Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/ZC-eqVWmQyn8Ex7WQIhy7hzoaVk.roa
File: ZC-eqVWmQyn8Ex7WQIhy7hzoaVk.roa (raw, json)
Hash identifier: ybFrRdgkZD5E+Ah31fjps8/gl91qfmlbI01osf1paVw=
Subject key identifier: 64:2F:9E:A9:55:A6:43:29:FC:13:1E:D6:40:88:72:EE:1C:E8:69:59
Certificate issuer: /CN=48395eb4c0ee2daa5392cd99fc45efbc4a754e90
Certificate serial: 01A06A9FB7DDB2CB1FB658309B4423AED07C
Authority key identifier: 48:39:5E:B4:C0:EE:2D:AA:53:92:CD:99:FC:45:EF:BC:4A:75:4E:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SDletMDuLapTks2Z_EXvvEp1TpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/ZC-eqVWmQyn8Ex7WQIhy7hzoaVk.roa
Signing time: Fri 04 Sep 2026 04:14:07 +0000
ROA not before: Fri 04 Sep 2026 04:14:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218768
IP address blocks: 45.150.12.0/24 maxlen: 24
45.150.13.0/24 maxlen: 24
45.150.14.0/24 maxlen: 24
2a0f:8a00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/SDletMDuLapTks2Z_EXvvEp1TpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 16:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6a:9f:b7:dd:b2:cb:1f:b6:58:30:9b:44:23:ae:d0:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48395eb4c0ee2daa5392cd99fc45efbc4a754e90
Validity
Not Before: Sep 4 04:14:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=642f9ea955a64329fc131ed6408872ee1ce86959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:be:8d:12:e5:ef:b3:54:86:98:bc:d0:93:81:
c1:ae:5a:0c:14:35:df:c9:2f:df:2b:91:25:76:e1:
ae:3c:36:ad:68:92:c7:e0:a0:1b:b1:7c:17:ff:57:
ba:dc:c6:b7:7e:2f:ee:25:27:df:e3:f8:01:a9:ae:
ac:6a:4f:9b:24:9a:62:c9:64:42:2a:bf:51:e4:a5:
a3:55:36:f7:a7:59:c5:d0:38:90:98:78:c7:f9:0d:
19:31:7a:20:d0:a3:e7:4e:c9:73:9f:c7:0b:8a:3e:
49:bb:05:f4:bb:22:8f:98:4a:1d:56:49:9b:72:c8:
25:c8:fb:e0:45:50:46:58:c3:b0:a6:cb:7b:80:04:
6d:29:8d:e4:27:2a:7e:dd:09:3a:82:04:2b:08:7c:
ea:5f:38:d0:93:0b:35:01:2b:7a:79:31:d2:66:62:
ab:ef:89:27:e3:35:2f:2b:a9:99:2f:4b:25:13:2d:
1c:94:be:0a:d2:f1:17:e4:7a:46:14:03:04:93:5f:
31:03:25:b1:7b:a7:41:77:76:7f:51:31:ca:7a:47:
fb:0f:8a:8b:dd:85:f2:d0:f8:60:cb:17:61:fb:25:
8d:70:1e:b2:ac:9e:88:af:c7:09:41:e2:88:ec:f3:
23:56:f7:d9:2c:92:a6:07:66:eb:80:00:84:31:9c:
4e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:2F:9E:A9:55:A6:43:29:FC:13:1E:D6:40:88:72:EE:1C:E8:69:59
X509v3 Authority Key Identifier:
keyid:48:39:5E:B4:C0:EE:2D:AA:53:92:CD:99:FC:45:EF:BC:4A:75:4E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SDletMDuLapTks2Z_EXvvEp1TpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/ZC-eqVWmQyn8Ex7WQIhy7hzoaVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.12.0-45.150.14.255
IPv6:
2a0f:8a00::/29
Signature Algorithm: sha256WithRSAEncryption
06:f0:4e:49:82:ea:d6:7f:94:82:a6:97:3d:4d:33:be:cf:7e:
0f:f0:4b:68:6a:02:a1:a3:02:0d:4b:00:30:4b:f2:d5:a9:f4:
9d:ed:b9:97:ff:a0:d0:c3:8b:c1:ae:42:fc:11:b7:39:f2:8a:
5c:2c:05:47:ba:d1:3f:fb:a2:95:49:97:d9:92:c6:86:72:5e:
e7:fe:7a:d5:d8:6b:6b:56:59:a9:e4:cd:23:a1:0f:66:aa:48:
82:b3:42:ab:eb:0a:a0:09:56:06:56:b4:8e:fd:b9:4f:b9:65:
c1:1d:da:5e:f7:92:a8:32:13:60:c7:35:58:96:c5:14:06:2c:
af:5d:55:b1:bd:b5:48:f8:8b:87:37:c8:04:ea:b1:9e:8b:e7:
50:ef:7b:b5:74:27:a6:a1:30:34:69:f3:0c:f5:e8:98:8c:98:
7f:c1:17:3e:58:5b:b1:3a:93:86:e1:81:fa:ed:27:ca:37:5a:
0a:dd:8a:31:52:66:a1:33:27:87:ff:d4:5e:f0:e9:ed:37:4e:
fb:a6:54:56:dd:91:28:6d:b4:f7:00:d4:ae:4c:67:99:52:6f:
3b:33:13:8e:b6:7f:d3:3e:f6:92:7f:4e:cf:49:0e:a9:c4:4e:
03:40:0d:c6:99:0b:4f:f5:22:44:1f:be:de:2a:89:8e:fc:76:
eb:d7:2d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 06:18:02 2026 by rpki-client