Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Z8JYEdjPg_dc2EhUM6eLFLKprq8.roa
File: Z8JYEdjPg_dc2EhUM6eLFLKprq8.roa (raw, json)
Hash identifier: RAuWYs9ocFmdiW3/KvkQ3tFlKxUkcgCNQAYeYBV6LWY=
Subject key identifier: 67:C2:58:11:D8:CF:83:F7:5C:D8:48:54:33:A7:8B:14:B2:A9:AE:AF
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019E06D7AA90EFFBBA7349C4C66D4A152838
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Z8JYEdjPg_dc2EhUM6eLFLKprq8.roa
Signing time: Fri 08 May 2026 09:07:37 +0000
ROA not before: Fri 08 May 2026 09:07:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203245
IP address blocks: 194.71.146.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:06:d7:aa:90:ef:fb:ba:73:49:c4:c6:6d:4a:15:28:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: May 8 09:07:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=67c25811d8cf83f75cd8485433a78b14b2a9aeaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a8:2e:b3:15:d3:96:3e:96:22:48:fb:d4:a0:
90:25:0a:04:6b:7d:70:ab:b6:3a:c6:ae:f6:69:8e:
55:ab:a8:33:42:d0:c9:72:0e:17:b3:63:fe:95:09:
9e:b6:73:7a:43:08:89:c8:cc:8c:43:9f:e9:96:86:
7a:bc:90:3d:d4:c1:4b:a0:41:c9:d9:63:3a:38:7a:
fe:1c:26:b0:d0:99:0d:55:14:11:5b:02:42:92:dd:
df:61:7f:51:6d:67:58:22:54:a8:84:01:ab:2e:72:
0c:3f:54:9b:95:de:66:c0:fc:d4:97:a0:b4:50:f8:
b4:62:bb:6d:b3:58:c5:f6:de:41:67:90:6b:4b:e0:
24:d7:55:4b:cb:0a:d5:a0:91:ee:98:d1:32:65:c3:
b9:51:fd:43:82:9b:73:15:50:6e:d8:c3:72:af:14:
d0:58:5b:a9:85:b2:0d:01:8b:14:ff:74:59:b8:3e:
fa:41:3d:da:67:f8:4f:48:da:17:2d:cc:b4:3c:62:
a9:8c:07:bc:d3:87:ca:ad:0f:e9:1b:03:e4:47:1d:
9e:10:20:e9:f5:f0:c8:02:fe:93:de:d2:e2:20:c0:
78:72:56:ba:b4:00:c7:95:9d:e0:8a:a9:7b:42:1b:
d5:fa:a0:ad:b6:4c:16:c8:a1:cc:a7:f8:4e:3f:a6:
59:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C2:58:11:D8:CF:83:F7:5C:D8:48:54:33:A7:8B:14:B2:A9:AE:AF
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Z8JYEdjPg_dc2EhUM6eLFLKprq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.71.146.0/23
Signature Algorithm: sha256WithRSAEncryption
ca:c2:b6:ff:38:b1:0e:e0:b0:f5:84:d4:b4:10:53:c0:b2:0d:
0c:dd:26:be:ac:82:11:a7:f6:d7:2c:e6:f9:79:91:8e:48:ed:
06:ab:21:ef:6f:ed:15:e4:21:8d:72:65:64:f3:e8:ea:a9:00:
7f:58:a8:a2:12:af:cb:da:7e:70:b7:e7:8a:3f:c7:b5:5f:31:
30:4a:88:23:f4:eb:d2:9b:d4:34:0d:b5:2c:42:d8:b0:6d:5b:
2a:cb:a8:f4:28:cc:46:07:13:81:2c:28:b5:02:f7:01:0f:47:
5d:79:0d:1e:a4:0d:b4:7f:d8:0a:be:6b:0a:31:33:ab:71:ff:
5c:a1:19:9a:73:50:f7:6b:e9:d1:4b:63:35:a6:09:0d:b6:e5:
28:c7:f9:86:db:1f:82:51:1b:5e:a7:b9:06:a5:48:8b:d2:2c:
71:8f:d3:75:eb:27:78:48:86:b8:c3:19:aa:8f:76:d3:cb:66:
a1:3f:2c:38:b4:7e:cd:cf:90:30:88:da:cf:fe:13:8a:b9:d8:
c8:82:90:09:ee:f7:81:7b:23:02:7c:26:b6:bd:3b:48:fd:3b:
8f:1d:9c:8a:c1:65:9c:6e:69:15:f6:da:7f:a0:dc:a0:ad:87:
c5:8f:d8:89:f3:f6:1c:94:fe:bf:57:c9:33:56:8a:2d:df:e5:
93:12:f6:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:31:40 2026 by rpki-client