Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ZAS-8ERXIf74wu7vcmztFJT5QUI.roa
File: ZAS-8ERXIf74wu7vcmztFJT5QUI.roa (raw, json)
Hash identifier: ePE0LaEIVI9bXDva+hwVSN4J+IHu6PqHN9A78P3/vN0=
Subject key identifier: 64:04:BE:F0:44:57:21:FE:F8:C2:EE:EF:72:6C:ED:14:94:F9:41:42
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A0CC8BC71BD96BE97DE53D0C3F2E29983F
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ZAS-8ERXIf74wu7vcmztFJT5QUI.roa
Signing time: Wed 23 Sep 2026 04:35:07 +0000
ROA not before: Wed 23 Sep 2026 04:35:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207359
IP address blocks: 78.17.193.0/24 maxlen: 24
167.17.45.0/24 maxlen: 24
206.245.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:8b:c7:1b:d9:6b:e9:7d:e5:3d:0c:3f:2e:29:98:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 23 04:35:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6404bef0445721fef8c2eeef726ced1494f94142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e6:3f:f1:8c:8b:4a:c4:4a:e3:3c:a5:f6:a7:
61:8f:d2:6c:81:b3:de:12:53:34:ce:7f:c6:78:ab:
42:8c:0a:50:11:62:93:c7:35:f1:ff:34:a7:2d:81:
93:92:1e:92:db:a1:62:b2:9b:77:6d:25:0d:70:c4:
80:33:56:37:8c:f2:5b:4b:f1:f5:b8:75:e4:d2:81:
72:3c:6a:7a:02:83:a5:f4:ce:e8:08:ea:2a:5f:77:
b7:47:8e:16:04:ec:17:20:c6:24:08:51:08:ec:c6:
06:14:28:f3:84:cb:2a:65:33:ca:ad:4e:58:4f:f4:
0c:50:7f:aa:99:cd:6d:de:d6:8f:a8:c9:9f:59:d3:
6f:d4:d0:af:3c:cd:f7:5d:69:58:e0:23:80:72:4f:
8c:81:1a:44:55:4a:43:2c:60:65:aa:22:5f:ad:72:
92:46:be:de:39:f3:82:8c:56:22:c4:63:84:42:0a:
8e:6f:0f:33:94:b0:b4:52:0f:97:99:d8:3c:40:dd:
a7:b7:5f:af:46:df:01:69:33:42:33:44:af:6c:3d:
34:99:74:dc:c2:1f:7a:43:6b:06:e9:94:f6:9c:82:
bc:63:47:22:50:e2:bf:9c:f6:6f:5f:8d:0f:31:34:
65:38:6b:c0:ae:74:e1:a4:6b:b3:07:e7:a0:2c:b6:
42:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:04:BE:F0:44:57:21:FE:F8:C2:EE:EF:72:6C:ED:14:94:F9:41:42
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ZAS-8ERXIf74wu7vcmztFJT5QUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.193.0/24
167.17.45.0/24
206.245.146.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:c9:12:f3:e1:4a:90:de:07:bf:f3:da:2f:99:18:e9:72:f5:
28:a6:21:4d:01:5a:8d:ad:e4:5a:60:e5:34:94:fa:ee:94:32:
09:0d:41:86:e7:06:73:73:78:dd:eb:39:c2:2d:ea:6d:44:6c:
23:b3:c8:2c:fa:49:ad:90:6e:ea:44:ea:5d:11:74:ef:f8:80:
c8:ee:fa:7c:91:a5:ea:11:1f:a2:c3:10:16:80:50:4b:5b:b5:
ce:d2:be:85:ce:fb:f0:17:87:96:3a:23:d1:8f:ca:c7:4b:26:
7e:d6:d0:b5:92:a4:ce:5d:40:9a:cd:fe:53:c3:f4:78:14:1c:
27:7d:e3:9f:53:17:5f:ea:c4:ae:0b:e6:38:09:4b:8c:50:b2:
8e:a5:c6:4e:c1:40:8c:bd:65:cc:90:6c:82:25:1e:32:53:56:
19:50:0d:b0:12:81:95:08:ca:25:fe:45:ec:6e:d3:78:73:55:
54:d2:e1:ec:a2:da:ee:ef:7f:c0:89:2f:ee:69:02:f5:e0:5c:
8b:db:ee:14:69:7b:3f:66:6a:de:8f:a1:32:82:f4:89:37:0f:
b0:8b:d8:86:c6:bc:9f:47:aa:26:02:e0:76:d8:aa:6c:96:41:
f3:c3:7a:48:5e:ed:68:64:2a:9f:50:af:c2:3f:16:30:cc:56:
a3:0e:c8:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:23:58 2026 by rpki-client