Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/031047-8c74-4aee-b065-482862de730e/1/zOXLkRXVLmmpWUjQiijMGHuhSdY.roa
File: zOXLkRXVLmmpWUjQiijMGHuhSdY.roa (raw, json)
Hash identifier: P7XRnR0Idl56m6AoSfQLmV1m5JUmtDA7uHfmGGvzfak=
Subject key identifier: CC:E5:CB:91:15:D5:2E:69:A9:59:48:D0:8A:28:CC:18:7B:A1:49:D6
Certificate issuer: /CN=f7b680d2bed29f204a1bb2f8db788e5a4b1cc36f
Certificate serial: 019F2368B21C5088960437A1B3750E48E4A9
Authority key identifier: F7:B6:80:D2:BE:D2:9F:20:4A:1B:B2:F8:DB:78:8E:5A:4B:1C:C3:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97aA0r7SnyBKG7L423iOWkscw28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/031047-8c74-4aee-b065-482862de730e/1/zOXLkRXVLmmpWUjQiijMGHuhSdY.roa
Signing time: Thu 02 Jul 2026 15:18:11 +0000
ROA not before: Thu 02 Jul 2026 15:18:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201424
IP address blocks: 185.61.196.0/22 maxlen: 22
185.61.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/031047-8c74-4aee-b065-482862de730e/1/97aA0r7SnyBKG7L423iOWkscw28.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/031047-8c74-4aee-b065-482862de730e/1/97aA0r7SnyBKG7L423iOWkscw28.mft
rsync://rpki.ripe.net/repository/DEFAULT/97aA0r7SnyBKG7L423iOWkscw28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b2:1c:50:88:96:04:37:a1:b3:75:0e:48:e4:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b680d2bed29f204a1bb2f8db788e5a4b1cc36f
Validity
Not Before: Jul 2 15:18:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cce5cb9115d52e69a95948d08a28cc187ba149d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:03:64:20:7a:e2:6e:ab:52:16:2f:f4:a8:20:
4f:12:3e:11:c5:00:2c:41:b7:0c:1a:da:47:da:cc:
f6:0a:58:21:77:58:ee:84:d5:66:99:d0:a2:69:d5:
54:ad:e9:a4:45:97:11:f0:fe:a6:e6:6f:ef:ff:08:
7f:19:3d:86:39:cf:0d:2f:0d:19:c5:ca:13:f7:f7:
d2:c7:89:b1:ce:1f:67:56:fd:22:de:f7:f5:ea:2e:
4b:cb:bc:86:5e:fc:67:af:47:c1:50:98:c3:78:a9:
bd:be:4d:d4:3e:e9:14:31:fc:20:a2:54:16:8a:86:
1c:e2:b9:79:b0:2b:8c:f0:a5:39:dd:2f:5a:4a:fe:
fb:38:ea:d1:c4:bc:7a:bf:84:b6:1c:61:ea:82:9c:
df:75:a4:61:85:99:77:5c:d5:43:49:31:26:74:67:
c8:77:d0:87:d2:2c:59:2c:f8:de:3a:40:b0:ee:c6:
11:cb:8b:bf:fe:0c:8a:35:f3:fb:8b:a7:b7:41:7f:
70:85:fe:a7:3d:90:b4:c9:a8:f7:68:5f:21:5f:b1:
36:2d:3e:49:27:2a:84:5f:2f:cb:53:75:3a:40:b8:
69:47:75:44:51:a6:ff:7e:8b:4d:af:75:29:56:6b:
59:90:f1:13:26:d1:a4:51:05:8d:98:46:96:b3:99:
80:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E5:CB:91:15:D5:2E:69:A9:59:48:D0:8A:28:CC:18:7B:A1:49:D6
X509v3 Authority Key Identifier:
keyid:F7:B6:80:D2:BE:D2:9F:20:4A:1B:B2:F8:DB:78:8E:5A:4B:1C:C3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97aA0r7SnyBKG7L423iOWkscw28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/031047-8c74-4aee-b065-482862de730e/1/zOXLkRXVLmmpWUjQiijMGHuhSdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/031047-8c74-4aee-b065-482862de730e/1/97aA0r7SnyBKG7L423iOWkscw28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.61.196.0/22
Signature Algorithm: sha256WithRSAEncryption
30:d2:94:a5:88:1d:5d:23:70:89:51:e9:cf:2c:2e:3a:4a:8f:
29:36:e4:8d:89:95:89:a2:a3:e6:30:05:9d:c4:ce:59:f8:f7:
99:d0:c2:f8:17:9f:4f:5a:ee:c4:f7:07:aa:bd:ca:7b:68:5e:
8f:53:ab:7c:44:fe:8a:f9:92:e0:34:e6:e8:eb:87:20:38:a6:
a8:30:eb:7d:9b:70:58:db:cb:42:32:5e:aa:15:59:5a:54:e3:
95:8e:77:84:f3:98:85:34:7d:23:6b:d3:43:0c:8e:0d:01:ac:
43:e0:10:5e:2b:7d:c2:1c:a9:11:e2:bc:ac:d8:cb:3e:cd:6a:
72:af:b4:e0:c1:ac:3f:ca:f5:86:ac:10:89:93:69:44:ae:90:
4e:70:0f:18:2a:7f:fc:c3:f7:46:a7:c3:3c:c1:0f:e1:67:80:
c8:a7:10:9c:7e:c6:3f:91:d1:e0:f2:0e:95:e1:24:39:8c:3c:
05:25:72:ca:17:d3:f8:c6:98:ac:d4:01:8f:f4:2b:18:14:ad:
84:af:07:8d:73:6f:d4:f6:84:af:e5:29:cb:49:39:87:95:bf:
7b:eb:60:d4:6b:77:0c:04:55:9f:d3:49:e8:7a:1d:d4:58:21:
5b:03:9c:66:f5:af:ab:a9:6e:6d:ab:99:cb:a8:71:e6:05:73:
8d:d2:49:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:30:21 2026 by rpki-client