Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/ZNNOhO6sKgp8mU5jI-h3OIbbNuQ.roa
File: ZNNOhO6sKgp8mU5jI-h3OIbbNuQ.roa (raw, json)
Hash identifier: aW115QXbmvgupDdb+ueWeyh5KbF4cNDERihCi+8fJag=
Subject key identifier: 64:D3:4E:84:EE:AC:2A:0A:7C:99:4E:63:23:E8:77:38:86:DB:36:E4
Certificate issuer: /CN=f3751cf8c3a2d36c9744c96519899945ac607820
Certificate serial: 019F7FA42FED0F1EE77C7871FCA778AAD293
Authority key identifier: F3:75:1C:F8:C3:A2:D3:6C:97:44:C9:65:19:89:99:45:AC:60:78:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/83Uc-MOi02yXRMllGYmZRaxgeCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/ZNNOhO6sKgp8mU5jI-h3OIbbNuQ.roa
Signing time: Mon 20 Jul 2026 13:08:14 +0000
ROA not before: Mon 20 Jul 2026 13:08:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203140
IP address blocks: 45.90.2.0/23 maxlen: 23
2a0c:6bc4::/32 maxlen: 32
2a0c:6bc5::/32 maxlen: 32
2a0c:6bc6::/32 maxlen: 32
2a0c:6bc7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/83Uc-MOi02yXRMllGYmZRaxgeCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7f:a4:2f:ed:0f:1e:e7:7c:78:71:fc:a7:78:aa:d2:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3751cf8c3a2d36c9744c96519899945ac607820
Validity
Not Before: Jul 20 13:08:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=64d34e84eeac2a0a7c994e6323e8773886db36e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:66:6e:d4:9a:3e:8f:2c:9c:e1:78:34:4b:1e:
3a:40:af:68:d5:06:9d:be:65:bc:6f:36:14:7c:2a:
64:f6:2d:de:2f:54:4b:7a:79:77:79:c9:82:30:4b:
45:4c:82:a3:7b:d6:1c:84:2a:93:27:17:9b:6b:24:
c2:96:0a:4f:67:1d:f4:50:7e:0c:03:19:2e:7d:e0:
37:d9:64:16:13:f4:52:e5:d4:b0:f6:e6:5c:5f:de:
85:37:47:2c:20:87:f9:39:97:9e:11:ab:3a:ee:c7:
7d:33:fe:15:0e:2d:68:7e:75:77:72:d8:87:2e:40:
48:bb:2b:0d:1a:2b:a1:6b:73:9b:93:97:a5:c8:1a:
49:fd:14:07:0f:3a:ed:a2:fe:4e:bd:ad:6e:93:80:
58:75:0b:dd:a2:e0:9c:50:95:4d:85:7c:91:b0:be:
4c:b8:fe:17:70:04:b3:14:42:b8:3e:91:c4:42:25:
4e:ff:73:e9:91:b7:3c:48:40:12:c6:d1:12:ad:5a:
1f:e1:4e:94:cd:3a:a2:aa:80:c5:f7:ea:de:c4:d4:
7c:b6:2b:28:38:31:de:e5:c3:1f:3d:12:54:00:e5:
a9:6a:d6:4c:c0:8a:e4:03:ab:3a:62:f8:53:c3:0e:
3e:f0:e1:44:d7:91:a6:2a:48:f8:51:a7:d8:41:5a:
99:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D3:4E:84:EE:AC:2A:0A:7C:99:4E:63:23:E8:77:38:86:DB:36:E4
X509v3 Authority Key Identifier:
keyid:F3:75:1C:F8:C3:A2:D3:6C:97:44:C9:65:19:89:99:45:AC:60:78:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83Uc-MOi02yXRMllGYmZRaxgeCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/ZNNOhO6sKgp8mU5jI-h3OIbbNuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.2.0/23
