Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/zwmjAN4LcEyM9uxOrsR0kjbHDxQ.roa
File: zwmjAN4LcEyM9uxOrsR0kjbHDxQ.roa (raw, json)
Hash identifier: tZdW/oSxv26bqccrBhCTEl8SrQVT+jOlShFdNQKzxOY=
Subject key identifier: CF:09:A3:00:DE:0B:70:4C:8C:F6:EC:4E:AE:C4:74:92:36:C7:0F:14
Certificate issuer: /CN=73cf6ab31604599b82d54dd2f40fb2b22b29c21e
Certificate serial: 019F23693FB3BDCFFC93003CB1DFB913AB65
Authority key identifier: 73:CF:6A:B3:16:04:59:9B:82:D5:4D:D2:F4:0F:B2:B2:2B:29:C2:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c89qsxYEWZuC1U3S9A-ysispwh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/zwmjAN4LcEyM9uxOrsR0kjbHDxQ.roa
Signing time: Thu 02 Jul 2026 15:18:47 +0000
ROA not before: Thu 02 Jul 2026 15:18:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213166
IP address blocks: 86.105.182.0/24 maxlen: 24
91.194.110.0/24 maxlen: 24
2a0f:ea81::/32 maxlen: 48
2a0f:ea83::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/c89qsxYEWZuC1U3S9A-ysispwh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/c89qsxYEWZuC1U3S9A-ysispwh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c89qsxYEWZuC1U3S9A-ysispwh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:3f:b3:bd:cf:fc:93:00:3c:b1:df:b9:13:ab:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73cf6ab31604599b82d54dd2f40fb2b22b29c21e
Validity
Not Before: Jul 2 15:18:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf09a300de0b704c8cf6ec4eaec4749236c70f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:21:d4:53:cb:04:87:ac:ad:71:98:d1:c4:f6:
df:48:f8:bd:02:39:a2:87:e2:c4:3d:d5:ed:39:46:
8b:31:07:71:81:ce:2d:b3:93:4b:d8:5b:98:aa:fa:
80:6a:c0:2b:59:95:65:01:05:93:ed:68:83:85:41:
a2:4d:af:31:4f:0a:97:76:2a:4c:3f:b0:fb:3a:1f:
72:ad:02:ba:8b:be:41:af:e4:06:41:87:fe:0a:df:
22:13:c6:f1:43:94:99:89:42:80:3c:97:49:03:e4:
44:01:fe:68:eb:6d:df:ec:74:6b:dc:03:ec:ba:11:
9f:b5:05:0f:b0:35:36:88:ea:86:50:a0:ae:6c:a4:
aa:48:0d:22:3a:f4:07:48:99:97:58:c7:7b:36:61:
69:6b:0f:7b:86:a6:bd:fd:cb:b5:c1:0a:2f:d1:86:
b1:c1:d3:00:9d:3f:97:e6:03:46:da:09:9f:93:43:
79:46:ed:a3:53:6d:1a:4e:b2:58:24:8d:e6:48:32:
54:5e:67:80:49:b2:c2:39:f2:b3:dc:d9:51:55:8b:
c0:78:a6:2b:04:6c:9e:92:81:bf:68:5f:27:2e:2b:
26:07:2b:86:e2:66:4e:88:59:a3:04:07:b7:de:09:
65:23:e7:2f:af:7c:17:e0:fa:7a:6f:5a:fb:5b:8b:
aa:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:09:A3:00:DE:0B:70:4C:8C:F6:EC:4E:AE:C4:74:92:36:C7:0F:14
X509v3 Authority Key Identifier:
keyid:73:CF:6A:B3:16:04:59:9B:82:D5:4D:D2:F4:0F:B2:B2:2B:29:C2:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c89qsxYEWZuC1U3S9A-ysispwh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/zwmjAN4LcEyM9uxOrsR0kjbHDxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/c89qsxYEWZuC1U3S9A-ysispwh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.105.182.0/24
91.194.110.0/24
IPv6:
2a0f:ea81::/32
2a0f:ea83::/32
Signature Algorithm: sha256WithRSAEncryption
59:f1:75:58:b2:aa:2e:6b:69:e6:5b:ce:57:d2:1b:a3:b4:f1:
0b:5a:39:34:51:34:85:a8:72:1e:41:58:d9:ae:4a:9e:f4:8c:
2f:c1:28:9d:79:d6:ac:82:f1:52:24:44:7a:d9:83:a4:8e:11:
1d:95:8c:23:b6:63:85:54:57:c9:29:48:c7:7e:bd:a4:4c:1c:
20:62:14:36:be:e8:5b:e5:c1:80:de:bc:86:b3:5f:df:ec:06:
a1:8d:e7:96:1e:62:68:fe:8a:f8:0c:b4:5c:b4:bb:ee:2a:a0:
7e:61:a5:fc:6a:c3:0f:0c:22:32:88:1f:6a:70:c1:46:fb:7f:
19:e5:f1:35:f3:e6:a8:35:63:9b:53:4e:ff:40:f4:0f:df:09:
3a:1c:b2:b2:09:74:93:a0:77:a9:eb:ac:de:7f:c7:5a:2e:be:
e7:d7:41:b5:c2:c1:18:05:6c:5f:c7:77:8a:1c:f5:f0:06:88:
0d:4e:4e:c3:7a:d9:c9:e7:e1:63:b5:e1:c1:e9:dd:0e:b5:b4:
cc:68:03:fe:4f:f7:a8:e4:4e:91:d7:74:bd:fd:c7:36:04:94:
38:9a:7c:6c:ea:c3:7f:f6:47:d2:c8:90:93:f1:87:f5:3d:de:
91:49:0b:54:25:9d:8b:b7:b0:be:e8:21:20:92:3e:0c:fe:a0:
6f:48:d0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:23:53 2026 by rpki-client