Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/ZIpDsTNxqpqX7S1mOtKItvFazbM.roa
File: ZIpDsTNxqpqX7S1mOtKItvFazbM.roa (raw, json)
Hash identifier: WE4VXLyV+l9saZ+TaVfDYdL1TACLSkamBecAFteNvFw=
Subject key identifier: 64:8A:43:B1:33:71:AA:9A:97:ED:2D:66:3A:D2:88:B6:F1:5A:CD:B3
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019D1B019726687E4E2373E8B9EF27342AB8
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/ZIpDsTNxqpqX7S1mOtKItvFazbM.roa
Signing time: Mon 23 Mar 2026 14:03:02 +0000
ROA not before: Mon 23 Mar 2026 14:03:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216155
IP address blocks: 185.254.18.0/24 maxlen: 24
195.95.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1b:01:97:26:68:7e:4e:23:73:e8:b9:ef:27:34:2a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Mar 23 14:03:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=648a43b13371aa9a97ed2d663ad288b6f15acdb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d6:f5:8a:a6:8c:14:a1:d2:d8:ea:57:c9:fd:
67:4d:6f:ac:b4:e7:da:64:20:23:63:51:f4:32:23:
4c:0e:8c:aa:bb:1e:f5:46:27:aa:79:8d:e8:b7:00:
b2:66:da:b8:0e:d6:67:b9:e0:3c:41:86:89:15:dd:
1f:a2:06:7b:4c:7b:0c:7c:05:5c:e8:30:9f:5f:e9:
55:8b:85:77:9b:99:ef:d1:49:31:ff:c4:ef:66:34:
04:da:9b:e5:63:ce:76:cc:7e:65:a1:b9:ff:28:0a:
f8:36:cf:26:ac:ef:12:3b:e0:f7:05:7d:68:6f:84:
af:32:e2:f0:d4:94:c1:a9:4f:3a:c8:3c:80:c1:55:
5a:1d:7e:1a:13:54:1c:67:36:34:cc:0e:33:9f:67:
5e:86:f2:f0:6b:e0:45:32:4e:b9:4f:92:28:ad:fa:
59:20:47:fb:65:5a:a6:af:de:f8:ef:98:c0:54:91:
6c:08:f5:6a:26:e5:37:50:77:a6:3e:b5:e7:8f:b0:
46:b3:9d:4b:9a:6d:5a:3b:52:89:46:20:a6:bb:a7:
ef:1d:c3:4e:49:e4:5d:23:ea:75:44:b5:21:a6:50:
ab:63:42:c5:06:66:04:11:5a:9d:b5:01:4f:2f:3f:
ee:fe:c6:ff:8d:7f:ca:90:7e:41:40:7d:00:00:69:
d6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:8A:43:B1:33:71:AA:9A:97:ED:2D:66:3A:D2:88:B6:F1:5A:CD:B3
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/ZIpDsTNxqpqX7S1mOtKItvFazbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.18.0/24
195.95.144.0/24
Signature Algorithm: sha256WithRSAEncryption
05:3a:5d:f1:2a:0a:0d:cc:78:9d:e2:e9:c4:74:97:35:2f:f6:
71:85:4d:a8:c7:55:bb:fd:29:8a:f5:4d:66:5b:49:4f:d0:72:
50:50:37:85:c3:73:c7:e9:43:01:12:3a:95:20:ad:76:65:0f:
cd:97:3c:fb:01:4f:b1:6f:6b:dd:32:e5:0a:4d:38:25:64:81:
47:8d:2d:28:46:52:b2:30:76:ee:58:8a:fd:e8:f5:22:4a:eb:
82:6f:b1:ea:06:cb:82:3f:52:02:d4:f3:1e:11:d7:ea:c9:db:
a2:7a:41:a3:a3:b7:37:42:de:b7:d4:bf:dc:10:9d:de:20:f3:
be:17:cb:94:83:f6:35:86:f3:b1:b1:8f:ce:4f:f0:91:2e:a6:
f4:f4:03:d7:1a:71:8f:3d:73:e3:db:cd:42:34:e2:8c:ec:a9:
eb:f3:89:2a:d5:72:56:e7:cd:06:2b:06:54:05:f0:c9:d9:08:
1e:17:4f:cd:ec:3e:fe:88:67:60:4a:33:d6:d8:b9:19:96:a9:
5f:19:82:58:fb:92:27:78:85:2a:80:63:ca:27:98:14:48:12:
82:c5:f2:2d:91:77:c9:20:bd:0c:15:40:85:4e:05:90:cc:a7:
fb:3b:76:a1:57:9a:7d:ab:10:fc:ea:71:59:b3:42:0c:0e:9c:
ef:4e:b1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:18:10 2026 by rpki-client