Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/ZxGKCU0aBcNloOJUmXEXApWKc5Y.roa
File: ZxGKCU0aBcNloOJUmXEXApWKc5Y.roa (raw, json)
Hash identifier: W3o/4eXpKu/ClooSAqbcY6BqOP8d1RnKPFpH8Lb5S8o=
Subject key identifier: 67:11:8A:09:4D:1A:05:C3:65:A0:E2:54:99:71:17:02:95:8A:73:96
Certificate issuer: /CN=e6688ae96323c1fcfab54b294557397b49b03bc7
Certificate serial: 019DFDAD3F5497BBF3C5D742E887D1FDE4AE
Authority key identifier: E6:68:8A:E9:63:23:C1:FC:FA:B5:4B:29:45:57:39:7B:49:B0:3B:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5miK6WMjwfz6tUspRVc5e0mwO8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/ZxGKCU0aBcNloOJUmXEXApWKc5Y.roa
Signing time: Wed 06 May 2026 14:24:42 +0000
ROA not before: Wed 06 May 2026 14:24:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39405
IP address blocks: 185.146.41.0/24 maxlen: 24
185.146.42.0/24 maxlen: 24
185.146.43.0/24 maxlen: 24
2a07:4d40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/5miK6WMjwfz6tUspRVc5e0mwO8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fd:ad:3f:54:97:bb:f3:c5:d7:42:e8:87:d1:fd:e4:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6688ae96323c1fcfab54b294557397b49b03bc7
Validity
Not Before: May 6 14:24:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=67118a094d1a05c365a0e25499711702958a7396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5b:a9:d8:c2:32:ff:4c:50:05:6a:13:19:20:
47:9a:d1:85:27:a3:00:f9:69:d2:ec:78:74:a8:45:
19:6b:dc:5d:1b:5a:e2:75:ff:6b:51:fe:e5:85:77:
b4:07:82:aa:63:2c:fb:8a:e5:46:56:cb:7e:2c:76:
98:b3:c1:49:8c:7d:88:8e:62:aa:eb:06:cb:0a:87:
37:1d:30:c1:05:14:1e:df:8c:14:d3:98:e6:05:08:
b3:75:61:61:bc:56:17:5c:71:4b:78:37:3f:1b:ac:
33:04:b0:54:19:42:ff:61:d8:6c:38:5e:e1:b0:6e:
30:87:e4:33:07:24:7f:a9:32:e8:89:32:9f:fc:67:
ad:70:df:e9:63:a1:43:2a:93:b1:21:9f:09:e8:29:
76:73:f4:fc:a8:0b:83:fe:7f:c9:c9:68:51:10:d7:
a1:a9:e4:9d:ee:36:02:8e:2e:97:1f:16:e0:54:25:
92:7a:4c:ab:83:34:e9:ba:60:dc:d6:85:85:7e:c6:
e6:d2:87:2b:b8:b7:e7:43:b6:bc:cd:ec:1a:31:e1:
1d:74:e9:4b:92:23:63:77:c2:3d:22:1f:54:d0:cd:
cd:a7:ff:90:63:68:20:c3:5e:08:a8:0b:cd:13:6f:
92:07:b7:94:05:84:75:7f:2a:33:2c:6a:be:fd:fc:
c9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:11:8A:09:4D:1A:05:C3:65:A0:E2:54:99:71:17:02:95:8A:73:96
X509v3 Authority Key Identifier:
keyid:E6:68:8A:E9:63:23:C1:FC:FA:B5:4B:29:45:57:39:7B:49:B0:3B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5miK6WMjwfz6tUspRVc5e0mwO8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/ZxGKCU0aBcNloOJUmXEXApWKc5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.146.41.0-185.146.43.255
IPv6:
