Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/zZ5FzDx5r94DHz5RCT2Alf8TUjo.roa
File: zZ5FzDx5r94DHz5RCT2Alf8TUjo.roa (raw, json)
Hash identifier: gM7F7qwmwQieS17kUSf9sVT/GPAoYrfsduMF3EwlYsE=
Subject key identifier: CD:9E:45:CC:3C:79:AF:DE:03:1F:3E:51:09:3D:80:95:FF:13:52:3A
Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819
Certificate serial: 01A0D88781D752DD014238D8B8E3D44880BF
Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/zZ5FzDx5r94DHz5RCT2Alf8TUjo.roa
Signing time: Fri 25 Sep 2026 12:25:54 +0000
ROA not before: Fri 25 Sep 2026 12:25:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8932
IP address blocks: 46.36.124.0/22 maxlen: 24
46.36.124.0/24 maxlen: 24
46.36.125.0/24 maxlen: 24
46.36.126.0/24 maxlen: 24
46.36.127.0/24 maxlen: 24
46.162.220.0/22 maxlen: 24
46.162.220.0/24 maxlen: 24
46.162.221.0/24 maxlen: 24
46.162.222.0/24 maxlen: 24
46.162.223.0/24 maxlen: 24
82.199.203.0/24 maxlen: 24
185.48.240.0/22 maxlen: 24
185.48.240.0/24 maxlen: 24
185.48.241.0/24 maxlen: 24
185.48.242.0/24 maxlen: 24
185.48.243.0/24 maxlen: 24
2a00:cc40:1::/48 maxlen: 48
2a00:cc40:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:87:81:d7:52:dd:01:42:38:d8:b8:e3:d4:48:80:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819
Validity
Not Before: Sep 25 12:25:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cd9e45cc3c79afde031f3e51093d8095ff13523a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:03:d6:8c:e0:5b:a0:91:8c:42:47:b9:a1:c0:
0e:5a:ab:ea:c7:b9:dc:78:40:d7:82:b0:86:44:f8:
f3:2c:79:57:19:44:ac:45:0a:cb:13:25:a8:22:eb:
0b:3f:12:85:b6:d8:af:d3:5e:fa:7e:0c:97:1e:bc:
ee:d0:06:3e:c9:56:6c:cd:68:76:9f:da:14:d9:f1:
85:3c:60:67:70:1a:d2:58:8e:1e:e5:50:5f:47:0b:
22:92:77:69:10:bc:95:7e:02:55:33:57:9a:bd:02:
0d:4b:c7:11:09:f1:e4:86:30:5f:dd:22:42:c2:9c:
6f:a6:5f:3e:1c:64:ab:31:c4:05:b8:46:71:94:e1:
94:fc:6a:9e:d4:20:49:0d:83:53:c9:35:bb:ea:36:
cd:2f:38:a1:02:a2:ab:10:df:e5:23:bb:51:a6:d4:
52:83:4e:9d:fa:a3:f2:07:7d:07:df:2a:c7:b7:39:
af:65:61:86:e0:ca:1c:3a:5d:e4:42:47:18:fa:59:
47:fb:db:69:31:cf:fc:7d:16:56:c2:d0:11:b3:9c:
f1:7b:be:61:43:90:b0:7f:03:23:0b:f2:5d:4a:e1:
14:e9:51:90:53:32:5e:72:9c:79:a3:7b:c7:75:3c:
c7:0c:24:05:f5:9f:8b:e7:d2:06:2a:e7:c4:a2:9f:
f9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:9E:45:CC:3C:79:AF:DE:03:1F:3E:51:09:3D:80:95:FF:13:52:3A
X509v3 Authority Key Identifier:
keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/zZ5FzDx5r94DHz5RCT2Alf8TUjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.36.124.0/22
46.162.220.0/22
82.199.203.0/24
185.48.240.0/22
IPv6:
2a00:cc40:1::-2a00:cc40:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
47:28:50:5c:62:21:90:5e:02:59:f1:57:ac:2e:95:75:00:a3:
8c:8e:7e:1f:2e:dd:e9:7e:c1:75:db:6c:b4:d8:d0:ca:94:5a:
45:41:5a:39:a2:00:08:f6:b7:bd:3b:d8:d2:76:35:a2:df:7c:
0c:6b:45:2e:7b:2b:fb:d7:d2:72:68:5a:34:00:a3:17:42:67:
e1:d5:0c:0d:d7:c7:e2:38:55:7c:b9:27:9a:a9:23:03:51:c5:
6a:06:0d:55:ca:e1:db:66:e4:44:b4:e7:6c:38:a1:06:25:53:
73:5c:03:6a:bf:38:e0:8c:e2:20:30:e2:f1:9c:86:f6:d3:b7:
fa:2a:c4:32:ca:2b:b0:35:d8:b9:f8:b9:55:c9:c5:27:5b:1c:
d3:1f:7f:a5:09:fb:de:8b:b3:61:b4:85:3d:38:c4:e8:a9:b7:
9a:b8:d6:e5:bf:8d:3f:69:9d:7a:69:d5:7a:78:49:3a:f0:57:
51:f2:3d:ba:65:a6:1c:1b:7b:9a:84:37:1b:53:df:fb:51:04:
28:5c:14:dc:f7:a4:d7:57:a3:a0:3e:84:c7:6a:0f:34:5b:fd:
e4:07:31:4d:b4:18:79:3f:84:81:03:05:32:c7:d5:58:2a:67:
e0:19:f2:d6:4a:75:37:07:b7:b9:d2:be:85:4d:2e:64:65:ff:
10:29:3e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:32:14 2026 by rpki-client