Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/zkuzAY2enYrtLGkFM8ERODYZLKA.roa
File: zkuzAY2enYrtLGkFM8ERODYZLKA.roa (raw, json)
Hash identifier: PvdIqB+Fh9fTeVDgdqOpL7fRPe7DtvHIS5ulz/6oVFM=
Subject key identifier: CE:4B:B3:01:8D:9E:9D:8A:ED:2C:69:05:33:C1:11:38:36:19:2C:A0
Certificate issuer: /CN=b2853aa1eb32bfee0feb1483c14936d101f16edf
Certificate serial: 019F1C22163CF8E8EBFC0602D956F51573C5
Authority key identifier: B2:85:3A:A1:EB:32:BF:EE:0F:EB:14:83:C1:49:36:D1:01:F1:6E:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/zkuzAY2enYrtLGkFM8ERODYZLKA.roa
Signing time: Wed 01 Jul 2026 05:23:43 +0000
ROA not before: Wed 01 Jul 2026 05:23:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57724
IP address blocks: 45.10.240.0/22 maxlen: 32
45.10.240.0/24 maxlen: 24
45.10.241.0/24 maxlen: 24
45.10.242.0/24 maxlen: 24
45.10.243.0/24 maxlen: 24
91.215.40.0/24 maxlen: 32
91.215.41.0/24 maxlen: 24
91.215.42.0/24 maxlen: 24
91.215.43.0/24 maxlen: 24
95.129.232.0/24 maxlen: 32
95.129.233.0/24 maxlen: 32
95.129.234.0/24 maxlen: 32
95.129.235.0/24 maxlen: 24
95.129.236.0/24 maxlen: 32
95.129.237.0/24 maxlen: 32
95.129.238.0/24 maxlen: 32
153.80.232.0/21 maxlen: 32
185.129.100.0/24 maxlen: 24
185.129.101.0/24 maxlen: 24
185.129.102.0/24 maxlen: 24
185.129.103.0/24 maxlen: 24
185.178.208.0/24 maxlen: 24
185.178.209.0/24 maxlen: 24
185.178.210.0/24 maxlen: 24
2a0a:4180::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 17:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1c:22:16:3c:f8:e8:eb:fc:06:02:d9:56:f5:15:73:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2853aa1eb32bfee0feb1483c14936d101f16edf
Validity
Not Before: Jul 1 05:23:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ce4bb3018d9e9d8aed2c690533c1113836192ca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:53:8a:4e:5b:1c:f0:5b:b0:07:c9:38:b3:a2:
d2:97:dd:c7:a1:bb:76:5e:d5:73:d0:2b:d7:5a:1a:
d6:89:f3:7c:fb:32:51:f9:08:d6:2b:bd:7a:cc:bc:
68:61:54:e4:44:73:61:72:71:f7:00:f0:e5:d3:89:
25:58:4f:06:bc:4d:d5:cd:a6:3d:07:e0:97:8b:63:
92:b1:79:d4:26:8c:2f:9b:29:dd:e8:4d:51:07:35:
45:8a:9a:95:e6:94:b1:4f:e2:3e:42:31:39:70:3b:
4c:1c:5c:21:f7:92:ac:ba:07:db:ef:21:1d:1b:52:
56:93:a4:1b:34:4e:7c:33:2d:dc:9e:76:54:ce:95:
a5:fa:18:b7:52:4c:52:74:3c:bf:07:45:f3:6a:18:
52:20:9b:f6:d3:af:24:f3:02:65:5b:4d:5e:ff:db:
fc:d9:08:85:68:ee:5d:7f:8e:6d:f7:c8:5c:02:67:
b9:f1:72:5e:98:14:5d:78:29:c9:f3:ab:01:78:eb:
6e:3d:1e:a9:47:da:f4:e5:49:98:af:1e:8c:fb:0c:
c2:39:6f:4a:a9:19:92:19:c1:4a:01:e6:89:d8:64:
40:fa:e5:ac:5d:a0:f5:d1:e1:32:04:41:d6:77:0c:
04:a0:51:97:51:c1:b2:d4:60:4c:6f:e8:49:ca:ba:
85:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:4B:B3:01:8D:9E:9D:8A:ED:2C:69:05:33:C1:11:38:36:19:2C:A0
X509v3 Authority Key Identifier:
keyid:B2:85:3A:A1:EB:32:BF:EE:0F:EB:14:83:C1:49:36:D1:01:F1:6E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/zkuzAY2enYrtLGkFM8ERODYZLKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.240.0/22
91.215.40.0/22
95.129.232.0-95.129.238.255
153.80.232.0/21
185.129.100.0/22
185.178.208.0-185.178.210.255
IPv6:
2a0a:4180::/48
Signature Algorithm: sha256WithRSAEncryption
77:7c:9f:62:c9:40:9a:f5:c5:2e:77:f3:1d:c2:29:eb:9e:09:
76:44:55:17:06:ae:fa:ff:55:26:92:c4:6b:e1:f4:99:33:50:
d6:dd:ff:0d:51:49:f5:53:a7:89:e8:bb:65:94:d1:b0:5f:03:
77:8a:1a:ab:df:13:fe:12:d2:2b:d4:14:fe:2c:be:f0:44:20:
87:cd:25:52:64:bc:34:4e:03:49:d3:2a:d6:3a:1e:c0:36:94:
e6:d6:e6:4a:8c:22:07:12:0f:a3:4e:29:7d:df:26:c6:ab:e3:
e3:af:d0:8d:25:5c:55:4e:f6:57:54:c8:5c:0f:6e:12:85:64:
6f:3c:38:22:72:42:f2:29:d4:64:5f:ce:f8:8e:17:da:2d:cc:
18:c1:2d:3e:24:27:9d:2c:f3:5f:4b:22:b7:5d:4d:24:24:81:
e5:17:d1:2c:87:07:8f:a6:05:19:60:08:76:e1:d7:0b:36:96:
f3:10:c0:8a:9f:37:f1:13:09:b3:a8:0f:1d:dd:da:d0:87:25:
1a:0d:f3:38:9c:2a:27:62:0d:5c:4b:63:fd:bc:13:8d:05:55:
d7:79:58:bb:37:d9:cb:ec:31:ea:7d:f1:36:2d:94:93:4c:62:
78:cc:48:0d:86:c7:10:43:2b:bd:78:62:fe:3c:b1:b6:3d:89:
47:06:34:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:50:59 2026 by rpki-client