IPv6:
2a0c:6bc4::/30
Signature Algorithm: sha256WithRSAEncryption
32:fe:1c:98:53:b2:37:0d:f3:3d:4c:38:ee:e5:27:58:59:c3:
0e:74:17:b4:a6:62:2b:14:ad:a5:ec:05:40:dd:e8:52:22:7d:
7c:2c:80:eb:69:03:fe:a7:0b:0b:7c:8d:89:04:13:bc:6c:75:
4f:a5:d6:8f:8f:64:49:81:a2:18:5b:45:af:d1:a2:7f:7e:91:
fa:a6:29:9c:f2:2a:5d:bb:a3:2d:9b:76:57:db:37:a7:29:e6:
fd:9f:b2:68:30:00:dd:69:e3:2f:ae:7b:63:ba:6e:d0:10:f2:
76:3d:5c:16:d3:da:79:6b:02:67:46:5e:4e:5c:79:03:1d:a3:
26:46:38:52:b3:28:9a:0a:3c:2c:f0:0c:b5:f1:d4:31:3b:ac:
74:41:5d:5e:ac:eb:33:ef:c8:d8:bf:13:fe:c6:da:04:85:2c:
6d:1c:40:5b:44:0d:b4:6c:4b:0a:da:d4:b4:3d:97:5e:f1:7c:
1c:eb:92:d5:b9:e6:e0:4e:95:d0:6f:8d:7b:7e:02:67:4c:e3:
83:73:0e:8a:37:ce:7c:1b:52:9d:35:67:90:29:98:05:37:e4:
4e:67:76:2f:7e:a1:d9:fc:2f:d9:3e:13:5c:98:b9:c1:1c:c8:
44:ea:72:da:d1:dc:1b:f0:91:e7:44:39:4a:b8:3e:ea:83:8f:
9f:b9:46:2f
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZ9/pC/tDx7nfHhx/Kd4qtKTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzNzUxY2Y4YzNhMmQzNmM5NzQ0Yzk2NTE5ODk5OTQ1YWM2
MDc4MjAwHhcNMjYwNzIwMTMwODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NGQzNGU4NGVlYWMyYTBhN2M5OTRlNjMyM2U4NzczODg2ZGIzNmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmZu1Jo+jyyc4Xg0Sx46QK9o1Qad
vmW8bzYUfCpk9i3eL1RLenl3ecmCMEtFTIKje9YchCqTJxebayTClgpPZx30UH4M
AxkufeA32WQWE/RS5dSw9uZcX96FN0csIIf5OZeeEas67sd9M/4VDi1ofnV3ctiH
LkBIuysNGiuha3Obk5elyBpJ/RQHDzrtov5Ova1uk4BYdQvdouCcUJVNhXyRsL5M
uP4XcASzFEK4PpHEQiVO/3Ppkbc8SEASxtESrVof4U6UzTqiqoDF9+rexNR8tiso
ODHe5cMfPRJUAOWpatZMwIrkA6s6YvhTww4+8OFE15GmKkj4UafYQVqZrwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFGTTToTurCoKfJlOYyPodziG2zbkMB8GA1UdIwQY
MBaAFPN1HPjDotNsl0TJZRmJmUWsYHggMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODNVYy1NT2kwMnlYUk1sbEdZbVpSYXhnZUNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8wOGY5YjQtMTE1Yy00NDg4LWI1Njct
NWNmN2MwNjIxMDY1LzEvWk5OT2hPNnNLZ3A4bVU1akktaDNPSWJiTnVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8wOGY5YjQtMTE1Yy00NDg4LWI1NjctNWNmN2MwNjIxMDY1
LzEvODNVYy1NT2kwMnlYUk1sbEdZbVpSYXhnZUNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBLVoCMA0E
AgACMAcDBQIqDGvEMA0GCSqGSIb3DQEBCwUAA4IBAQAy/hyYU7I3DfM9TDju5SdY
WcMOdBe0pmIrFK2l7AVA3ehSIn18LIDraQP+pwsLfI2JBBO8bHVPpdaPj2RJgaIY
W0Wv0aJ/fpH6pimc8ipdu6Mtm3ZX2zenKeb9n7JoMADdaeMvrntjum7QEPJ2PVwW
09p5awJnRl5OXHkDHaMmRjhSsyiaCjws8Ay18dQxO6x0QV1erOsz78jYvxP+xtoE
hSxtHEBbRA20bEsK2tS0PZde8Xwc65LVuebgTpXQb417fgJnTOODcw6KN858G1Kd
NWeQKZgFN+ROZ3YvfqHZ/C/ZPhNcmLnBHMhE6nLa0dwb8JHnRDlKuD7qg4+fuUYv
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:01:33 2026 by rpki-client