Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/zzpXRXiaaDaUNJgb8J2uf-9tibo.roa
File: zzpXRXiaaDaUNJgb8J2uf-9tibo.roa (raw, json)
Hash identifier: 6IAZNXyLJkKu4qRWV3DHkLx2sFZt0DSc2M4cQ6BsTRE=
Subject key identifier: CF:3A:57:45:78:9A:68:36:94:34:98:1B:F0:9D:AE:7F:EF:6D:89:BA
Certificate issuer: /CN=b193f1a611ff3d950abd96652cdaa055a351db45
Certificate serial: 019F2368D7F182CFF7641E66DA0A8AB0DB5A
Authority key identifier: B1:93:F1:A6:11:FF:3D:95:0A:BD:96:65:2C:DA:A0:55:A3:51:DB:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZPxphH_PZUKvZZlLNqgVaNR20U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/zzpXRXiaaDaUNJgb8J2uf-9tibo.roa
Signing time: Thu 02 Jul 2026 15:18:21 +0000
ROA not before: Thu 02 Jul 2026 15:18:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20546
IP address blocks: 185.101.36.0/24 maxlen: 24
2a0e:96c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/sZPxphH_PZUKvZZlLNqgVaNR20U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/sZPxphH_PZUKvZZlLNqgVaNR20U.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZPxphH_PZUKvZZlLNqgVaNR20U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d7:f1:82:cf:f7:64:1e:66:da:0a:8a:b0:db:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b193f1a611ff3d950abd96652cdaa055a351db45
Validity
Not Before: Jul 2 15:18:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf3a5745789a68369434981bf09dae7fef6d89ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b2:b3:5a:d8:cb:60:8c:9d:73:a4:61:49:01:
ad:a9:80:72:24:fc:d8:c7:8d:2b:56:5a:41:f5:0a:
96:7d:5d:b7:df:88:bd:e9:29:9e:91:26:22:34:c7:
20:43:99:99:df:31:c7:2a:1a:cb:2c:12:dd:7c:21:
a7:43:b4:fc:a8:ff:f7:64:c1:c9:04:45:62:a2:0f:
0d:74:97:4e:68:b7:3c:3a:f0:c6:0f:e1:c4:0e:cc:
88:d3:c5:64:2a:fa:2b:97:4f:b3:ea:39:15:7e:e0:
cc:a0:7c:34:d6:49:85:5e:65:77:28:7b:ea:48:59:
0b:83:a7:93:85:d7:40:95:31:de:80:1a:11:bb:ec:
7a:1e:a7:69:77:3d:5f:69:8c:91:e1:8f:d4:9f:2d:
9f:14:3f:cf:81:ac:00:67:b9:53:de:74:23:3a:98:
df:c2:1a:b8:31:b4:35:eb:0f:a8:d3:4f:af:7a:92:
b1:1c:16:be:d5:64:b5:20:c9:b8:3c:2d:de:8c:61:
72:fb:ce:b3:16:7f:6a:bc:80:c2:2f:61:ce:77:d9:
4a:25:fd:67:a4:db:4f:7d:47:34:ef:03:bd:eb:dd:
4f:04:cc:79:03:63:49:38:5b:28:7e:42:2f:d0:be:
91:88:18:ff:6a:36:6e:21:ab:ff:97:be:f5:df:90:
d5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3A:57:45:78:9A:68:36:94:34:98:1B:F0:9D:AE:7F:EF:6D:89:BA
X509v3 Authority Key Identifier:
keyid:B1:93:F1:A6:11:FF:3D:95:0A:BD:96:65:2C:DA:A0:55:A3:51:DB:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZPxphH_PZUKvZZlLNqgVaNR20U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/zzpXRXiaaDaUNJgb8J2uf-9tibo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/sZPxphH_PZUKvZZlLNqgVaNR20U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.101.36.0/24
IPv6:
2a0e:96c0::/32
Signature Algorithm: sha256WithRSAEncryption
d1:f6:4e:ea:76:36:63:6c:03:db:ff:f4:fa:5e:ac:db:a9:46:
8f:c1:2e:ad:b2:f1:01:02:b0:65:17:92:01:ed:40:3e:56:41:
05:5b:ea:d4:00:8f:53:49:f6:67:dd:8e:4e:aa:4b:91:96:2c:
20:73:81:97:62:a6:1e:43:e9:db:84:ac:26:52:11:d3:12:cd:
ac:48:52:e2:aa:09:9c:bd:c8:16:65:e3:ce:ac:fc:f8:7d:50:
d2:39:6f:89:13:c9:bf:2f:37:2d:9c:0b:63:2c:b8:18:5e:f3:
86:4b:72:4c:82:70:47:d1:47:76:5a:35:39:6b:2b:9c:d7:5d:
46:ba:fe:9a:df:1f:0c:d0:b1:31:61:3c:55:0e:11:48:88:9b:
ad:f7:97:d3:fb:58:2b:69:f0:26:f5:23:80:57:82:a0:b1:e2:
78:63:97:e4:63:28:5a:7c:b0:65:b6:d6:20:2f:df:0d:fb:9c:
08:37:92:6c:04:1f:61:bc:79:50:54:1d:c1:db:c6:65:a6:b7:
1c:c3:d8:0b:d2:4f:f4:49:2b:e8:25:9e:ee:1b:5f:30:f2:49:
d0:aa:2b:ee:c8:c3:36:c4:c6:51:47:e9:9e:d4:12:95:f4:b8:
0a:ac:da:08:33:d7:22:28:eb:25:d1:74:74:24:8a:84:e6:b2:
21:52:e2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:20:30 2026 by rpki-client