Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/ZJ-T6ueMae72SObhWhaz9nVHF40.roa
File: ZJ-T6ueMae72SObhWhaz9nVHF40.roa (raw, json)
Hash identifier: Ow4/9pV+gX/QMnh7E9AZiapSKVWWKGuqpiJHgE1l0SU=
Subject key identifier: 64:9F:93:EA:E7:8C:69:EE:F6:48:E6:E1:5A:16:B3:F6:75:47:17:8D
Certificate issuer: /CN=be604ff35a29c91156be4bd229b3baf77c8397bd
Certificate serial: 019E024A2F59532CDA61D6655E06611D9A76
Authority key identifier: BE:60:4F:F3:5A:29:C9:11:56:BE:4B:D2:29:B3:BA:F7:7C:83:97:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmBP81opyRFWvkvSKbO693yDl70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/ZJ-T6ueMae72SObhWhaz9nVHF40.roa
Signing time: Thu 07 May 2026 11:54:36 +0000
ROA not before: Thu 07 May 2026 11:54:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208795
IP address blocks: 5.35.104.0/21 maxlen: 32
94.131.80.0/20 maxlen: 32
94.131.176.0/20 maxlen: 32
94.131.190.0/24 maxlen: 32
94.131.191.0/24 maxlen: 32
194.116.140.0/24 maxlen: 32
2a07:aa40::/29 maxlen: 48
2a07:aa40:100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.mft
rsync://rpki.ripe.net/repository/DEFAULT/vmBP81opyRFWvkvSKbO693yDl70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:02:4a:2f:59:53:2c:da:61:d6:65:5e:06:61:1d:9a:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be604ff35a29c91156be4bd229b3baf77c8397bd
Validity
Not Before: May 7 11:54:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=649f93eae78c69eef648e6e15a16b3f67547178d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a5:f5:89:72:68:04:25:fe:bf:0f:52:aa:8f:
40:24:15:c8:2e:58:ba:ad:31:ea:62:0f:39:6e:e3:
a0:bb:4b:4c:aa:32:ae:e3:b2:c7:4b:8c:7b:26:3e:
6f:13:a6:9d:e9:5b:e7:18:80:c9:c4:63:cb:bb:51:
e6:4b:4c:a4:bf:5e:ae:3f:b5:70:5f:34:3b:7f:d2:
14:00:fc:21:34:c1:c3:be:e1:c5:21:42:b9:e3:80:
01:ee:34:45:95:a7:b3:c5:10:29:44:e6:cd:5b:34:
d0:17:cd:a8:f9:89:3a:ea:ec:c7:ea:cb:4a:98:a3:
86:b9:44:ca:cd:49:d9:b6:4a:cc:7c:c8:46:cd:27:
79:29:d9:f8:c0:d8:91:6c:2b:9d:26:06:81:8c:32:
5d:73:9c:57:e1:5b:bd:09:ac:6f:63:ab:40:d4:93:
51:8b:48:e0:77:39:fd:00:b8:c1:f2:bd:bc:ed:86:
bd:72:66:02:7d:4b:74:bb:93:43:b0:9b:fc:6b:a6:
a9:fc:ff:10:f9:3b:67:a9:d3:b4:29:8c:50:a8:8e:
44:02:9a:00:5f:30:37:3d:f9:18:5d:58:7f:ab:9b:
3e:6e:27:c4:f8:e6:f9:93:d3:7c:ee:ba:d7:6c:93:
81:2f:46:ad:fa:ab:98:ed:1c:5a:65:12:53:50:40:
25:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:9F:93:EA:E7:8C:69:EE:F6:48:E6:E1:5A:16:B3:F6:75:47:17:8D
X509v3 Authority Key Identifier:
keyid:BE:60:4F:F3:5A:29:C9:11:56:BE:4B:D2:29:B3:BA:F7:7C:83:97:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmBP81opyRFWvkvSKbO693yDl70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/ZJ-T6ueMae72SObhWhaz9nVHF40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.104.0/21
94.131.80.0/20
94.131.176.0/20
194.116.140.0/24
IPv6:
2a07:aa40::/29
Signature Algorithm: sha256WithRSAEncryption
32:53:87:4e:25:18:79:80:6e:48:be:02:23:2f:64:71:7b:63:
2f:c9:bc:ad:e7:b4:a1:d2:3c:f1:2d:8e:11:b0:26:5e:90:ea:
ea:a8:35:0f:dd:fb:04:9d:d9:fe:2c:67:70:27:17:88:25:7c:
41:8f:ba:11:1d:b9:7f:85:eb:9b:f1:27:56:22:aa:2e:23:8a:
46:c8:90:fe:ba:56:b6:30:2c:fd:b4:7e:16:cd:23:db:0e:bd:
c4:d9:39:b6:db:1b:5e:f6:70:66:6b:14:ab:dc:c1:ba:87:11:
e6:d0:a2:87:8c:70:c0:a5:1d:a8:98:fb:b7:64:96:7b:c5:62:
96:38:5d:3c:e1:1c:23:84:06:62:08:9b:6d:ae:24:fb:94:8d:
63:6b:8a:9a:84:ca:28:a7:ab:07:60:5a:74:cb:6a:7b:cc:0c:
85:3b:63:30:d9:4a:35:61:13:dd:a0:af:f6:11:a8:47:54:97:
57:28:88:b1:09:39:6a:2c:cc:d1:12:15:2f:f0:75:89:87:24:
1d:be:44:5f:c9:16:0f:58:7d:88:d4:77:11:d7:fc:0b:73:98:
ec:2e:0e:88:cd:22:05:86:45:89:bb:f4:d1:c6:cb:69:aa:59:
14:f7:b6:97:14:ce:f7:9f:a3:04:07:ec:53:23:6c:eb:49:8f:
25:e3:5f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:18:51 2026 by rpki-client