Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/zvdtmpKU0r789ctjHEiX8csffJk.roa
File: zvdtmpKU0r789ctjHEiX8csffJk.roa (raw, json)
Hash identifier: XTusHS5R6Rka2VjSd91V1+2/jcIhKHh0nvlZOZ8uISo=
Subject key identifier: CE:F7:6D:9A:92:94:D2:BE:FC:F5:CB:63:1C:48:97:F1:CB:1F:7C:99
Certificate issuer: /CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Certificate serial: 019F657F113843BD665232F00C496FBF90CC
Authority key identifier: D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/zvdtmpKU0r789ctjHEiX8csffJk.roa
Signing time: Wed 15 Jul 2026 11:17:33 +0000
ROA not before: Wed 15 Jul 2026 11:17:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 45.159.12.0/24 maxlen: 24
45.159.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:65:7f:11:38:43:bd:66:52:32:f0:0c:49:6f:bf:90:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Validity
Not Before: Jul 15 11:17:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cef76d9a9294d2befcf5cb631c4897f1cb1f7c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:77:09:e1:f8:94:81:41:8e:cb:91:fb:17:ad:
ce:2e:cd:90:50:e5:78:e6:a2:94:b7:df:7e:df:cd:
5a:75:50:3a:b9:bb:1b:9c:5c:1a:aa:43:e2:cc:ef:
00:27:a5:d6:c5:96:57:fa:e6:bd:d1:1b:ae:8e:8b:
b9:f4:ae:3b:a7:2d:ba:ed:85:8e:c6:aa:65:fe:43:
e4:bc:51:8e:c8:c7:f0:19:75:52:e0:e9:48:aa:68:
1b:ee:1f:d1:2f:e6:d9:10:7e:05:b5:8b:ef:7f:b5:
ef:f0:4e:16:dc:e9:34:53:2e:bd:a8:35:ed:be:36:
d7:d6:f4:76:c9:8b:ab:a7:5e:8a:5a:46:12:67:1b:
cb:db:5b:ac:bd:71:61:f6:79:92:54:1c:83:43:45:
d1:9d:f8:59:27:7e:38:34:0d:ad:06:8b:2f:f1:0e:
69:c9:d4:37:b8:da:d0:8e:68:26:bf:86:4b:94:26:
91:da:5c:7f:54:38:f0:dd:56:d7:19:c4:d1:a4:5f:
04:72:7e:f6:0f:0a:5c:eb:b2:a9:7d:dc:bd:cf:1b:
a4:b9:0d:fe:d4:6f:b6:7f:86:fe:00:fb:36:8e:ba:
4d:97:18:cf:56:46:7c:57:38:9d:00:c6:98:ee:ca:
85:a0:09:a9:6c:10:b9:de:dd:74:0f:f2:e4:50:ea:
74:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F7:6D:9A:92:94:D2:BE:FC:F5:CB:63:1C:48:97:F1:CB:1F:7C:99
X509v3 Authority Key Identifier:
keyid:D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/zvdtmpKU0r789ctjHEiX8csffJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.12.0/23
Signature Algorithm: sha256WithRSAEncryption
51:bd:9f:61:9f:40:0e:bc:42:8b:1b:1f:ff:c0:7f:ae:66:88:
a6:cf:6b:78:16:9f:9e:61:b2:0e:1e:31:ef:6f:0f:a0:ea:1a:
84:65:d7:a1:90:5a:87:05:ca:c1:cd:ad:6a:67:97:aa:2f:53:
34:b4:2a:4d:2c:7d:14:07:ce:53:57:48:c5:a0:95:6d:b4:4f:
27:77:17:1c:d5:14:e3:4c:30:63:56:e9:a4:18:8d:cd:ec:8c:
25:29:ae:13:97:4e:c2:de:3e:86:52:ba:cf:0b:c6:37:24:40:
22:ff:24:28:b5:fd:a0:5d:41:47:d1:1b:30:7d:83:70:f6:05:
02:ee:25:1f:3b:df:41:3b:0d:24:ea:5f:9d:87:d9:fc:f6:fd:
08:ae:d9:a2:bd:36:9b:b7:08:42:dd:92:47:b4:47:f0:e1:e4:
ad:e3:b3:71:d4:39:88:c6:40:90:4b:7c:02:0b:35:62:55:8d:
b4:da:69:fd:50:f8:14:13:da:b7:f9:9f:37:af:cc:01:4e:9a:
ff:8c:87:d6:83:33:3c:ca:14:23:91:f8:a1:35:12:f5:29:d8:
24:13:45:f8:72:53:4f:4c:80:7b:ce:4c:45:92:76:b8:f2:c0:
2b:28:36:ef:7f:58:69:23:2f:54:8e:33:ba:a2:ca:3e:01:28:
e2:fa:5c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:46:15 2026 by rpki-client