Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/zmJpm9WmGyRvXSMt6CINxsOgwiE.roa
File: zmJpm9WmGyRvXSMt6CINxsOgwiE.roa (raw, json)
Hash identifier: 5N09f+HIO/Y6TUFGQrbNgoW3eg7a5mLYm6RDVA10HEY=
Subject key identifier: CE:62:69:9B:D5:A6:1B:24:6F:5D:23:2D:E8:22:0D:C6:C3:A0:C2:21
Certificate issuer: /CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
Certificate serial: 019F63127D8A0DDC28028065603FB05585A8
Authority key identifier: C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/zmJpm9WmGyRvXSMt6CINxsOgwiE.roa
Signing time: Tue 14 Jul 2026 23:59:43 +0000
ROA not before: Tue 14 Jul 2026 23:59:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219216
IP address blocks: 212.15.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:63:12:7d:8a:0d:dc:28:02:80:65:60:3f:b0:55:85:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
Validity
Not Before: Jul 14 23:59:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ce62699bd5a61b246f5d232de8220dc6c3a0c221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b2:c6:27:9c:4f:30:18:7a:f7:98:aa:9b:69:
42:40:36:9e:c4:37:52:46:72:0c:a9:61:e8:0b:78:
41:04:b1:4e:7c:b5:2c:e1:3d:20:56:ca:d3:4a:ae:
d4:88:be:fb:17:b2:f4:3e:dd:c9:31:91:0e:4b:23:
96:53:12:0d:4a:2d:1a:51:70:76:8c:eb:51:ea:4c:
dc:20:6e:31:92:b2:97:3a:e6:46:5b:63:a3:19:cb:
81:43:33:9b:3e:9f:58:0d:1c:5c:e7:64:a1:f6:70:
00:ed:f7:12:5a:7e:56:08:60:48:af:19:bf:47:91:
ee:77:0d:77:98:5d:b0:1d:43:3a:81:e2:a9:05:39:
48:8c:d2:1e:3a:53:9d:bc:d9:70:65:5e:49:dc:71:
ef:b4:9f:cb:0b:36:12:85:f2:73:4d:2f:d4:fb:45:
4a:5f:ca:7f:ae:bc:fb:85:27:b2:a9:e8:36:60:61:
16:51:a3:84:37:ac:b6:7e:51:89:34:0f:5c:f6:33:
20:6f:fe:1f:fb:fe:e8:6d:e0:48:3e:2a:82:db:81:
50:f3:83:8c:90:f5:86:21:bd:da:a2:41:1c:dd:52:
ff:bd:9f:c9:3c:b1:2e:04:c9:50:58:b1:46:db:45:
66:4d:23:f1:28:69:ac:7f:f3:af:27:99:ef:eb:44:
cf:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:62:69:9B:D5:A6:1B:24:6F:5D:23:2D:E8:22:0D:C6:C3:A0:C2:21
X509v3 Authority Key Identifier:
keyid:C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/zmJpm9WmGyRvXSMt6CINxsOgwiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.15.44.0/24
Signature Algorithm: sha256WithRSAEncryption
68:90:f4:9f:f6:e7:31:5e:b9:57:66:90:7b:28:27:c4:74:4e:
7e:82:65:56:c3:c8:b1:db:24:02:d9:14:17:17:96:29:76:8b:
6e:d8:79:53:5c:e5:fc:a5:dd:6a:6f:9d:f6:21:9a:d7:12:e0:
9e:8d:83:a4:44:34:72:9e:15:6d:91:2d:ec:a2:33:04:97:d6:
95:6c:38:5c:c7:60:b6:58:fa:58:1e:02:ff:f1:da:00:72:43:
59:80:14:38:97:ae:77:ac:7f:2a:cc:56:02:53:3e:29:8a:44:
7d:e6:22:32:bf:90:ba:bf:d3:ce:c2:98:72:4b:9d:f8:d4:15:
e9:5d:ae:8f:00:74:b4:54:80:02:5a:5c:8a:c3:5d:fa:05:6b:
2a:e1:d5:be:0d:0e:e6:64:b7:e1:79:13:50:d3:77:0e:52:3e:
47:e2:95:52:24:65:90:de:43:dc:b3:77:f6:29:48:7e:17:44:
d1:36:5b:94:c1:d6:ae:6c:10:eb:38:52:52:56:cf:88:4c:04:
c7:4a:30:4d:f5:79:9d:ed:f4:f0:1e:45:52:09:4e:5c:37:22:
3a:61:c8:16:38:d8:95:ab:be:c3:87:5c:b6:0e:31:c2:e9:1d:
e2:5f:83:7c:b6:53:91:9a:e8:c4:ec:ba:72:b1:52:97:1b:59:
f4:06:47:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 03:06:26 2026 by rpki-client