Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/ZVLlFSfhzxEF0lhJJae8JIe343A.roa
File: ZVLlFSfhzxEF0lhJJae8JIe343A.roa (raw, json)
Hash identifier: zgyrla+/GM23mvitjWsB4FiXxNCUrtNyyz0dfjgywUw=
Subject key identifier: 65:52:E5:15:27:E1:CF:11:05:D2:58:49:25:A7:BC:24:87:B7:E3:70
Certificate issuer: /CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Certificate serial: 019F32627EDDB70DA967F8F59795D553CE05
Authority key identifier: 6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/ZVLlFSfhzxEF0lhJJae8JIe343A.roa
Signing time: Sun 05 Jul 2026 13:05:43 +0000
ROA not before: Sun 05 Jul 2026 13:05:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219303
IP address blocks: 94.131.17.0/24 maxlen: 24
185.39.30.0/24 maxlen: 24
2a06:fcc0:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:32:62:7e:dd:b7:0d:a9:67:f8:f5:97:95:d5:53:ce:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Validity
Not Before: Jul 5 13:05:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6552e51527e1cf1105d2584925a7bc2487b7e370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:83:95:20:bb:14:7f:f7:9b:c2:8d:85:ac:22:
19:79:d7:0e:fa:de:e4:4e:e8:6c:62:ba:a1:fb:7b:
2d:25:e0:3f:13:4c:f2:20:14:71:7c:cd:b3:62:5e:
3a:2b:aa:a5:30:b7:2d:21:42:cc:73:62:c1:25:df:
c2:99:5c:f6:8b:c6:9c:80:65:2e:3a:d9:82:27:d5:
09:51:30:3a:ea:76:9d:f8:11:b8:80:18:3a:3d:02:
07:47:57:c4:72:25:45:fd:55:bd:9f:c0:63:59:d6:
30:55:c6:38:9d:e7:c8:38:4a:48:2c:50:6a:bc:e5:
ed:5c:1a:bd:87:85:c6:03:c6:0f:b5:63:40:09:e0:
67:17:60:10:66:85:6c:6d:5e:af:c6:8f:40:26:7c:
fa:27:ba:79:3c:b4:33:b5:5f:f2:43:d8:7b:d2:5c:
e8:90:a7:10:6d:df:df:27:81:ac:ef:a5:d0:c9:b5:
03:d5:f0:61:78:6a:98:10:ba:5f:47:c5:42:27:70:
06:6d:c3:48:15:5e:9e:9c:84:d8:37:6d:45:e3:40:
d1:2c:ae:a8:29:d2:59:5d:a5:e7:c0:58:26:35:d1:
65:be:2d:d4:6d:b3:77:9d:de:15:bf:c2:f8:4d:b2:
b4:f3:85:ce:63:eb:1c:c5:e7:07:ef:1c:a6:bf:c2:
ee:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:52:E5:15:27:E1:CF:11:05:D2:58:49:25:A7:BC:24:87:B7:E3:70
X509v3 Authority Key Identifier:
keyid:6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/ZVLlFSfhzxEF0lhJJae8JIe343A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.17.0/24
185.39.30.0/24
IPv6:
2a06:fcc0:2::/48
Signature Algorithm: sha256WithRSAEncryption
1e:ea:9b:0c:13:2c:34:81:00:35:68:b3:48:22:2f:8e:38:14:
92:96:e4:60:fa:71:93:38:9d:d3:c3:69:a5:9d:de:29:76:ae:
b7:08:ad:6d:c5:e7:17:16:78:de:be:34:a4:7b:5d:2a:c7:82:
28:6b:67:ec:df:ef:bf:9e:ad:b0:be:e7:6a:41:07:90:4d:91:
66:03:d3:be:eb:5c:00:3a:f0:1b:d1:f0:7b:7c:24:32:d4:16:
73:8e:17:7c:5b:2a:bf:52:e7:df:6c:c5:14:5f:bb:88:bc:b3:
5e:45:8d:c2:63:b0:53:d1:d9:69:b0:28:71:e0:d3:d5:d8:e1:
e8:dd:3d:be:80:79:19:db:9c:9b:a0:65:45:ad:6c:dd:24:ec:
a6:a1:96:a4:ff:7c:8d:3b:54:fc:0e:e5:0c:86:1a:ba:ae:66:
3f:77:7d:df:c0:54:24:f5:72:72:97:ae:33:72:27:7c:d0:23:
71:22:18:1b:87:bd:0b:7f:0d:99:11:c1:f0:16:c0:04:f1:e0:
62:a3:2f:77:cb:5e:10:46:7f:73:57:ac:fc:1b:ce:cd:e7:58:
5c:93:a8:cc:9a:1e:39:32:6a:36:b7:26:20:64:ae:de:fb:b3:
2c:e9:99:bf:fb:34:fa:33:b8:3d:e7:97:65:72:68:36:79:7f:
9d:0f:52:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:52:23 2026 by rpki-client