Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/ZBZd2Q5bGwHK_Dg2oikZZiqgRuE.roa
File: ZBZd2Q5bGwHK_Dg2oikZZiqgRuE.roa (raw, json)
Hash identifier: c/sKdqGiU7G8qhtiizb8CdzGOvbzH+34+IqK7jLdymI=
Subject key identifier: 64:16:5D:D9:0E:5B:1B:01:CA:FC:38:36:A2:29:19:66:2A:A0:46:E1
Certificate issuer: /CN=8db34774b01979284fd9e754fea68fa3c61783d0
Certificate serial: 019F8DBBA7B82993819EA81EFB274F3172D9
Authority key identifier: 8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/ZBZd2Q5bGwHK_Dg2oikZZiqgRuE.roa
Signing time: Thu 23 Jul 2026 06:48:33 +0000
ROA not before: Thu 23 Jul 2026 06:48:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202505
IP address blocks: 84.54.14.0/24 maxlen: 24
86.104.14.0/24 maxlen: 24
89.43.78.0/24 maxlen: 24
176.98.42.0/24 maxlen: 24
176.98.43.0/24 maxlen: 24
185.81.152.0/24 maxlen: 24
185.81.153.0/24 maxlen: 24
185.81.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8d:bb:a7:b8:29:93:81:9e:a8:1e:fb:27:4f:31:72:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db34774b01979284fd9e754fea68fa3c61783d0
Validity
Not Before: Jul 23 06:48:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=64165dd90e5b1b01cafc3836a22919662aa046e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f3:bf:ca:3e:04:a3:55:98:ce:3f:33:40:7b:
a2:c6:fc:ee:b7:ca:6a:89:5d:db:37:d8:25:32:32:
3c:be:a9:cf:34:56:c6:a6:44:72:59:61:5e:0d:1e:
9a:e1:39:d2:f0:51:d1:20:ef:a9:36:e2:d2:85:19:
5f:29:ca:4b:29:35:3e:d5:4e:c0:f4:8a:2d:ba:3f:
88:68:f6:f4:57:a0:37:96:8a:12:01:d9:47:bb:d2:
7b:43:83:a2:81:d7:74:15:31:17:a3:8a:72:d2:87:
56:c9:30:ba:c3:d2:74:9f:3c:15:bb:25:8c:48:49:
6c:df:91:88:d2:7d:fc:af:91:0b:ce:64:d9:02:d7:
e0:c6:22:a3:10:86:50:85:a6:10:6a:b9:4c:df:fa:
6b:4a:d2:4d:56:a5:55:71:68:09:07:40:61:d1:11:
38:51:98:7d:58:0b:dc:59:d9:6b:47:90:15:fb:b2:
7c:62:7d:18:b5:a1:ca:ea:c5:5a:7b:f5:2f:32:13:
46:a8:3d:76:b8:76:23:13:f5:30:6a:2f:c3:8d:2d:
c4:e3:0d:c8:bd:f5:58:14:b0:b4:a9:8c:8d:3e:0f:
b8:43:84:77:b9:46:59:f3:87:40:3d:f5:9f:ec:cc:
43:ab:bc:ba:63:ab:e3:76:cc:c4:4e:b8:1a:92:ed:
7c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:16:5D:D9:0E:5B:1B:01:CA:FC:38:36:A2:29:19:66:2A:A0:46:E1
X509v3 Authority Key Identifier:
keyid:8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/ZBZd2Q5bGwHK_Dg2oikZZiqgRuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.14.0/24
86.104.14.0/24
89.43.78.0/24
176.98.42.0/23
185.81.152.0/23
185.81.155.0/24
Signature Algorithm: sha256WithRSAEncryption
84:04:a7:1e:73:69:db:91:a0:c6:e2:8c:a7:f5:f5:e2:50:9f:
49:63:97:05:11:76:8b:91:9c:4a:4e:53:f1:77:23:4f:51:a8:
79:da:7e:70:b5:6f:2c:e1:d3:57:75:8b:20:b6:05:51:c7:7e:
20:5f:c9:d7:02:b5:a9:6d:b6:41:e1:8f:45:3a:04:43:4e:85:
00:fd:87:32:47:f9:f8:23:16:8b:f6:90:cc:9f:9a:c6:6d:4b:
97:a5:2b:e4:77:8e:fa:ea:01:33:df:f8:a6:dc:ec:41:f0:7f:
5f:a5:17:01:17:b7:51:6a:01:4e:2d:20:4a:ae:67:35:84:ef:
7a:9c:46:34:dc:1b:5c:a9:4c:2c:c9:57:eb:6b:6f:a2:e9:80:
2b:e0:02:9e:36:0d:7a:cb:48:44:4a:ef:dc:67:54:c8:e3:7a:
e9:a1:eb:9e:01:e9:8d:43:80:50:ff:61:b6:dc:6c:fe:a8:cd:
d1:34:58:47:c8:ce:bd:2f:09:94:9a:a6:46:bb:f7:4c:5e:55:
24:52:87:cb:71:87:8d:07:28:d2:10:c7:39:d8:83:e4:d9:8a:
25:54:20:fa:52:92:8c:11:8d:c3:de:7b:5d:a8:3a:9e:cc:78:
a9:03:2a:54:6d:5c:02:99:4c:c3:6f:9b:d0:15:91:8c:b0:03:
88:4b:a0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:22:02 2026 by rpki-client