Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ctX13MCDTFxSJqqj4g1CgV7ikV0.roa
File: ctX13MCDTFxSJqqj4g1CgV7ikV0.roa (raw, json)
Hash identifier: dKz1YONEo4g6uW+Dn8oWhaxf6UY6myYCgidhSeWQwoU=
Subject key identifier: 72:D5:F5:DC:C0:83:4C:5C:52:26:AA:A3:E2:0D:42:81:5E:E2:91:5D
Certificate issuer: /CN=65a9066d5b6ac3019c2037f579d11bae1a5eea73
Certificate serial: 019CE5FF3A431B08B9F35565359BE36CACA0
Authority key identifier: 65:A9:06:6D:5B:6A:C3:01:9C:20:37:F5:79:D1:1B:AE:1A:5E:EA:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZakGbVtqwwGcIDf1edEbrhpe6nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ctX13MCDTFxSJqqj4g1CgV7ikV0.roa
Signing time: Fri 13 Mar 2026 07:00:34 +0000
ROA not before: Fri 13 Mar 2026 07:00:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24812
IP address blocks: 91.225.4.0/22 maxlen: 22
178.159.208.0/20 maxlen: 24
178.159.208.0/24 maxlen: 24
178.159.209.0/24 maxlen: 24
178.159.210.0/24 maxlen: 24
178.159.211.0/24 maxlen: 24
178.159.212.0/24 maxlen: 24
178.159.213.0/24 maxlen: 24
178.159.214.0/24 maxlen: 24
178.159.215.0/24 maxlen: 24
178.159.216.0/24 maxlen: 24
178.159.217.0/24 maxlen: 24
178.159.218.0/24 maxlen: 24
178.159.219.0/24 maxlen: 24
178.159.220.0/24 maxlen: 24
178.159.221.0/24 maxlen: 24
178.159.222.0/24 maxlen: 24
178.159.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZakGbVtqwwGcIDf1edEbrhpe6nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:ff:3a:43:1b:08:b9:f3:55:65:35:9b:e3:6c:ac:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a9066d5b6ac3019c2037f579d11bae1a5eea73
Validity
Not Before: Mar 13 07:00:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=72d5f5dcc0834c5c5226aaa3e20d42815ee2915d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:20:02:98:cd:40:22:29:67:3e:7d:71:3e:ac:
9c:51:94:a7:6c:b8:f8:d3:79:9e:01:83:78:26:3f:
ef:91:2b:01:10:2b:f3:eb:59:dc:c5:c7:7b:28:ce:
71:95:a7:c2:ee:6a:4a:ed:a7:97:bc:e2:3c:38:f4:
2b:86:d1:a8:c0:a3:5b:cb:e2:14:44:aa:d8:54:02:
27:37:6c:ce:17:7d:42:a6:a7:66:16:52:77:af:f6:
3a:a2:44:45:72:9a:ad:cf:a8:b7:71:69:53:67:17:
32:85:76:97:e4:04:1d:d7:39:56:50:fc:12:b2:58:
73:05:ab:b7:cc:60:82:c4:2c:fb:9c:2e:c8:4a:b4:
ce:25:1e:4c:36:d5:2f:8e:4d:98:33:f0:8d:7c:6a:
88:10:5a:1f:e4:f0:e8:c0:b2:5f:0c:88:33:13:35:
2c:5c:1d:1e:48:2c:a4:61:72:e0:4a:f6:e3:05:35:
a1:d9:ee:4b:43:ec:f3:9a:93:ac:54:06:b9:f1:3c:
d6:8f:75:fd:48:f6:a6:92:51:0f:ea:b7:f3:6e:97:
4b:ed:66:d3:14:6c:44:82:87:5f:05:9f:f8:80:a0:
31:c0:0b:dd:8c:78:8b:44:fc:bf:96:85:a0:6d:75:
5a:4e:5f:c5:82:d8:d3:65:e3:1d:87:11:80:bf:d7:
83:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D5:F5:DC:C0:83:4C:5C:52:26:AA:A3:E2:0D:42:81:5E:E2:91:5D
X509v3 Authority Key Identifier:
keyid:65:A9:06:6D:5B:6A:C3:01:9C:20:37:F5:79:D1:1B:AE:1A:5E:EA:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZakGbVtqwwGcIDf1edEbrhpe6nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ctX13MCDTFxSJqqj4g1CgV7ikV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.4.0/22
178.159.208.0/20
Signature Algorithm: sha256WithRSAEncryption
2e:00:4f:dd:aa:d7:1e:c7:83:4e:1d:bc:be:91:af:8a:79:f0:
7a:69:cb:6c:00:4f:f8:30:4f:32:fb:d8:6c:a3:8a:42:e1:a2:
4a:1e:4b:92:78:a9:65:dd:25:b9:32:07:7a:15:2a:13:3c:5b:
b3:4e:33:8b:94:04:b3:05:ae:75:41:37:b5:75:86:8f:b1:bc:
13:55:6e:07:56:6c:71:d0:8f:4b:bb:e8:43:4d:f2:1a:cf:56:
1f:d2:b8:65:c4:ec:37:53:0b:a9:00:11:fb:6f:ee:80:b1:34:
3c:82:67:ce:59:2c:59:7c:25:56:12:72:c5:69:54:a0:0e:23:
fc:0c:3e:68:52:63:b1:41:8b:a3:49:b0:d2:09:3c:26:05:ca:
f9:5b:3a:56:3f:f0:7d:a1:12:5b:4d:bb:71:8d:f5:ca:60:91:
f0:3e:44:ed:77:f9:c0:78:84:19:d2:58:5e:c1:7c:8f:29:19:
22:53:ba:b8:f9:c9:8f:d7:23:d6:90:a5:2f:bd:0c:9c:9f:b7:
88:46:45:96:bd:4e:1d:cb:85:42:a4:2e:15:4a:a7:9a:bc:60:
a0:87:bb:4a:11:06:13:5a:34:48:83:af:13:56:f2:31:1d:c8:
4d:23:31:6b:a9:db:97:77:b7:9e:27:96:01:39:da:c2:ce:cf:
5e:61:a3:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:47:37 2026 by rpki-client