Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/zfed5Gh-YL_f-gpUM6GV82MHD8s.roa
File: zfed5Gh-YL_f-gpUM6GV82MHD8s.roa (raw, json)
Hash identifier: FZsay/Z83rJ+JGP9nxzdeGsLg8wEb2D/RMGBnuAZQuQ=
Subject key identifier: CD:F7:9D:E4:68:7E:60:BF:DF:FA:0A:54:33:A1:95:F3:63:07:0F:CB
Certificate issuer: /CN=213e1d50d52288bee80eea435577018712409bbe
Certificate serial: 01A0D9F4CD3FDA9E6999BCFFD1163D792E8E
Authority key identifier: 21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/zfed5Gh-YL_f-gpUM6GV82MHD8s.roa
Signing time: Fri 25 Sep 2026 19:04:54 +0000
ROA not before: Fri 25 Sep 2026 19:04:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211496
IP address blocks: 131.222.255.0/24 maxlen: 24
153.56.172.0/24 maxlen: 24
185.130.90.0/24 maxlen: 24
185.195.252.0/24 maxlen: 24
193.22.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:f4:cd:3f:da:9e:69:99:bc:ff:d1:16:3d:79:2e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=213e1d50d52288bee80eea435577018712409bbe
Validity
Not Before: Sep 25 19:04:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cdf79de4687e60bfdffa0a5433a195f363070fcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:52:a8:4d:fb:fe:82:06:af:1c:dd:3c:f5:1a:
32:92:3a:1a:d8:73:49:36:1f:22:87:39:cb:90:f8:
ea:45:03:a9:da:d3:d2:f3:44:e2:2a:e4:d3:e5:30:
a7:89:12:e5:50:ed:06:92:82:41:47:94:80:aa:c4:
6d:08:d0:f8:d0:f5:c9:60:98:62:06:98:f6:0f:48:
cb:5c:a7:b8:a9:66:9b:ee:a1:93:d2:f0:07:c2:6d:
1a:a5:8d:7e:65:d4:3b:33:2d:f9:5d:41:2e:68:89:
b1:86:43:05:c6:e8:ec:ba:c2:1b:d2:e7:b5:99:2d:
7d:2d:37:11:79:a2:04:af:da:1e:19:54:4a:24:88:
9a:f0:0b:e6:2a:7b:a0:0f:5b:0c:34:ea:6a:8c:09:
23:d5:5c:14:dc:e0:9d:69:f1:f1:bf:f9:6b:25:c0:
2f:ae:d5:cd:0c:59:f4:ba:3b:55:51:97:99:74:a9:
04:4c:b9:d0:8c:46:24:b0:9e:56:f2:a8:61:ab:d5:
3f:4f:7b:c9:d6:25:03:a7:75:1e:f0:ea:ac:44:9c:
8c:21:65:65:07:ee:99:77:1b:e3:89:79:58:d5:df:
24:98:b9:06:f8:60:5f:63:dd:3f:43:e9:85:f2:3e:
ec:5b:ab:67:4a:5c:dc:bd:44:ce:11:08:1d:91:9f:
63:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F7:9D:E4:68:7E:60:BF:DF:FA:0A:54:33:A1:95:F3:63:07:0F:CB
X509v3 Authority Key Identifier:
keyid:21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/zfed5Gh-YL_f-gpUM6GV82MHD8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.222.255.0/24
153.56.172.0/24
185.130.90.0/24
185.195.252.0/24
193.22.12.0/24
Signature Algorithm: sha256WithRSAEncryption
04:35:99:10:08:d1:06:87:66:5e:da:d2:27:e6:1f:83:4c:81:
0f:23:fa:65:d7:7e:b5:d1:0a:77:5d:61:f5:0f:12:4f:5d:20:
a1:a8:b7:ef:dc:82:40:9c:36:19:59:b3:4f:ca:33:4f:04:e6:
11:f6:a7:4d:1b:98:01:44:94:20:2b:82:af:99:18:25:66:ad:
73:ff:a6:bd:ec:d4:6c:57:21:34:92:98:96:49:a2:e7:7a:56:
8a:c1:2f:4a:12:e0:e0:ce:7f:4b:7d:44:a6:db:f0:b9:5c:14:
08:c7:a3:6e:c3:ad:be:ca:9f:c3:d5:c7:ca:de:32:68:2e:d3:
a4:db:ed:a2:20:2a:a9:bb:0d:de:c8:c5:3f:5b:a3:97:48:f1:
17:12:94:39:06:03:94:2a:db:c6:18:cf:e2:a7:19:e6:0a:3a:
d1:b5:52:61:9b:7a:58:4b:4a:45:78:50:b1:2f:ce:af:36:27:
94:6a:c9:f9:90:50:d6:d5:50:86:3e:22:7d:cc:97:da:c7:6c:
cf:75:f9:a8:ed:5d:cb:9e:e4:14:f3:a6:af:91:cd:ac:95:95:
06:05:a4:1d:53:6a:93:c4:7a:80:6b:0d:a1:d0:aa:b4:a3:c3:
91:78:71:18:57:37:54:29:c0:64:84:b7:e1:5a:46:40:6a:4f:
39:f3:46:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:56:35 2026 by rpki-client