Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/ZAUQOx8ZIoF_38vOnWSRuk7mSCM.roa
File: ZAUQOx8ZIoF_38vOnWSRuk7mSCM.roa (raw, json)
Hash identifier: xFSZDnEjwVDIcL0zURA7Oo3gZI5+yugqjcFTXmh2x0A=
Subject key identifier: 64:05:10:3B:1F:19:22:81:7F:DF:CB:CE:9D:64:91:BA:4E:E6:48:23
Certificate issuer: /CN=d6c269f9e93b0fb8bc4b1c947abc5b21f21f2305
Certificate serial: 019E075E1FDEF2574170D046FE8C3CD971A4
Authority key identifier: D6:C2:69:F9:E9:3B:0F:B8:BC:4B:1C:94:7A:BC:5B:21:F2:1F:23:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/ZAUQOx8ZIoF_38vOnWSRuk7mSCM.roa
Signing time: Fri 08 May 2026 11:34:29 +0000
ROA not before: Fri 08 May 2026 11:34:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12480
IP address blocks: 185.149.156.0/22 maxlen: 24
185.193.144.0/22 maxlen: 24
194.45.22.0/24 maxlen: 24
212.86.192.0/19 maxlen: 32
2a00:1970::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:07:5e:1f:de:f2:57:41:70:d0:46:fe:8c:3c:d9:71:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6c269f9e93b0fb8bc4b1c947abc5b21f21f2305
Validity
Not Before: May 8 11:34:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6405103b1f1922817fdfcbce9d6491ba4ee64823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:00:ab:9c:24:0f:e4:2a:ba:26:7d:b1:bf:75:
24:eb:91:7c:40:71:ce:b1:41:40:2f:38:ad:73:e3:
42:27:77:18:74:0d:b3:af:c5:14:2a:5f:2b:49:dd:
ea:39:32:82:be:02:cb:0d:09:1f:2e:12:10:d4:b9:
96:59:df:02:c9:21:60:73:e0:0d:39:55:f8:13:2b:
07:8c:f4:17:36:e1:cd:7a:72:af:f0:2e:97:d5:33:
fe:f6:ec:e5:38:1d:6d:d1:57:bc:d7:e5:5f:70:11:
6e:12:b2:47:00:92:3e:e6:cf:5f:66:6a:b7:d3:4a:
c5:f7:c1:0c:93:4e:c6:42:0e:70:c6:5b:5e:cf:90:
fd:a3:b2:6b:bf:cf:1a:43:9a:57:23:27:98:d5:ad:
22:57:41:57:01:3a:a5:58:20:ad:0b:f6:e5:22:c6:
4c:ec:5a:39:70:d7:41:18:95:a4:78:68:ec:c3:d7:
11:1a:a2:d7:71:1a:94:92:04:9c:fe:af:74:ef:03:
57:7f:c8:49:36:2d:d8:5f:8e:4a:8a:0f:bf:5f:ce:
df:5e:ab:b1:61:53:9b:02:4b:e6:49:85:e4:3e:27:
6d:1a:dc:6e:ad:c7:14:a2:33:46:d8:dc:05:61:98:
c6:46:69:4d:87:0f:d2:6a:f7:27:d8:9a:3a:1a:36:
f4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:05:10:3B:1F:19:22:81:7F:DF:CB:CE:9D:64:91:BA:4E:E6:48:23
X509v3 Authority Key Identifier:
keyid:D6:C2:69:F9:E9:3B:0F:B8:BC:4B:1C:94:7A:BC:5B:21:F2:1F:23:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/ZAUQOx8ZIoF_38vOnWSRuk7mSCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.156.0/22
185.193.144.0/22
194.45.22.0/24
212.86.192.0/19
IPv6:
2a00:1970::/32
Signature Algorithm: sha256WithRSAEncryption
72:e5:98:bc:e7:ca:a1:11:0e:39:7a:80:a6:ea:0d:43:72:40:
c2:ac:8a:6d:c6:36:9b:e8:a3:38:82:2c:96:30:08:d8:40:98:
b5:ae:d2:b6:7f:ac:8f:a2:5b:3c:03:e9:a7:f9:db:31:5d:a7:
74:0c:3a:ff:8c:5f:51:9f:f9:3b:37:a8:a1:e1:57:ae:4d:53:
41:69:22:5d:e1:6e:a7:46:30:1d:c9:46:20:42:22:ee:3c:3a:
0f:94:10:07:f7:7c:89:f2:1f:5a:35:17:92:31:bd:eb:5a:b9:
77:b6:29:b7:fb:14:fc:d4:ee:f8:78:06:4a:d5:69:67:41:e2:
b5:85:db:06:9a:33:78:37:40:b6:c0:8d:f3:36:a1:b4:96:8f:
66:d8:f4:2a:a4:44:44:4e:bc:c2:6f:ce:65:49:1f:a9:c3:60:
f8:7a:a3:da:8c:9a:27:28:d4:87:02:8b:7f:f9:30:87:48:d1:
c4:2e:09:6d:c7:ea:1f:41:20:fe:fb:55:5f:16:de:63:13:98:
51:21:5c:af:cf:fe:da:a6:d4:a7:db:18:26:6e:4d:01:d6:f5:
4f:db:9d:cd:c5:c2:62:98:fc:b3:ff:8f:3d:8c:84:df:9e:c8:
83:45:63:34:61:60:eb:9f:13:ec:5b:b0:69:c6:a7:fa:9b:77:
b6:7c:7c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:55:03 2026 by rpki-client