Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/zX39p8hPMLMogAvQxpt7zlkHVdA.roa
File: zX39p8hPMLMogAvQxpt7zlkHVdA.roa (raw, json)
Hash identifier: bJcnLltJJ72buWp7XshBBRT58VrzJdJnDzL7OsGRoZc=
Subject key identifier: CD:7D:FD:A7:C8:4F:30:B3:28:80:0B:D0:C6:9B:7B:CE:59:07:55:D0
Certificate issuer: /CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Certificate serial: 019EC9FDC686C3804AD5A44D22EFEA7D590B
Authority key identifier: D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/zX39p8hPMLMogAvQxpt7zlkHVdA.roa
Signing time: Mon 15 Jun 2026 06:35:12 +0000
ROA not before: Mon 15 Jun 2026 06:35:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49645
IP address blocks: 5.183.168.0/24 maxlen: 24
5.183.171.0/24 maxlen: 24
91.213.76.0/24 maxlen: 24
185.234.128.0/22 maxlen: 22
185.234.128.0/24 maxlen: 24
185.234.129.0/24 maxlen: 24
185.234.130.0/24 maxlen: 24
194.36.141.0/24 maxlen: 24
2a0d:c9c0:1::/48 maxlen: 48
2a0d:c9c0:2::/48 maxlen: 48
2a0d:c9c0:3::/48 maxlen: 48
2a0d:c9c0:4::/48 maxlen: 48
2a0d:c9c0:5::/48 maxlen: 48
2a0d:c9c0:6::/48 maxlen: 48
2a0d:c9c0:7::/48 maxlen: 48
2a0d:c9c0:8::/48 maxlen: 48
2a0d:c9c0:9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c9:fd:c6:86:c3:80:4a:d5:a4:4d:22:ef:ea:7d:59:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Validity
Not Before: Jun 15 06:35:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cd7dfda7c84f30b328800bd0c69b7bce590755d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4c:57:90:16:ba:08:7c:81:b7:17:00:8b:89:
2d:c2:ac:db:0e:05:a0:20:f5:40:98:78:5a:b3:47:
be:78:d6:44:1f:c4:f1:79:68:2f:bb:e3:9d:01:a6:
ab:f7:35:bf:e8:5d:06:d3:d9:0c:2e:f0:91:eb:9c:
e1:a2:67:4f:d2:5d:6e:ad:38:d2:c7:13:c7:c4:b9:
5b:51:17:63:2e:05:f2:00:ab:81:b1:10:3d:01:be:
b0:dd:12:44:07:af:cb:c7:bd:f9:0c:37:eb:80:7d:
3a:cc:1c:58:9a:71:75:dc:2c:b7:cf:19:6d:5d:13:
c4:b7:52:04:3a:a9:a8:67:50:57:49:fa:45:fa:80:
a3:b4:72:e1:c7:45:fd:e0:7e:a7:4c:a6:e4:4d:66:
e9:2f:79:7c:6a:56:de:5f:4d:85:a3:df:3b:07:15:
f8:6e:d2:ba:3e:1a:1b:35:72:d6:3c:ab:1d:51:03:
c2:a7:6a:eb:3c:6a:63:89:84:6a:d2:d2:d6:42:9f:
b2:0c:8e:46:40:b5:28:da:fd:9e:3c:9d:ef:5d:26:
f4:8e:49:f9:4e:8c:91:f6:db:76:40:af:01:89:0f:
5f:9c:d9:b0:69:5c:56:76:0b:6a:53:c5:b2:0c:b9:
9e:50:4b:32:da:93:40:03:2e:ec:ac:c8:e4:f7:1e:
52:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:7D:FD:A7:C8:4F:30:B3:28:80:0B:D0:C6:9B:7B:CE:59:07:55:D0
X509v3 Authority Key Identifier:
keyid:D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/zX39p8hPMLMogAvQxpt7zlkHVdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.168.0/24
5.183.171.0/24
91.213.76.0/24
185.234.128.0/22
194.36.141.0/24
IPv6:
2a0d:c9c0:1::-2a0d:c9c0:9:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
4b:31:ea:9a:d5:97:ef:f7:eb:74:46:a1:73:b5:2b:00:ea:7e:
11:69:8d:f0:f7:f6:3a:ac:d2:d2:91:5c:1e:1b:69:cb:19:11:
bb:c1:d7:99:f9:c6:7a:55:85:aa:83:dc:74:0d:38:37:8b:6b:
fa:d4:d2:d9:ea:13:2b:87:85:26:07:e0:ee:41:44:fd:15:8e:
2d:48:29:dd:7c:07:b3:20:bc:f7:ad:a7:fe:57:ed:37:c6:b3:
83:aa:5f:99:5b:80:5a:d3:cd:e5:d2:26:17:54:1f:24:45:58:
65:97:f1:15:36:e0:d4:6f:b9:b5:a5:2c:07:4e:77:33:22:a4:
dd:0d:74:b4:e6:d9:aa:14:80:33:a9:2d:8a:a6:81:82:fa:76:
e4:91:a3:1d:05:c9:48:bd:eb:a4:98:d1:ea:cb:e8:0e:d6:69:
f5:dd:7c:de:26:d5:4d:ef:d6:d4:77:52:d8:aa:87:05:97:a9:
6a:9e:e9:6c:63:ed:db:4a:a7:53:51:17:d5:60:f9:b6:6b:cc:
91:b1:85:81:93:f4:e3:38:1f:c2:90:47:96:81:7f:a4:65:05:
56:28:2f:e7:f5:3a:28:f2:27:d1:87:66:fc:4a:08:7e:81:f2:
80:e8:ff:59:26:3e:18:e3:00:70:ef:41:60:41:c9:21:b4:94:
b2:00:6a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:28:58 2026 by rpki-client