Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/0RZCsN_vkoOLG4Zak35qywh4iW4.roa
File: 0RZCsN_vkoOLG4Zak35qywh4iW4.roa (raw, json)
Hash identifier: p3mQ/SiidKXAKtMzbKXuESFcW41oZVLtHA6r/qYgrZ4=
Subject key identifier: D1:16:42:B0:DF:EF:92:83:8B:1B:86:5A:93:7E:6A:CB:08:78:89:6E
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 019D1B3F7FDE5FBE6FE58B78BF0D92FC0CBD
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/0RZCsN_vkoOLG4Zak35qywh4iW4.roa
Signing time: Mon 23 Mar 2026 15:10:39 +0000
ROA not before: Mon 23 Mar 2026 15:10:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137517
IP address blocks: 95.173.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1b:3f:7f:de:5f:be:6f:e5:8b:78:bf:0d:92:fc:0c:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Mar 23 15:10:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d11642b0dfef92838b1b865a937e6acb0878896e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8d:7d:7a:83:85:a8:89:e9:a0:de:13:ef:5f:
43:70:47:e2:59:53:be:34:ce:e4:42:e0:77:7e:7a:
fe:c4:fb:97:5e:6c:ad:2f:0f:07:21:24:a0:ec:7e:
c9:f0:51:ec:30:8c:a4:7f:c6:d7:1b:0e:be:b8:d1:
fe:ea:fe:55:2d:ef:d0:c0:aa:d8:68:84:c0:a1:35:
41:59:4d:52:ed:bc:2c:ec:0f:8c:6f:64:4b:07:8e:
d9:4c:94:45:55:14:cf:01:c2:e0:83:e7:c1:8c:fa:
aa:8d:5f:56:49:e9:11:d3:75:f5:63:06:ef:4b:7f:
af:77:7e:cc:95:48:94:0e:aa:5d:3e:e1:cd:6d:7a:
cf:42:f5:c5:9e:48:d0:8d:94:f7:c5:4e:16:81:1b:
0d:98:e8:a7:50:72:ee:58:2d:17:de:0a:82:63:5d:
22:9d:bb:a4:02:e7:bd:b6:30:1d:3a:c5:c9:0b:09:
44:fa:43:a9:2f:dd:ff:99:e6:a3:37:9d:9d:65:1d:
4e:f6:50:8b:02:a4:84:07:0c:26:8b:44:32:2d:49:
8c:03:56:2f:88:78:72:d6:a9:e2:10:13:a1:6a:b1:
55:25:ba:80:12:ef:47:ae:f5:11:f3:85:86:bb:c7:
6a:10:74:0e:d6:7d:35:3a:87:69:0c:c8:09:1d:2d:
72:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:16:42:B0:DF:EF:92:83:8B:1B:86:5A:93:7E:6A:CB:08:78:89:6E
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/0RZCsN_vkoOLG4Zak35qywh4iW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.173.57.0/24
Signature Algorithm: sha256WithRSAEncryption
61:d4:c6:81:e0:19:16:f8:05:b9:43:91:f1:91:25:29:ff:d0:
f2:52:12:5f:32:77:93:10:f8:fc:59:01:13:0c:95:9e:71:be:
33:58:3f:c4:6e:58:68:a6:5f:0a:20:cc:0b:56:8e:13:2c:c6:
45:55:af:55:8c:e6:86:74:f3:eb:07:0b:0e:bc:1d:86:7a:b3:
dd:f0:88:2a:5a:e2:8f:54:77:46:44:1b:19:d4:c3:9e:b5:c0:
a3:03:6e:d7:8a:2a:06:d5:a1:d8:ec:19:26:4b:b3:22:36:b9:
51:cb:1d:9c:20:7d:34:92:fd:a8:b5:78:3c:2e:2f:13:f7:e5:
5e:74:3d:17:1f:53:1c:6a:13:5e:e3:63:e2:15:aa:c7:d1:85:
06:43:60:89:c8:e1:1f:ee:a8:4a:9c:53:69:7b:18:0a:c3:ad:
de:e3:94:d4:d8:9f:30:ce:11:d7:b8:70:71:21:11:bf:40:85:
34:81:62:8f:dc:5d:5a:ea:a0:c2:70:cf:20:33:2b:6c:df:4a:
8d:8b:eb:94:87:1d:bb:ab:db:49:ef:25:08:bc:ec:3b:b3:0f:
94:63:18:1e:6d:7b:b2:c2:d0:81:64:9e:6b:7d:f4:18:66:67:
ad:f3:4c:93:18:e4:9e:43:69:34:35:2f:06:18:df:e7:62:b0:
da:e4:26:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:42:04 2026 by rpki-client