Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/0zKA1qUhRdCM0LbCJjNC3o0XYvc.roa
File: 0zKA1qUhRdCM0LbCJjNC3o0XYvc.roa (raw, json)
Hash identifier: Z/MGgq3usUbBDj63sBfwekaCeZ5MTpb0EczCqCY/mHo=
Subject key identifier: D3:32:80:D6:A5:21:45:D0:8C:D0:B6:C2:26:33:42:DE:8D:17:62:F7
Certificate issuer: /CN=266b1c82bb1ed0c6d5b68af48a49196e083ca940
Certificate serial: 019F2368B37FCD9E5260154DFA14155A0D47
Authority key identifier: 26:6B:1C:82:BB:1E:D0:C6:D5:B6:8A:F4:8A:49:19:6E:08:3C:A9:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jmscgrse0MbVtor0ikkZbgg8qUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/0zKA1qUhRdCM0LbCJjNC3o0XYvc.roa
Signing time: Thu 02 Jul 2026 15:18:12 +0000
ROA not before: Thu 02 Jul 2026 15:18:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8708
IP address blocks: 194.102.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/Jmscgrse0MbVtor0ikkZbgg8qUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/Jmscgrse0MbVtor0ikkZbgg8qUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jmscgrse0MbVtor0ikkZbgg8qUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b3:7f:cd:9e:52:60:15:4d:fa:14:15:5a:0d:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=266b1c82bb1ed0c6d5b68af48a49196e083ca940
Validity
Not Before: Jul 2 15:18:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d33280d6a52145d08cd0b6c2263342de8d1762f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7f:c7:c2:6c:34:39:79:52:86:c4:48:4a:21:
2a:53:30:1e:fb:81:15:24:8e:ce:78:de:0d:9c:95:
d8:03:b8:7a:c5:f8:d1:3d:0a:cb:24:3a:f2:cc:a3:
b6:99:a5:e1:1c:71:ab:b2:58:93:57:08:da:58:e3:
5f:3a:f3:bf:81:3f:ec:f7:3b:b6:30:d1:84:4f:b6:
a2:a2:58:2a:56:dd:25:de:3d:24:d2:10:a5:94:d9:
7a:84:10:37:27:7b:bd:8e:cd:09:df:49:e6:e7:8e:
5e:93:b8:39:5a:bb:dd:36:0e:2f:27:ae:63:00:88:
0f:53:9f:9f:36:04:2e:51:4e:d1:d1:4f:da:08:42:
78:e4:e9:bf:69:ed:29:de:0b:5a:46:4c:77:02:36:
b2:31:cd:69:97:a2:66:28:e2:75:cf:92:e1:6a:52:
71:2d:84:f0:ed:2a:38:17:78:38:e3:2f:46:58:77:
24:39:83:a4:15:70:53:55:93:83:7f:d6:86:7e:63:
54:05:6a:6e:17:70:b4:d5:a9:8e:60:ad:de:30:6a:
7c:21:81:b7:28:8e:e3:8c:64:5b:02:9c:29:96:93:
ad:d1:78:73:2b:76:cf:5f:38:11:f9:b4:b8:4c:e2:
2d:f8:9a:39:fc:50:ad:8f:da:20:8c:82:3e:78:ad:
b3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:32:80:D6:A5:21:45:D0:8C:D0:B6:C2:26:33:42:DE:8D:17:62:F7
X509v3 Authority Key Identifier:
keyid:26:6B:1C:82:BB:1E:D0:C6:D5:B6:8A:F4:8A:49:19:6E:08:3C:A9:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jmscgrse0MbVtor0ikkZbgg8qUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/0zKA1qUhRdCM0LbCJjNC3o0XYvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/Jmscgrse0MbVtor0ikkZbgg8qUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.129.0/24
Signature Algorithm: sha256WithRSAEncryption
52:b9:d6:c7:87:71:d3:48:d7:6c:2c:0a:0c:92:b9:99:a9:2f:
c0:b1:3f:13:4f:eb:8e:1e:64:49:07:ed:ae:75:a4:47:c0:4e:
8e:50:2e:4a:8d:48:8e:7d:65:0f:ba:d8:a1:06:c7:5e:a5:bf:
41:da:1a:56:30:95:0d:b8:f8:cf:5d:8b:ef:f9:4a:87:04:13:
6c:c3:2e:74:5b:2e:6d:6c:55:a3:1d:49:01:11:92:52:7a:6c:
83:af:4c:27:e0:73:71:5b:c7:2d:de:e0:44:7f:4e:fd:69:e4:
28:d3:84:57:d2:8b:70:1c:3a:a7:3f:e7:dd:45:20:80:02:92:
d0:15:da:14:e4:9b:00:be:3d:0a:77:50:2f:36:8f:49:c8:b9:
6f:f5:46:2d:2f:d7:c3:5e:5b:f7:31:73:7f:33:fa:b2:46:1b:
3a:e8:31:ed:f2:58:ee:7b:76:11:42:a0:7a:13:73:9c:1d:7c:
7b:a3:ba:a9:bf:a4:3a:99:ff:58:30:a8:46:a8:2d:56:f5:70:
81:19:57:43:18:75:e7:60:58:8b:cd:25:3b:44:92:ca:e7:9f:
3b:2b:3b:33:e1:bd:e7:19:21:52:d9:bb:fc:45:6d:de:00:1f:
54:5c:54:22:8b:3f:a2:a9:0d:2a:bc:d1:0b:bf:8c:9e:62:5d:
84:70:9d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:26:15 2026 by rpki-client