Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/Z1BNJVKh2ny5tUlNxHWm6XyekEg.roa
File: Z1BNJVKh2ny5tUlNxHWm6XyekEg.roa (raw, json)
Hash identifier: MctVPkPLj8G1XZDtzvRO5+zUVkqW2h2X0xDRR0+8PzM=
Subject key identifier: 67:50:4D:25:52:A1:DA:7C:B9:B5:49:4D:C4:75:A6:E9:7C:9E:90:48
Certificate issuer: /CN=c8f576b236e3ee5d1f9999c3dbb7c16c451f9e1f
Certificate serial: 019F175611F264E384C700CBB1CF615DAA9B
Authority key identifier: C8:F5:76:B2:36:E3:EE:5D:1F:99:99:C3:DB:B7:C1:6C:45:1F:9E:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPV2sjbj7l0fmZnD27fBbEUfnh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/Z1BNJVKh2ny5tUlNxHWm6XyekEg.roa
Signing time: Tue 30 Jun 2026 07:02:24 +0000
ROA not before: Tue 30 Jun 2026 07:02:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208233
IP address blocks: 45.130.36.0/24 maxlen: 24
45.130.37.0/24 maxlen: 24
45.130.38.0/24 maxlen: 24
45.130.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/yPV2sjbj7l0fmZnD27fBbEUfnh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/yPV2sjbj7l0fmZnD27fBbEUfnh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPV2sjbj7l0fmZnD27fBbEUfnh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:56:11:f2:64:e3:84:c7:00:cb:b1:cf:61:5d:aa:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f576b236e3ee5d1f9999c3dbb7c16c451f9e1f
Validity
Not Before: Jun 30 07:02:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=67504d2552a1da7cb9b5494dc475a6e97c9e9048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f4:0c:c7:b0:2d:43:32:3f:50:85:2b:59:26:
a2:59:e0:86:80:d2:d5:55:d8:b8:e1:19:1b:fc:ef:
ac:06:18:5a:91:2b:4a:9d:f2:97:a4:bb:c6:e3:4c:
71:e4:35:fc:b0:74:e7:0e:48:ec:9e:62:6d:68:16:
c3:b3:06:7d:f0:5a:1d:5a:1a:68:b6:d0:b0:92:83:
0e:c5:6b:87:4d:22:85:9f:60:e9:ff:cc:10:6a:8b:
d9:6d:8c:f3:a4:54:e7:a7:c8:25:91:b9:1e:f9:cb:
ad:c2:8c:13:a9:85:5a:44:47:61:92:1a:b2:8d:15:
24:99:a1:86:b2:e8:b2:cf:fa:fc:27:fe:64:37:9c:
97:fa:9f:06:9c:ea:f3:89:20:53:1c:e6:56:3b:b3:
36:8c:a2:4d:85:70:d0:dd:2b:ae:a3:c0:82:81:cc:
81:b5:af:7b:e7:43:4a:73:97:20:bd:ff:33:9b:ba:
45:07:65:c5:ca:95:36:f9:0d:0a:4b:4b:ff:c5:db:
a5:ad:51:4e:66:56:d6:b5:2f:3b:84:82:af:ef:51:
78:83:15:0a:84:ae:4d:ca:9f:24:2f:c6:54:fd:48:
f4:09:81:63:ee:d5:36:a0:e9:c0:24:ee:8f:d2:88:
a6:3e:92:b8:bf:fd:e2:57:b0:13:c5:83:3c:ba:e5:
c6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:50:4D:25:52:A1:DA:7C:B9:B5:49:4D:C4:75:A6:E9:7C:9E:90:48
X509v3 Authority Key Identifier:
keyid:C8:F5:76:B2:36:E3:EE:5D:1F:99:99:C3:DB:B7:C1:6C:45:1F:9E:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPV2sjbj7l0fmZnD27fBbEUfnh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/Z1BNJVKh2ny5tUlNxHWm6XyekEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/yPV2sjbj7l0fmZnD27fBbEUfnh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.36.0/22
