Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/zvS-N687qEZnc64ozlPlGuTJSh4.roa
File: zvS-N687qEZnc64ozlPlGuTJSh4.roa (raw, json)
Hash identifier: HVYbCeEWamJ92/dVgW6lOpoGX5tSr5TuNSczGHDqzsA=
Subject key identifier: CE:F4:BE:37:AF:3B:A8:46:67:73:AE:28:CE:53:E5:1A:E4:C9:4A:1E
Certificate issuer: /CN=f44de36ce6543721f27a6893a3b3ab7fff9e1221
Certificate serial: 01A1B5580B5AB27A275CA6C36EC8BE868ABB
Authority key identifier: F4:4D:E3:6C:E6:54:37:21:F2:7A:68:93:A3:B3:AB:7F:FF:9E:12:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9E3jbOZUNyHyemiTo7Orf_-eEiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/zvS-N687qEZnc64ozlPlGuTJSh4.roa
Signing time: Sat 07 Nov 2026 09:30:08 +0000
ROA not before: Sat 07 Nov 2026 09:30:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218568
IP address blocks: 176.116.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9E3jbOZUNyHyemiTo7Orf_-eEiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b5:58:0b:5a:b2:7a:27:5c:a6:c3:6e:c8:be:86:8a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44de36ce6543721f27a6893a3b3ab7fff9e1221
Validity
Not Before: Nov 7 09:30:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cef4be37af3ba8466773ae28ce53e51ae4c94a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0d:2b:c4:3a:18:d5:50:66:42:b6:b7:b7:5f:
1e:54:dd:a8:8b:32:80:6c:e2:30:4c:05:5c:56:0c:
2e:ac:45:9a:ed:8b:b1:a2:45:ef:08:13:f0:8e:45:
0e:84:68:4e:14:ba:c3:bb:fb:41:30:5b:ec:64:5c:
19:3f:2a:37:31:08:c2:82:81:0d:17:51:0c:3a:96:
1d:5b:0c:12:7b:94:30:11:77:dd:7a:e6:4d:b2:d8:
eb:ad:d2:86:25:63:76:64:df:fb:4e:39:b7:b5:4d:
76:57:63:f9:14:e2:9e:b9:44:8d:9a:5d:94:a6:05:
60:92:9d:5c:79:db:5c:12:b9:71:63:a8:19:50:2e:
c2:0b:4d:44:8e:0f:ef:31:97:62:48:ac:51:42:67:
d0:36:22:e6:bf:8d:ea:a0:88:03:15:bb:ee:30:71:
6e:71:7e:ac:e1:76:b6:b8:01:f9:94:ec:d7:50:e4:
de:7c:d1:c5:7f:b7:7f:e5:89:fb:03:8b:bf:c9:75:
97:04:44:d2:1f:dd:cc:93:98:c2:9d:4f:f8:6d:79:
b0:59:34:28:3c:c2:29:cd:bf:63:74:a2:e6:14:a0:
9d:0a:9a:63:e3:77:c5:db:1b:aa:4c:d6:20:98:ab:
04:19:e3:3e:9f:f9:79:d1:d6:0b:c2:af:c2:31:98:
be:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F4:BE:37:AF:3B:A8:46:67:73:AE:28:CE:53:E5:1A:E4:C9:4A:1E
X509v3 Authority Key Identifier:
keyid:F4:4D:E3:6C:E6:54:37:21:F2:7A:68:93:A3:B3:AB:7F:FF:9E:12:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9E3jbOZUNyHyemiTo7Orf_-eEiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/zvS-N687qEZnc64ozlPlGuTJSh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.6.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:72:e9:2c:8c:55:42:ac:2f:0a:fd:19:52:ee:72:2e:9f:b9:
bc:41:86:ba:d1:bc:96:56:4a:1e:b2:f3:a5:a8:b8:5e:39:3e:
9a:c0:2d:d5:bb:80:f7:31:84:f3:bd:32:a0:bf:ef:56:f7:3c:
26:15:09:5e:cb:73:59:72:76:13:17:e5:fa:bf:b9:6f:10:ce:
37:13:53:f3:ce:f7:64:46:cf:99:12:04:bd:1c:01:39:d1:93:
30:43:d0:39:94:b5:d6:79:4e:ed:54:46:b4:d5:ce:fa:79:6b:
cc:24:7b:a0:7a:ce:63:8f:e6:ef:01:6b:ae:97:7b:21:35:a6:
a6:47:68:30:85:bd:1f:22:c7:4b:62:59:a8:33:e5:77:53:c0:
76:ba:64:29:26:44:4c:04:8d:dc:34:7c:13:d7:69:9f:2e:8e:
ee:35:5a:fa:33:91:21:66:17:6a:17:44:d8:da:cf:d4:f8:89:
71:a1:00:32:5a:f1:48:5b:07:a6:69:8a:f5:a7:d2:5d:37:2e:
38:34:3a:58:30:75:e1:63:df:36:f1:d6:e3:43:7c:ec:65:66:
e0:43:ab:ea:39:10:c1:25:9b:76:1b:ab:aa:48:e4:70:2c:d0:
15:6d:35:6c:11:ad:86:e6:b8:04:48:fb:5e:9d:ec:07:a0:3d:
ea:37:5b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:53:37 2026 by rpki-client