Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/zfBdsVExv-Km-zpAmBaB1oux2mo.roa
File: zfBdsVExv-Km-zpAmBaB1oux2mo.roa (raw, json)
Hash identifier: 7Q5ZHt7BLn5424Qae0fkfyUAvNqOvG5pFVX+wYmDoSA=
Subject key identifier: CD:F0:5D:B1:51:31:BF:E2:A6:FB:3A:40:98:16:81:D6:8B:B1:DA:6A
Certificate issuer: /CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Certificate serial: 01A0B0DAD7D6AB330D15A741A75B0CFC89B1
Authority key identifier: C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/zfBdsVExv-Km-zpAmBaB1oux2mo.roa
Signing time: Thu 17 Sep 2026 19:32:07 +0000
ROA not before: Thu 17 Sep 2026 19:32:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206446
IP address blocks: 46.232.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:06:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b0:da:d7:d6:ab:33:0d:15:a7:41:a7:5b:0c:fc:89:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Validity
Not Before: Sep 17 19:32:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cdf05db15131bfe2a6fb3a40981681d68bb1da6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3a:f0:f6:0c:b3:c3:68:d2:bf:00:a4:e7:71:
02:e9:de:29:b4:01:9c:d5:4a:7c:ff:42:0f:a8:62:
65:f5:f7:d7:2a:7e:55:1d:ad:28:d7:60:c2:24:0a:
29:f6:96:b1:86:dd:6e:be:d5:a3:98:42:54:2d:12:
6b:16:8f:76:38:6b:80:e8:0a:7a:94:35:7b:0f:ac:
d1:78:98:91:c9:94:64:8b:ce:e8:40:b1:4b:da:c0:
b2:3c:db:cc:1f:8f:39:b1:11:7c:16:ec:73:47:ca:
6d:b5:4e:25:41:68:c1:88:70:19:1d:d2:49:b6:73:
9e:d7:24:87:33:bd:cc:71:04:49:3b:e7:0e:5a:a0:
73:cb:c7:bc:b5:26:22:38:1d:62:72:1d:f4:63:ee:
48:69:26:2d:55:51:e8:fd:8d:39:48:72:a7:0a:c2:
69:2f:6d:63:44:0e:9d:1f:62:29:56:d5:de:5c:bc:
81:ae:81:a1:84:c4:89:f2:bc:5d:fa:3b:8a:84:c4:
be:1b:08:fe:f5:2e:12:01:8e:4a:70:d7:17:9f:ff:
80:e4:98:0e:f9:2a:6a:c0:04:9c:74:fb:19:e4:e8:
c9:23:06:44:f7:35:23:f1:4e:4c:b5:c8:52:bb:26:
a9:e9:31:f6:27:10:b2:13:9d:b5:bb:ab:2f:69:32:
1e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F0:5D:B1:51:31:BF:E2:A6:FB:3A:40:98:16:81:D6:8B:B1:DA:6A
X509v3 Authority Key Identifier:
keyid:C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/zfBdsVExv-Km-zpAmBaB1oux2mo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.235.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:68:fe:65:b7:d2:e6:0a:67:5c:00:81:ea:9d:09:79:cc:3a:
74:3d:2f:70:7e:92:b7:87:c1:7a:05:ba:80:56:20:1c:2d:85:
e2:85:12:93:1e:54:13:d2:e1:59:70:2a:8d:a4:c3:64:08:f5:
ed:a0:d8:2a:77:5d:8e:ab:ce:68:e3:da:93:74:82:36:ca:1b:
19:2a:af:aa:4b:c8:b4:3f:f6:49:e3:c4:46:36:37:b1:ae:5a:
a2:a6:4d:6a:fb:4b:ba:57:7c:76:b8:5b:5e:0d:6e:6d:0a:71:
d5:ab:d5:0c:43:89:d9:6b:3c:bc:5b:f1:66:d8:10:d5:9e:b9:
33:c7:2b:ff:e9:09:d8:cb:4e:51:23:66:d5:71:0f:90:85:ff:
f8:ec:88:6c:3b:af:3b:9e:f4:cf:6c:5d:da:7d:39:1c:5c:be:
98:0f:ba:26:c2:bf:fa:54:66:55:e8:da:b6:62:c9:5d:cb:69:
f5:56:7d:63:9d:b2:d3:49:b0:12:55:dc:72:a9:3e:5f:34:86:
c1:d3:b1:6a:01:72:47:93:67:19:7c:6e:ca:76:32:6b:c3:a6:
38:d1:08:2a:5f:d6:db:cc:c2:fd:04:56:65:47:f7:39:36:26:
54:54:40:f1:d6:8e:b4:0f:00:f9:4c:27:b8:b4:cd:69:0a:18:
24:b1:9f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:48:12 2026 by rpki-client