Signature Algorithm: sha256WithRSAEncryption
32:87:1a:df:ef:40:4d:e2:f0:8e:8a:13:78:61:de:01:62:65:
f0:cd:d0:22:32:bc:37:67:ed:11:25:65:09:1f:89:4a:f9:8e:
83:d6:24:0a:d7:95:28:17:96:c2:31:5a:2f:1f:9a:16:51:2a:
fa:7d:c0:0d:9a:1a:48:f7:ac:ec:17:8b:62:8d:4d:f2:9e:f4:
bd:ef:a2:5c:4f:a2:1f:4e:bf:22:5e:98:e1:cd:48:8d:d4:b4:
1d:11:be:5e:28:f4:24:35:82:e8:ee:d9:78:b5:df:0d:a4:a3:
df:72:20:07:39:9b:9e:0d:91:4f:be:96:ca:63:ea:0a:e4:de:
31:e0:8b:09:27:e8:cc:c8:dd:6c:e5:1f:98:8c:a4:2c:7e:6a:
95:ab:b9:e1:13:9a:a3:20:c4:26:cc:15:bb:58:d9:fc:84:f7:
af:22:41:55:41:21:d3:64:40:42:a3:ed:11:7d:ac:0a:d1:bb:
4d:35:cd:57:f0:bd:f2:7b:9e:93:4b:0d:00:70:f7:07:da:29:
2d:38:be:54:4e:25:34:41:e1:01:6a:88:fc:bd:a6:88:fb:cc:
86:c6:44:77:3f:a7:f0:96:58:3b:2c:90:81:8f:14:96:0f:85:
80:25:b5:2b:3b:b6:ed:4e:9d:44:97:5a:86:db:37:33:cc:fb:
c3:de:d0:5a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8XVhHyZOOExwDLsc9hXaqbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZjU3NmIyMzZlM2VlNWQxZjk5OTljM2RiYjdjMTZjNDUx
ZjllMWYwHhcNMjYwNjMwMDcwMjI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzUwNGQyNTUyYTFkYTdjYjliNTQ5NGRjNDc1YTZlOTdjOWU5MDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7fQMx7AtQzI/UIUrWSaiWeCGgNLV
Vdi44Rkb/O+sBhhakStKnfKXpLvG40xx5DX8sHTnDkjsnmJtaBbDswZ98FodWhpo
ttCwkoMOxWuHTSKFn2Dp/8wQaovZbYzzpFTnp8glkbke+cutwowTqYVaREdhkhqy
jRUkmaGGsuiyz/r8J/5kN5yX+p8GnOrziSBTHOZWO7M2jKJNhXDQ3Suuo8CCgcyB
ta9750NKc5cgvf8zm7pFB2XFypU2+Q0KS0v/xdulrVFOZlbWtS87hIKv71F4gxUK
hK5Nyp8kL8ZU/Uj0CYFj7tU2oOnAJO6P0oimPpK4v/3iV7ATxYM8uuXGTwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGdQTSVSodp8ubVJTcR1pul8npBIMB8GA1UdIwQY
MBaAFMj1drI24+5dH5mZw9u3wWxFH54fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVBWMnNqYmo3bDBmbVpuRDI3ZkJiRVVmbmg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8yNTA5ZTgtZDQ1Ni00YTQzLWFlNGMt
ODkyZTdlM2NjZWNmLzEvWjFCTkpWS2gybnk1dFVsTnhIV202WHlla0VnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8yNTA5ZTgtZDQ1Ni00YTQzLWFlNGMtODkyZTdlM2NjZWNm
LzEveVBWMnNqYmo3bDBmbVpuRDI3ZkJiRVVmbmg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYIkMA0G
CSqGSIb3DQEBCwUAA4IBAQAyhxrf70BN4vCOihN4Yd4BYmXwzdAiMrw3Z+0RJWUJ
H4lK+Y6D1iQK15UoF5bCMVovH5oWUSr6fcANmhpI96zsF4tijU3ynvS976JcT6If
Tr8iXpjhzUiN1LQdEb5eKPQkNYLo7tl4td8NpKPfciAHOZueDZFPvpbKY+oK5N4x
4IsJJ+jMyN1s5R+YjKQsfmqVq7nhE5qjIMQmzBW7WNn8hPevIkFVQSHTZEBCo+0R
fawK0btNNc1X8L3ye56TSw0AcPcH2iktOL5UTiU0QeEBaoj8vaaI+8yGxkR3P6fw
llg7LJCBjxSWD4WAJbUrO7btTp1El1qG2zczzPvD3tBa
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:28:37 2026 by rpki-client