Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/z0K00AN-ZgTId0zC9FJ6gcAWYK0.roa
File: z0K00AN-ZgTId0zC9FJ6gcAWYK0.roa (raw, json)
Hash identifier: y8/IKYI2cz+f6Y+MV/xDeMY/QgAZYAuPdjWIF/6Q5+Q=
Subject key identifier: CF:42:B4:D0:03:7E:66:04:C8:77:4C:C2:F4:52:7A:81:C0:16:60:AD
Certificate issuer: /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Certificate serial: 019D0D49217B43FD70EB884770C2629BEED1
Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/z0K00AN-ZgTId0zC9FJ6gcAWYK0.roa
Signing time: Fri 20 Mar 2026 22:06:29 +0000
ROA not before: Fri 20 Mar 2026 22:06:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 178.236.32.0/24 maxlen: 24
178.236.35.0/24 maxlen: 24
185.49.104.0/24 maxlen: 24
185.49.105.0/24 maxlen: 24
185.118.12.0/24 maxlen: 24
185.118.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0d:49:21:7b:43:fd:70:eb:88:47:70:c2:62:9b:ee:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Validity
Not Before: Mar 20 22:06:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf42b4d0037e6604c8774cc2f4527a81c01660ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:59:53:d9:b9:36:26:fc:49:c0:d3:69:2b:a5:
56:66:e8:2d:d9:66:cc:ba:a9:95:f5:a9:8a:d5:b9:
d3:09:4c:df:3c:22:86:b2:2f:bd:8c:03:69:0d:eb:
b5:24:9a:ab:7f:2f:06:e1:4f:01:9a:ca:43:39:7a:
14:7a:80:86:1e:2e:72:c0:61:00:1e:df:13:33:11:
82:2d:46:8e:3e:fc:9d:88:46:6a:46:d0:94:ac:23:
cc:c5:d2:b7:37:65:7a:28:8e:e9:c3:4f:6f:df:9a:
9c:69:d6:8f:75:09:58:f9:05:68:34:39:7f:9a:96:
6c:73:cb:16:96:08:90:a9:4a:bc:13:24:9d:f8:8f:
5a:04:98:51:af:98:92:ef:b0:bc:f0:e3:2e:51:29:
8a:14:16:da:d9:6d:11:6e:07:7a:13:76:4d:1b:57:
b6:38:a8:5c:eb:66:ad:85:b0:8a:f5:b4:62:a1:24:
7d:90:81:0a:48:c5:21:52:0c:03:00:b0:2b:35:78:
cb:9a:9f:e0:fe:d6:6b:6a:8c:00:fc:5e:66:51:61:
17:02:90:3e:2a:30:69:67:65:50:b1:2b:e7:83:90:
0e:18:44:79:59:72:9b:cd:1d:0c:ed:dd:c7:08:31:
95:02:ef:d1:7c:50:5d:c6:5e:6d:30:9f:12:f2:9e:
dc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:42:B4:D0:03:7E:66:04:C8:77:4C:C2:F4:52:7A:81:C0:16:60:AD
X509v3 Authority Key Identifier:
keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/z0K00AN-ZgTId0zC9FJ6gcAWYK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.32.0/24
178.236.35.0/24
185.49.104.0/23
185.118.12.0/24
185.118.15.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:d1:66:f7:c7:bc:b7:ed:f0:e4:56:43:08:5e:b1:59:32:fb:
4d:30:67:c3:3d:7c:a7:65:3e:d3:be:fe:e6:1a:68:68:5e:73:
72:a8:45:3b:1f:66:27:c9:6d:15:47:b2:6a:07:88:fe:0e:89:
7a:69:86:88:34:94:75:f3:27:4c:2a:e4:12:13:b3:90:f3:f8:
1d:f3:13:a6:50:c0:40:5f:e0:d0:b2:15:90:6f:8d:67:cf:30:
20:a6:ca:ce:b8:bb:b2:3d:8d:06:e1:48:da:9b:d8:24:27:ab:
4f:ff:de:4b:f6:03:5e:e4:fe:ce:4f:e1:90:8a:f2:4f:c8:70:
e0:ba:d5:56:5c:0a:9f:0a:6f:11:4e:cf:29:73:81:1c:40:71:
09:b1:41:0e:50:65:78:05:f3:03:ea:1d:ea:bf:bb:5c:ef:b8:
ce:d9:a4:71:d7:9a:74:73:71:59:fa:b0:3d:3b:95:58:6a:04:
14:e5:69:86:ef:89:49:0d:be:f4:05:7b:fd:79:26:52:8e:95:
fa:05:f7:2e:10:67:31:df:58:ae:ad:ef:5c:1c:9e:1b:2f:96:
66:70:f2:cf:0e:84:c3:da:72:95:fb:91:75:69:9e:13:9c:b3:
27:92:39:7c:e8:2d:10:a0:60:23:16:3b:d6:0f:74:ca:44:78:
f3:9a:a4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:08:57 2026 by rpki-client