key Identifier:
keyid:CB:88:A5:EE:77:04:88:92:09:DE:58:9B:0E:65:79:61:ED:59:0C:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4il7ncEiJIJ3libDmV5Ye1ZDAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/zRdtGNLqz3DTStXWoWXkQVdYwlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/y4il7ncEiJIJ3libDmV5Ye1ZDAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.56.0/23
Signature Algorithm: sha256WithRSAEncryption
94:6b:5c:3d:3a:dc:74:f2:c9:53:56:35:1f:53:8f:7c:a1:55:
eb:86:dd:83:3d:9c:68:ed:06:1e:d3:aa:50:02:19:92:6f:e9:
14:6d:00:d3:a2:ff:0b:7d:da:db:36:c2:81:ba:b5:37:42:52:
53:34:b0:9c:dc:4a:19:a1:42:2a:77:df:b9:88:ea:c6:de:f1:
d1:5b:6b:36:14:6c:07:71:59:a6:7f:97:29:6b:c9:bc:b5:5e:
8e:c1:7f:f3:4b:ac:2f:55:9c:82:a2:87:24:7e:02:8a:3f:17:
91:d6:b2:1b:71:93:97:5f:95:7a:47:1f:5e:c3:36:ed:fa:ff:
3b:2d:2d:62:fe:90:49:7b:9d:52:f9:d8:95:8d:1b:a2:39:83:
2b:3f:07:b7:b1:a5:4c:5c:e1:66:8f:70:fc:21:f5:71:12:e8:
43:cd:33:6c:05:5b:f8:3e:6c:a7:c1:e6:ce:74:cc:93:5a:54:
e2:6a:78:7c:7c:65:ee:7b:4d:8c:68:7d:b6:73:98:a7:d8:fa:
4a:5c:cf:71:2f:34:f5:27:b7:2b:18:b6:ec:9e:bb:08:84:29:
7d:ba:d0:33:31:40:65:e8:01:34:7a:eb:7e:0b:7e:11:94:77:
1a:73:13:62:32:df:04:9f:39:15:6a:0f:89:fd:f3:98:b6:71:
ec:33:aa:44
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaEvWaBD+T7dZhKW25iaCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiODhhNWVlNzcwNDg4OTIwOWRlNTg5YjBlNjU3OTYxZWQ1
OTBjMDEwHhcNMjYwNzAyMTUxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDE3NmQxOGQyZWFjZjcwZDM0YWQ1ZDZhMTY1ZTQ0MTU3NThjMjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdb/2YjUwhjjv6+Jo8cHyEhes2mC
iAhI0O6pFEvoAKRAdpLZWdqTFWUg4D9RZb2u8sPBnQdSfeY0PGXvlNmao2ccuUvG
Tsww7i4Jkqd5AdQ9Uk2bqVCVZpdKCLOkJPjPlW2JZOQhYKoAx4/xz3qjND9OasYp
hOL3/Hy1Wxkqqa6Alf3Oju7KbAiUd9PNmo48VeFOBbORj5WHU0PtNdRnzGAOflzT
eLvlhPrtgIb7kKpHnVi3KO88Y+NEZ6jGTKy4ssDdN8glJakNxMnFYOf6i0RQUArg
uUwypdvppzxGHXIsvTP/x8+a9B0gRUW0B1duxPjmY8ZtnXjyrY7rW2cQzQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM0XbRjS6s9w00rV1qFl5EFXWMJZMB8GA1UdIwQY
MBaAFMuIpe53BIiSCd5Ymw5leWHtWQwBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTRpbDduY0VpSklKM2xpYkRtVjVZZTFaREFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8yODUxOWYtZGM0OC00ZjMxLWEzNWUt
OTllZTRhODk4NWMzLzEvelJkdEdOTHF6M0RUU3RYV29XWGtRVmRZd2xrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8yODUxOWYtZGM0OC00ZjMxLWEzNWUtOTllZTRhODk4NWMz
LzEveTRpbDduY0VpSklKM2xpYkRtVjVZZTFaREFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwQU4MA0G
CSqGSIb3DQEBCwUAA4IBAQCUa1w9Otx08slTVjUfU498oVXrht2DPZxo7QYe06pQ
AhmSb+kUbQDTov8LfdrbNsKBurU3QlJTNLCc3EoZoUIqd9+5iOrG3vHRW2s2FGwH
cVmmf5cpa8m8tV6OwX/zS6wvVZyCoockfgKKPxeR1rIbcZOXX5V6Rx9ewzbt+v87
LS1i/pBJe51S+diVjRuiOYMrPwe3saVMXOFmj3D8IfVxEuhDzTNsBVv4PmynwebO
dMyTWlTianh8fGXue02MaH22c5in2PpKXM9xLzT1J7crGLbsnrsIhCl9utAzMUBl
6AE0eut+C34RlHcacxNiMt8EnzkVag+J/fOYtnHsM6pE
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:25:53 2026 by rpki-client