Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/ZI-MShlThOM7MmKhvKsXH3X5V7o.roa
File: ZI-MShlThOM7MmKhvKsXH3X5V7o.roa (raw, json)
Hash identifier: c+aesfiAR4qnVM9MuqdOghCy4EQQegO3MHfJlwBvics=
Subject key identifier: 64:8F:8C:4A:19:53:84:E3:3B:32:62:A1:BC:AB:17:1F:75:F9:57:BA
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 019F80B998968F4D51341C92B0F0BBAC568C
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/ZI-MShlThOM7MmKhvKsXH3X5V7o.roa
Signing time: Mon 20 Jul 2026 18:11:14 +0000
ROA not before: Mon 20 Jul 2026 18:11:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209847
IP address blocks: 5.181.20.0/24 maxlen: 24
91.194.11.0/24 maxlen: 24
146.19.106.0/24 maxlen: 24
185.74.222.0/24 maxlen: 24
185.234.247.0/24 maxlen: 24
195.16.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:80:b9:98:96:8f:4d:51:34:1c:92:b0:f0:bb:ac:56:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Jul 20 18:11:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=648f8c4a195384e33b3262a1bcab171f75f957ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2d:89:b8:0c:5c:57:3d:e2:76:53:43:7f:52:
19:9b:49:dd:2f:05:be:1c:13:0d:ce:fb:ae:ed:9b:
be:a3:45:a9:e0:9f:c3:a5:35:e8:51:e2:bd:78:1b:
23:74:57:d3:1d:c7:2d:3d:e6:c0:f7:e2:1c:40:dc:
7d:00:86:34:eb:1c:bc:20:a1:3a:ad:35:c0:26:92:
6c:b9:4f:fa:35:92:20:0a:3b:a6:23:10:e5:35:36:
ed:7b:9f:dc:f2:cc:52:75:20:27:3d:45:d7:3d:92:
8a:59:be:1a:64:3d:27:cb:45:35:1b:f3:6c:99:6d:
14:fb:a4:c5:44:d0:50:89:8d:9d:1f:6b:4b:8f:73:
84:43:a3:e3:87:05:b9:3d:d2:94:84:bf:51:b1:1f:
25:74:c6:95:e3:ee:22:8d:65:eb:c8:ca:39:ee:82:
82:06:cc:3c:a9:82:08:18:13:38:9a:b7:c6:0f:db:
94:6e:56:b5:ff:b0:10:33:d7:9b:36:a6:af:8d:7d:
21:a8:5f:0d:e4:1c:5f:ba:2d:92:eb:f4:cd:08:9f:
8e:ef:05:05:06:a9:fe:75:0b:88:48:c6:4f:3a:82:
16:80:36:da:df:c4:37:8d:34:11:7d:43:b6:67:0b:
fe:5a:e2:fd:69:b3:47:de:59:22:d7:2c:82:ee:04:
9c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:8F:8C:4A:19:53:84:E3:3B:32:62:A1:BC:AB:17:1F:75:F9:57:BA
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/ZI-MShlThOM7MmKhvKsXH3X5V7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.20.0/24
91.194.11.0/24
146.19.106.0/24
185.74.222.0/24
185.234.247.0/24
195.16.74.0/24
Signature Algorithm: sha256WithRSAEncryption
40:94:71:f8:e4:2c:2f:82:74:ad:47:71:dd:6a:4b:fc:d5:45:
92:b0:f6:70:8f:bc:3c:e4:54:1f:89:59:f2:ca:05:7b:bb:14:
23:60:7c:0e:d3:f4:da:10:03:b0:cc:45:87:4e:c6:1b:9d:9f:
b1:df:b3:c8:a0:f4:a5:98:33:6a:fd:59:b4:2f:2c:0c:97:b2:
16:83:d7:7e:5e:d2:58:b9:68:ea:69:13:d6:62:d7:6a:2e:06:
aa:17:c7:bf:66:a7:46:94:2d:3b:83:2f:cf:b1:e9:dd:85:c1:
c1:fc:bf:de:8c:5e:de:b6:1f:46:e2:f1:96:19:42:d9:99:4e:
04:d7:39:fe:61:a6:a7:3c:bf:fa:a6:a5:cc:db:51:32:fa:a7:
9a:53:7f:dd:4e:ac:9f:27:19:15:1b:0e:1b:74:d4:ea:06:9e:
fd:b9:cf:40:7a:32:c9:81:f5:2a:b1:b4:54:cf:aa:e9:7c:57:
d6:a4:04:6e:bc:30:fc:ac:33:04:3a:02:68:f4:7d:52:0d:31:
dc:56:fb:17:d4:cc:58:4f:3c:c0:fe:2a:29:42:b3:47:60:e0:
e2:6f:47:65:f4:c5:90:72:8d:f2:f0:69:fa:f3:04:28:80:f3:
ae:78:49:bf:72:a7:6d:2e:fd:92:3e:86:e4:51:20:65:a6:3d:
7c:b9:12:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:36:26 2026 by rpki-client