Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/Rzz9As8wNqOhp0Rc_gklW_oQbLk.roa
File: Rzz9As8wNqOhp0Rc_gklW_oQbLk.roa (raw, json)
Hash identifier: N6RiFyvGGTrTsSSx6q6vv+fCw1/jUf0y7kgh5kkRQN4=
Subject key identifier: 47:3C:FD:02:CF:30:36:A3:A1:A7:44:5C:FE:09:25:5B:FA:10:6C:B9
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 019D21671D2C8FC98124A44763A58F3E61B9
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/Rzz9As8wNqOhp0Rc_gklW_oQbLk.roa
Signing time: Tue 24 Mar 2026 19:51:39 +0000
ROA not before: Tue 24 Mar 2026 19:51:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204104
IP address blocks: 5.57.33.0/24 maxlen: 24
37.32.43.0/24 maxlen: 24
185.26.32.0/24 maxlen: 24
185.212.49.0/24 maxlen: 24
185.215.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 13:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:21:67:1d:2c:8f:c9:81:24:a4:47:63:a5:8f:3e:61:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Mar 24 19:51:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=473cfd02cf3036a3a1a7445cfe09255bfa106cb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:25:ee:07:19:f8:17:27:e6:66:2d:2b:9d:70:
5f:cf:49:5c:d3:55:9d:d1:70:1e:f2:a9:9a:46:ab:
c3:14:d8:8a:d8:fc:40:af:58:30:eb:32:16:da:d5:
aa:a4:8f:93:10:17:48:b6:a2:87:20:ee:51:27:6c:
07:7d:0b:70:bc:d2:29:89:22:99:95:d5:3b:24:9e:
49:3f:b5:2a:5d:a0:5a:a8:f5:a0:5d:6b:1f:f1:58:
91:0c:18:f3:e2:cb:ac:1d:6f:64:b3:64:96:6b:02:
6b:15:6a:d9:e9:41:88:23:d0:de:9b:04:a6:b5:d2:
58:25:76:28:c5:c0:74:8c:89:cf:57:b9:63:a6:14:
ae:2d:cd:91:37:5a:9b:c7:f4:ad:d2:d7:6c:33:00:
4e:be:5c:3b:76:7d:31:2c:c6:c8:43:b2:fe:5a:0d:
d1:1a:16:1c:66:0e:aa:c6:21:02:10:65:10:c7:aa:
86:00:a8:7e:a3:ee:60:d8:fa:0f:9b:bb:88:0e:a1:
dd:d2:ce:1e:9d:5f:b3:44:8e:fe:e6:84:ad:bb:60:
09:6b:1e:07:4f:71:0a:1e:ae:f3:b5:ed:97:7d:62:
46:b5:60:e7:ed:f5:04:88:3b:78:f6:f5:09:26:cc:
7c:06:a1:0b:fc:9f:7e:83:9c:33:96:89:bc:3c:34:
5d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:3C:FD:02:CF:30:36:A3:A1:A7:44:5C:FE:09:25:5B:FA:10:6C:B9
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/Rzz9As8wNqOhp0Rc_gklW_oQbLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.33.0/24
37.32.43.0/24
185.26.32.0/24
185.212.49.0/24
185.215.230.0/24
Signature Algorithm: sha256WithRSAEncryption
12:a5:37:79:e9:0f:c4:f3:33:8b:85:7c:f4:d1:ab:84:80:3a:
63:fb:9e:ef:fc:db:e6:0b:5a:12:8f:15:0d:20:98:7e:19:7f:
8d:19:35:c3:8f:a3:ca:60:e8:02:e4:ba:84:2d:5d:a7:72:e3:
cc:bb:da:a9:c5:7e:42:d9:55:71:43:ee:a0:a7:b5:5a:30:41:
18:69:a3:6b:c1:2e:6f:eb:cd:66:ad:97:c4:42:a6:a1:25:f1:
14:ed:1d:c1:1b:49:0d:18:4f:b0:9a:85:08:90:5a:65:04:ea:
d5:b1:5b:ca:32:0c:fa:24:c7:69:7f:24:41:36:b2:32:8c:e7:
5a:4e:b1:1e:da:04:5b:a7:b0:6e:41:e5:98:e4:cb:1c:19:ea:
da:b8:48:ff:ff:c9:ac:46:fa:74:10:37:7a:08:26:a7:59:5e:
ab:ce:77:e6:8f:8f:44:39:8f:58:68:47:c1:1f:0e:68:7f:4d:
55:22:b7:16:86:66:9b:f3:ed:e8:ff:2a:b8:b7:3f:65:56:f6:
c3:fc:d6:bd:11:e9:d3:71:30:e4:28:af:d4:c5:db:40:ad:7e:
5c:d4:39:8b:bf:c2:e5:b9:ee:15:c2:b4:e6:3b:49:7d:df:47:
d4:78:a5:66:c8:3d:a6:9c:1a:63:9a:00:51:72:af:fe:c1:ac:
b8:02:c2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:27:46 2026 by rpki-client