Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/ZdMPTAmWWgYj6j23ideRR3RZSeA.roa
File: ZdMPTAmWWgYj6j23ideRR3RZSeA.roa (raw, json)
Hash identifier: 6NFJzD7ZZ4WzdZg5IkHxqHXOXuVDaFEXTPnDIphqQ5Q=
Subject key identifier: 65:D3:0F:4C:09:96:5A:06:23:EA:3D:B7:89:D7:91:47:74:59:49:E0
Certificate issuer: /CN=f30e445195b64d799b822e99947792e0cab32b6d
Certificate serial: 01A16C33F0F5A9496B9709F8A19F18D8DB7A
Authority key identifier: F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/ZdMPTAmWWgYj6j23ideRR3RZSeA.roa
Signing time: Sat 24 Oct 2026 04:38:25 +0000
ROA not before: Sat 24 Oct 2026 04:38:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401322
IP address blocks: 189.13.1.0/24 maxlen: 24
189.13.2.0/24 maxlen: 24
189.13.3.0/24 maxlen: 24
189.13.4.0/24 maxlen: 24
189.13.50.0/24 maxlen: 24
189.13.163.0/24 maxlen: 24
189.13.246.0/24 maxlen: 24
189.13.247.0/24 maxlen: 24
189.13.248.0/24 maxlen: 24
189.13.249.0/24 maxlen: 24
189.13.250.0/24 maxlen: 24
189.13.251.0/24 maxlen: 24
189.13.252.0/24 maxlen: 24
189.13.253.0/24 maxlen: 24
189.13.254.0/24 maxlen: 24
189.13.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.mft
rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 15:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6c:33:f0:f5:a9:49:6b:97:09:f8:a1:9f:18:d8:db:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f30e445195b64d799b822e99947792e0cab32b6d
Validity
Not Before: Oct 24 04:38:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=65d30f4c09965a0623ea3db789d79147745949e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:07:de:d5:9a:a9:56:b8:9f:d3:fc:ca:ca:11:
d8:36:2c:fd:50:e8:0b:8d:6d:fc:85:a4:60:93:10:
2a:01:bc:4a:d2:1f:b4:9a:60:fb:09:fe:1f:27:0b:
b5:ac:56:5a:6f:44:f3:de:e6:d0:bc:da:e9:a1:0b:
62:d7:0a:85:12:87:be:66:0d:c4:57:8b:61:73:13:
df:ab:62:c9:92:5d:7d:32:5e:3d:f0:0a:d2:62:78:
50:a5:50:5c:e9:08:85:6c:07:f7:04:9f:f3:4b:b0:
82:4e:9d:a4:48:84:66:f8:a4:a7:14:91:d2:c3:e6:
fe:d0:10:74:b0:8e:a7:9b:72:c7:59:52:1c:80:72:
55:9f:0b:31:4c:66:5c:40:10:4d:d0:ce:ed:17:25:
6c:f9:a9:5a:bc:52:f9:42:70:84:ed:19:ea:70:ca:
12:5b:92:ab:92:ec:26:1e:2d:fc:af:2a:94:ab:aa:
bf:a9:42:b4:f4:95:15:47:a0:a2:e1:8d:28:9d:c0:
1d:a7:a5:17:8b:71:1e:80:f8:69:ea:ec:63:cb:fe:
1c:10:f3:9b:3f:37:56:72:a8:da:b2:74:64:1d:58:
bd:6a:7f:e9:8c:24:55:3e:d6:94:92:d5:85:11:82:
62:b4:97:f8:26:b3:2e:4f:a1:37:4f:a9:03:5b:97:
14:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D3:0F:4C:09:96:5A:06:23:EA:3D:B7:89:D7:91:47:74:59:49:E0
X509v3 Authority Key Identifier:
keyid:F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/ZdMPTAmWWgYj6j23ideRR3RZSeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.13.1.0-189.13.4.255
189.13.50.0/24
189.13.163.0/24
189.13.246.0-189.13.255.255
Signature Algorithm: sha256WithRSAEncryption
7e:ef:f8:57:10:b2:82:a1:03:20:a6:a4:c5:5c:24:40:7d:20:
3b:29:cc:79:60:b1:70:40:34:d5:5b:11:82:98:b2:c9:78:9b:
37:1b:58:43:5d:85:ce:ee:19:22:2d:2f:50:7d:a8:e4:5e:98:
9b:7a:eb:98:f5:9f:1f:84:d4:61:51:83:63:79:b7:13:23:3f:
08:20:6a:5e:bf:5c:7f:43:ea:b9:2e:10:13:42:90:48:b9:a9:
3b:a1:33:32:a7:ff:0c:56:25:1d:56:4f:22:e5:b9:fe:76:d7:
b4:82:a2:8d:01:8e:3c:3c:74:9a:e2:4a:c9:5e:83:1a:73:b2:
d2:ae:8d:a1:05:08:7a:50:a8:a5:45:32:a7:ba:f5:9d:73:ff:
3d:e7:e3:8e:00:6d:f0:6c:86:df:90:27:d3:58:1d:a9:b8:0e:
11:25:b2:d1:96:15:f2:a4:aa:22:af:de:ff:75:b5:6d:14:34:
53:e8:b6:92:65:5a:55:29:a3:bc:62:64:77:94:be:70:f2:60:
33:09:9f:a1:36:bf:06:f4:02:bf:71:2f:ad:f2:bb:1d:e8:d3:
20:de:3e:11:9f:42:ba:8b:7c:9d:a7:15:3b:69:bf:e6:41:c7:
fd:46:86:2e:d4:4d:1d:00:8b:55:2e:68:a5:6a:78:8f:9c:37:
87:71:6b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:17:20 2026 by rpki-client