Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Zic-pfpuzjv461TF2aEB3kWlQXc.roa
File: Zic-pfpuzjv461TF2aEB3kWlQXc.roa (raw, json)
Hash identifier: OKQJQpoug913gQnjw9jRwE26iCmnXc58/YExrhBCuuI=
Subject key identifier: 66:27:3E:A5:FA:6E:CE:3B:F8:EB:54:C5:D9:A1:01:DE:45:A5:41:77
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019DDEFD37E0BD32903E3B9C4BD776D676EA
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Zic-pfpuzjv461TF2aEB3kWlQXc.roa
Signing time: Thu 30 Apr 2026 15:23:50 +0000
ROA not before: Thu 30 Apr 2026 15:23:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199785
IP address blocks: 93.115.175.0/24 maxlen: 24
193.228.139.0/24 maxlen: 24
212.192.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:de:fd:37:e0:bd:32:90:3e:3b:9c:4b:d7:76:d6:76:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Apr 30 15:23:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=66273ea5fa6ece3bf8eb54c5d9a101de45a54177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:65:1e:54:b1:1b:7d:42:fd:06:17:ee:34:e3:
02:9a:99:c7:8a:f5:f3:a0:23:51:5c:1c:dd:ff:d3:
f0:ed:8e:8e:0a:66:ac:a3:6d:5a:f4:6d:b7:92:a3:
2b:6d:fa:d5:c7:40:4b:c3:39:65:62:1d:65:7b:d6:
a0:33:17:c2:01:9d:35:36:b7:b3:37:1b:0c:77:c1:
2c:ee:f3:26:9b:12:d3:0b:f3:fb:d2:c9:23:18:f5:
8f:86:17:ce:f7:96:7a:62:63:70:78:c2:5b:1b:9d:
37:f5:e9:20:e9:d2:bb:4d:0d:ab:fb:6c:41:be:35:
cb:c8:42:65:bf:9f:9b:05:8c:7e:56:86:23:f7:db:
9c:08:1a:2b:2d:74:64:c5:ac:c8:3b:41:b3:22:a6:
16:ec:50:f1:6c:3a:11:1d:3e:58:f1:eb:3d:7e:9b:
bd:74:b5:e4:af:2b:09:b4:03:bc:71:58:54:e6:61:
83:62:12:74:5a:35:ba:5b:aa:25:62:b6:8f:8e:5c:
96:64:5e:9f:6f:4f:96:98:78:28:b6:09:86:1a:6a:
7f:4a:bd:57:cc:9a:5f:33:a4:6a:1a:8c:95:28:74:
4f:47:3d:cb:74:67:be:e2:fa:9b:7f:4b:42:1d:c3:
c2:cf:14:7b:19:6c:75:8d:57:5e:8d:c5:c4:db:2d:
37:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:27:3E:A5:FA:6E:CE:3B:F8:EB:54:C5:D9:A1:01:DE:45:A5:41:77
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Zic-pfpuzjv461TF2aEB3kWlQXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.175.0/24
193.228.139.0/24
212.192.31.0/24
Signature Algorithm: sha256WithRSAEncryption
61:22:d4:23:5d:17:1a:cb:1f:30:bf:11:27:e8:ac:65:08:87:
55:b9:61:c4:82:fe:78:bb:25:2c:0e:01:50:96:3b:80:07:d0:
3b:70:46:fb:fb:73:05:5c:6c:90:7f:5c:bd:74:f9:29:58:b6:
ef:ce:fa:1a:00:6e:cb:c8:f4:6f:ba:97:35:f4:ff:a0:8a:b1:
dc:2d:87:62:d1:99:4d:13:da:f1:9e:59:45:2d:cd:b1:45:17:
c0:a1:49:97:1a:67:55:79:67:a6:e1:88:f6:58:de:aa:92:a8:
f9:73:bd:cb:be:d4:12:04:fd:bd:0f:80:13:72:8b:4f:43:be:
4f:4f:e6:15:30:5d:83:90:c1:9e:ef:0c:37:79:09:a4:fb:b6:
6e:bd:48:34:9b:d8:01:37:cf:35:3f:52:6e:5e:c0:1a:cb:69:
bd:29:d9:eb:2a:8e:70:85:00:49:c7:72:0f:26:80:2c:5f:44:
a5:5a:66:c8:3b:a0:0f:bf:04:33:1e:34:b6:a0:2a:56:42:49:
7f:6b:84:47:25:0a:60:61:04:d5:ad:19:24:e7:0c:4c:81:e3:
fc:0b:d4:49:75:3d:0a:4d:8f:5e:93:fb:89:f1:50:f0:7e:4a:
9d:9c:a4:95:a8:30:2b:09:bd:c7:ec:26:06:b2:4b:1a:c8:7e:
70:fd:39:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:05:52 2026 by rpki-client