Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/ZEq2VxymKKqXcVDH7UVkT9RIte0.roa
File: ZEq2VxymKKqXcVDH7UVkT9RIte0.roa (raw, json)
Hash identifier: OutVjw9J9+RzSe2XRHmI9JPa/RxVwdLkAlr9fkxWJAw=
Subject key identifier: 64:4A:B6:57:1C:A6:28:AA:97:71:50:C7:ED:45:64:4F:D4:48:B5:ED
Certificate issuer: /CN=8ac7eae649d9547b0ad0ab007ab4e8a48ded4d5d
Certificate serial: 019CF6BED72C68CCB1627CFF407C1FF26B3F
Authority key identifier: 8A:C7:EA:E6:49:D9:54:7B:0A:D0:AB:00:7A:B4:E8:A4:8D:ED:4D:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/isfq5knZVHsK0KsAerTopI3tTV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/ZEq2VxymKKqXcVDH7UVkT9RIte0.roa
Signing time: Mon 16 Mar 2026 13:03:47 +0000
ROA not before: Mon 16 Mar 2026 13:03:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207054
IP address blocks: 45.10.12.0/22 maxlen: 22
45.15.92.0/22 maxlen: 22
66.81.144.0/21 maxlen: 21
145.11.24.0/21 maxlen: 21
185.167.112.0/22 maxlen: 22
185.231.192.0/22 maxlen: 22
194.58.24.0/22 maxlen: 22
2a0b:1a00::/29 maxlen: 29
2a0e:2680::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/isfq5knZVHsK0KsAerTopI3tTV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f6:be:d7:2c:68:cc:b1:62:7c:ff:40:7c:1f:f2:6b:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac7eae649d9547b0ad0ab007ab4e8a48ded4d5d
Validity
Not Before: Mar 16 13:03:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=644ab6571ca628aa977150c7ed45644fd448b5ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:29:13:51:54:37:dc:37:aa:04:40:25:cd:0e:
fb:2d:40:41:d8:78:69:e2:91:9b:c2:dd:9c:16:95:
24:d4:3b:91:6d:8f:d9:96:17:1e:ac:10:8d:7e:85:
be:c2:e7:76:a5:80:ea:8f:a2:de:ff:57:19:e7:39:
1e:b5:89:70:2c:a2:40:fe:ba:14:e0:09:64:4c:e4:
e7:56:c2:a1:0e:8e:c5:43:91:30:3e:07:7e:50:04:
c1:50:1c:e9:fb:bd:96:b2:69:c8:6e:b6:d1:5f:0e:
6d:dd:dd:bf:04:b1:92:97:fb:df:e4:5c:f5:45:12:
fa:04:43:40:42:4e:6b:6b:bd:fc:e1:73:d1:7d:fc:
71:87:1b:c6:d4:df:f5:0d:92:4c:58:8c:7d:9a:f0:
93:7d:ab:66:b9:41:22:4f:dc:9c:9e:48:23:9c:ae:
47:09:ad:0e:99:0a:68:d6:19:46:90:dc:7c:52:2a:
a9:35:78:21:a9:72:a5:a7:23:36:d3:47:6c:75:8e:
81:89:6a:bf:87:32:eb:2f:1e:ca:04:f9:17:12:de:
62:a0:cb:cf:df:93:5e:ca:eb:9c:28:c4:40:e7:b3:
57:b6:3f:fa:e5:b9:0d:f6:0c:22:84:c5:5b:f2:db:
75:3e:c7:15:91:e6:83:2c:66:bd:a4:7b:a4:ae:24:
59:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4A:B6:57:1C:A6:28:AA:97:71:50:C7:ED:45:64:4F:D4:48:B5:ED
X509v3 Authority Key Identifier:
keyid:8A:C7:EA:E6:49:D9:54:7B:0A:D0:AB:00:7A:B4:E8:A4:8D:ED:4D:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isfq5knZVHsK0KsAerTopI3tTV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/ZEq2VxymKKqXcVDH7UVkT9RIte0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.12.0/22
45.15.92.0/22
66.81.144.0/21
145.11.24.0/21
185.167.112.0/22
185.231.192.0/22
194.58.24.0/22
IPv6:
2a0b:1a00::/29
2a0e:2680::/29
Signature Algorithm: sha256WithRSAEncryption
93:ac:d9:cd:d7:fb:7d:8d:a5:58:9b:0f:db:bd:24:ff:a4:58:
32:68:b5:ca:23:76:70:56:18:8a:57:5a:20:9b:d6:83:c2:98:
af:2c:d4:43:d9:11:66:ed:a8:57:be:35:62:2c:4e:eb:aa:e8:
09:6a:28:bf:46:dd:6c:ee:a2:e8:6a:66:9d:04:da:9c:38:b1:
f6:0b:d0:b5:96:de:ad:29:21:8d:a4:ff:e0:a9:31:cf:2b:1c:
96:f4:2a:e8:c0:ca:b7:a3:d7:59:f4:07:46:a9:db:37:9a:14:
c1:79:48:26:62:c5:4f:06:7b:97:33:d4:98:7a:14:c8:6b:ea:
b4:3a:85:4f:85:cc:60:25:73:51:19:71:8c:3b:89:58:61:75:
46:c8:19:3a:26:7e:83:f7:ee:00:5d:d0:f6:91:c4:da:1e:26:
10:9e:07:4f:79:79:da:d8:f9:a5:f6:0b:65:aa:69:46:a4:ff:
7f:7a:e8:4f:d3:fe:3e:8d:4b:43:3c:b6:18:6a:d8:9b:4a:8b:
f4:2a:c7:e0:91:24:95:9f:cc:2d:21:61:8a:05:71:62:91:d7:
46:49:99:33:cc:47:4c:4a:2d:e6:dc:40:3f:7a:e0:6b:69:24:
20:82:06:4a:bc:a2:7c:83:3c:94:5e:64:e8:5b:5f:4f:c9:13:
9f:ef:d7:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:08:30 2026 by rpki-client