Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/ZURfnxN80ICtQmCFCBJOx_oGtIs.roa
File: ZURfnxN80ICtQmCFCBJOx_oGtIs.roa (raw, json)
Hash identifier: Oltwpm7y23WFgfYh+sgQIWjiwZFTiGFPxaIr1WjvJcM=
Subject key identifier: 65:44:5F:9F:13:7C:D0:80:AD:42:60:85:08:12:4E:C7:FA:06:B4:8B
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 019CFA0C82B10357F0FE39A4876BC3121DF0
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/ZURfnxN80ICtQmCFCBJOx_oGtIs.roa
Signing time: Tue 17 Mar 2026 04:27:29 +0000
ROA not before: Tue 17 Mar 2026 04:27:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205489
IP address blocks: 5.1.40.0/24 maxlen: 24
195.170.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fa:0c:82:b1:03:57:f0:fe:39:a4:87:6b:c3:12:1d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Mar 17 04:27:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=65445f9f137cd080ad42608508124ec7fa06b48b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:64:4e:76:64:16:f5:87:49:30:21:42:5f:fa:
7c:83:b8:e6:4c:31:4b:4c:ac:1e:23:50:e1:a9:73:
62:db:43:72:4d:b6:c0:fd:7d:62:31:cd:65:6d:63:
ed:85:25:cf:3c:af:4e:78:4a:1f:8c:77:96:3b:2f:
ad:07:17:a4:91:38:d8:00:ec:d7:92:42:29:b0:ed:
4c:8e:44:f8:15:01:c1:1c:f2:ee:89:83:75:1f:c1:
78:af:ff:6a:a8:0f:d7:69:3f:44:4e:77:28:75:36:
bc:e1:8e:2a:05:57:9f:7d:f9:be:80:46:42:97:18:
f2:56:24:23:77:7a:8c:69:5f:f1:9a:2a:fb:f4:11:
d6:84:48:64:75:15:8b:19:70:9c:18:9a:4d:73:17:
1e:33:1b:cf:d7:df:35:23:9b:dd:ac:78:2c:62:95:
e7:8c:f4:c0:d7:0b:38:79:26:c4:d7:ae:77:16:a2:
b7:63:7c:48:d3:df:75:95:80:21:eb:17:af:78:b8:
db:3a:c5:58:0b:4b:e8:0f:74:c4:2a:14:9b:84:42:
f2:91:36:11:b4:3a:f6:78:8f:eb:32:fe:1b:17:ee:
2d:2d:da:47:2d:f2:5b:ff:32:9e:5b:fb:30:a4:d4:
86:dd:3e:78:63:63:ec:f6:de:64:92:89:49:3b:9c:
a1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:44:5F:9F:13:7C:D0:80:AD:42:60:85:08:12:4E:C7:FA:06:B4:8B
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/ZURfnxN80ICtQmCFCBJOx_oGtIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.40.0/24
195.170.163.0/24
Signature Algorithm: sha256WithRSAEncryption
73:1f:d7:7b:e2:b8:2d:9c:53:db:1a:2e:dd:e5:ce:16:f3:bc:
ae:bd:83:62:ab:da:ae:ec:7d:0f:10:1c:ab:8b:eb:e3:9b:83:
9b:82:82:56:88:e2:5e:a6:5e:a9:53:6e:c3:a1:85:18:9d:d9:
ec:e1:21:08:56:92:e5:f4:dd:78:e7:9b:25:1f:dc:42:a1:5e:
b1:6e:b6:91:14:6e:38:6a:a4:28:e5:57:75:b6:5b:3f:20:b1:
75:41:f4:ca:2c:64:fb:ad:b0:5d:30:bd:02:11:0d:6a:4c:44:
46:3c:9f:49:af:a2:e6:25:8a:df:f0:c2:4c:c4:21:a6:28:87:
46:75:15:e4:a8:02:dc:a0:55:5b:d0:3b:de:55:f1:38:a3:a0:
ca:12:86:b0:1f:f3:d3:ca:2c:9b:c9:3f:4a:8f:d7:e8:a7:73:
d3:c5:31:3d:88:a7:9b:07:bb:4a:02:b2:05:53:b9:e5:c5:b3:
4e:a0:70:9e:50:77:b4:5d:8f:27:89:10:f1:b5:e1:de:f4:66:
c9:7b:82:f8:01:32:01:d1:0f:a2:dc:75:25:a1:68:9a:d4:cc:
6a:a2:62:db:f8:80:ec:5e:4f:f5:5e:c6:b4:7d:b9:e2:84:bb:
9d:4c:28:3c:ea:31:a7:27:28:8f:38:fd:ee:5b:37:0a:0d:3f:
49:a1:3a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:08:44 2026 by rpki-client