2a07:4d40::/29
Signature Algorithm: sha256WithRSAEncryption
40:7c:b4:d8:50:c1:dc:1f:b6:a7:6c:96:87:a9:89:94:df:f9:
93:fd:7b:6b:27:0d:11:50:1e:b9:69:25:72:f1:a4:09:d9:c8:
4d:2d:26:5c:1b:3d:5e:b8:c2:5b:75:42:4d:78:9b:a2:52:2f:
8c:08:95:74:79:15:0b:b0:b6:2d:01:57:e4:ae:1b:39:52:8a:
76:2c:34:89:de:7c:cb:1c:f4:05:39:92:64:41:50:06:da:21:
b4:b6:a2:20:85:76:1a:6c:f1:ab:8a:19:31:76:23:d6:e0:4b:
88:56:e8:08:8a:f3:e2:66:99:a8:fe:9e:43:b7:20:e5:cf:b1:
71:f9:64:b7:ba:59:47:7c:c3:db:da:3f:f4:8b:40:67:02:1d:
d4:07:ad:8f:22:7a:b3:cb:31:16:a2:49:3c:eb:04:da:89:b3:
b7:a0:20:02:af:9f:43:f9:02:11:ec:d8:e2:c0:25:0b:48:c4:
86:da:d7:57:f0:8c:9c:66:76:03:a8:6b:57:5a:5b:51:01:88:
03:51:3e:b0:49:6a:c7:b7:9d:c9:62:e7:03:db:af:01:e3:69:
c2:a2:12:a4:2a:58:49:a1:31:ee:33:90:75:d8:d6:37:fb:fb:
37:25:5f:67:5b:42:86:bf:28:83:b6:99:41:4e:4e:cd:a2:99:
0a:a7:88:72
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZ39rT9Ul7vzxddC6IfR/eSuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2Njg4YWU5NjMyM2MxZmNmYWI1NGIyOTQ1NTczOTdiNDli
MDNiYzcwHhcNMjYwNTA2MTQyNDQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzExOGEwOTRkMWEwNWMzNjVhMGUyNTQ5OTcxMTcwMjk1OGE3Mzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1up2MIy/0xQBWoTGSBHmtGFJ6MA
+WnS7Hh0qEUZa9xdG1ridf9rUf7lhXe0B4KqYyz7iuVGVst+LHaYs8FJjH2IjmKq
6wbLCoc3HTDBBRQe34wU05jmBQizdWFhvFYXXHFLeDc/G6wzBLBUGUL/YdhsOF7h
sG4wh+QzByR/qTLoiTKf/GetcN/pY6FDKpOxIZ8J6Cl2c/T8qAuD/n/JyWhRENeh
qeSd7jYCji6XHxbgVCWSekyrgzTpumDc1oWFfsbm0ocruLfnQ7a8zewaMeEddOlL
kiNjd8I9Ih9U0M3Np/+QY2ggw14IqAvNE2+SB7eUBYR1fyozLGq+/fzJVQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFGcRiglNGgXDZaDiVJlxFwKVinOWMB8GA1UdIwQY
MBaAFOZoiuljI8H8+rVLKUVXOXtJsDvHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNW1pSzZXTWp3Zno2dFVzcFJWYzVlMG13TzhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9jZTVjYTYtZjkzOS00ZmQ3LWI5Zjgt
MGExZWYwZWMwNTc4LzEvWnhHS0NVMGFCY05sb09KVW1YRVhBcFdLYzVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9jZTVjYTYtZjkzOS00ZmQ3LWI5ZjgtMGExZWYwZWMwNTc4
LzEvNW1pSzZXTWp3Zno2dFVzcFJWYzVlMG13TzhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBAC5kikD
BAK5kigwDQQCAAIwBwMFAyoHTUAwDQYJKoZIhvcNAQELBQADggEBAEB8tNhQwdwf
tqdsloepiZTf+ZP9e2snDRFQHrlpJXLxpAnZyE0tJlwbPV64wlt1Qk14m6JSL4wI
lXR5FQuwti0BV+SuGzlSinYsNInefMsc9AU5kmRBUAbaIbS2oiCFdhps8auKGTF2
I9bgS4hW6AiK8+Jmmaj+nkO3IOXPsXH5ZLe6WUd8w9vaP/SLQGcCHdQHrY8ierPL
MRaiSTzrBNqJs7egIAKvn0P5AhHs2OLAJQtIxIba11fwjJxmdgOoa1daW1EBiANR
PrBJase3ncli5wPbrwHjacKiEqQqWEmhMe4zkHXY1jf7+zclX2dbQoa/KIO2mUFO
Ts2imQqniHI=
-----END CERTIFICATE-----
Generated at Wed May 13 03:59:18 2026 by rpki-client