Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/ZmIFIEVu46bVEgWE0zUBsAINkTs.roa
File: ZmIFIEVu46bVEgWE0zUBsAINkTs.roa (raw, json)
Hash identifier: iSzOBD/HALWr8ujWx7hY1tFRVzyH/acGcUK+4zHrqnc=
Subject key identifier: 66:62:05:20:45:6E:E3:A6:D5:12:05:84:D3:35:01:B0:02:0D:91:3B
Certificate issuer: /CN=9a24b27d9f3df6e14ebc79e146e8be32754bf800
Certificate serial: 019D25068AE1ED596991CA2FB0BE673CA36C
Authority key identifier: 9A:24:B2:7D:9F:3D:F6:E1:4E:BC:79:E1:46:E8:BE:32:75:4B:F8:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/ZmIFIEVu46bVEgWE0zUBsAINkTs.roa
Signing time: Wed 25 Mar 2026 12:44:38 +0000
ROA not before: Wed 25 Mar 2026 12:44:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 172.216.13.0/24 maxlen: 24
172.216.14.0/24 maxlen: 24
172.216.15.0/24 maxlen: 24
172.216.18.0/24 maxlen: 24
172.216.19.0/24 maxlen: 24
2a09:a702:24::/48 maxlen: 48
2a09:a702:ae::/48 maxlen: 48
2a09:a702:af::/48 maxlen: 48
2a09:a702:b2::/48 maxlen: 48
2a09:a702:b3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft
rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:06:8a:e1:ed:59:69:91:ca:2f:b0:be:67:3c:a3:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a24b27d9f3df6e14ebc79e146e8be32754bf800
Validity
Not Before: Mar 25 12:44:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=66620520456ee3a6d5120584d33501b0020d913b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d2:7f:5e:bd:7e:60:ad:82:1e:d7:68:70:2a:
9e:20:a4:1a:65:69:04:ac:76:9f:68:7b:90:37:ec:
68:08:09:74:91:82:de:46:49:06:1b:f4:da:ee:d3:
72:80:31:a0:f6:bb:88:7c:e4:ad:bc:6a:1d:9c:61:
17:0c:64:4b:d6:74:23:89:61:ee:b6:4f:5b:85:75:
6d:c1:88:00:a8:7e:e2:42:df:5a:6e:5f:ac:2a:2b:
29:94:81:a0:1f:a5:9e:53:65:99:b4:1b:95:0e:fc:
37:f4:98:0c:45:13:6f:3f:dd:ae:ad:74:97:23:b0:
53:d3:49:6a:2b:19:03:cb:7c:f2:e2:3b:b7:2a:d6:
05:e6:dc:74:2b:39:e9:5d:db:b7:7c:ea:f4:ce:46:
6c:0a:60:c3:26:e2:59:39:39:86:70:46:23:4a:ed:
45:cd:b1:c7:3b:f6:fe:e5:55:e3:26:17:59:d5:80:
5f:31:30:f0:06:9e:01:bb:de:d8:39:6d:67:d6:72:
4a:20:dd:1f:5b:a4:af:ab:3d:2e:58:1a:fa:e3:7b:
ba:0c:96:33:92:65:ec:49:5f:bb:7a:5f:58:04:5b:
b3:e3:91:7c:ec:ea:43:b5:d2:0a:3a:6f:e9:e4:67:
7f:97:42:6a:f7:ff:dc:f7:c1:67:a1:33:1d:0f:ec:
52:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:62:05:20:45:6E:E3:A6:D5:12:05:84:D3:35:01:B0:02:0D:91:3B
X509v3 Authority Key Identifier:
keyid:9A:24:B2:7D:9F:3D:F6:E1:4E:BC:79:E1:46:E8:BE:32:75:4B:F8:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/ZmIFIEVu46bVEgWE0zUBsAINkTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
172.216.13.0-172.216.15.255
172.216.18.0/23
IPv6:
2a09:a702:24::/48
2a09:a702:ae::/47
2a09:a702:b2::/47
Signature Algorithm: sha256WithRSAEncryption
41:0c:08:96:8a:6e:8c:d3:d3:aa:51:6d:09:56:34:b9:cd:42:
8c:e4:27:31:a6:24:7a:6b:74:b2:dd:06:13:b8:94:08:a6:17:
46:e3:22:04:32:99:6f:09:ab:43:2d:b9:52:0b:77:37:bc:c3:
ef:3b:a3:b5:82:af:3b:dd:7c:97:52:36:08:97:79:68:13:f2:
86:97:4c:51:07:f9:8f:45:1e:59:c1:6a:fc:4e:f6:c2:42:59:
68:df:6d:ba:c2:31:b3:fd:c0:8d:d5:fe:aa:5e:1b:e1:d5:c0:
c8:ce:bf:d0:b2:a0:03:82:c3:4b:79:f4:52:3f:77:fc:31:7f:
b1:9d:82:b9:57:25:c5:23:ad:2f:ed:d2:10:67:54:b4:8f:58:
9c:49:33:70:af:01:84:a5:0a:f2:43:1c:d5:22:74:b8:76:7a:
fe:a3:63:93:1f:3e:81:97:36:22:6b:ae:5b:9b:7e:80:c0:05:
7b:92:0b:ca:58:6f:f3:15:a3:64:5c:0a:bd:a5:ea:2e:36:05:
76:c5:0b:13:08:c6:2d:93:9f:e8:11:54:ac:86:c8:32:73:c1:
5d:e4:f8:00:e6:f1:94:a2:fe:57:09:7f:b5:3a:c0:ed:34:16:
03:53:d5:b9:a3:46:73:61:f6:20:51:89:2c:70:6c:9e:6f:58:
2a:ba:ba:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:07:31 2026 by rpki-client