Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/zTyOaZVJRNqm7xPEXeawtemUEnw.roa
File: zTyOaZVJRNqm7xPEXeawtemUEnw.roa (raw, json)
Hash identifier: 9OR27W3K9Dh+cWmTjM1o1lfjwYRTrQXcjDRhJpEivC8=
Subject key identifier: CD:3C:8E:69:95:49:44:DA:A6:EF:13:C4:5D:E6:B0:B5:E9:94:12:7C
Certificate issuer: /CN=c1fb492f0a188f0014278e0df6bbb029cebadbaf
Certificate serial: 019B78A2A54C8AED29922DDD8A49C0F45CE2
Authority key identifier: C1:FB:49:2F:0A:18:8F:00:14:27:8E:0D:F6:BB:B0:29:CE:BA:DB:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wftJLwoYjwAUJ44N9ruwKc66268.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/zTyOaZVJRNqm7xPEXeawtemUEnw.roa
Signing time: Thu 01 Jan 2026 08:18:03 +0000
ROA not before: Thu 01 Jan 2026 08:18:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60064
IP address blocks: 185.63.252.0/24 maxlen: 24
185.63.253.0/24 maxlen: 24
185.63.254.0/24 maxlen: 24
2a04:f780::/32 maxlen: 32
2a04:f781::/40 maxlen: 40
2a04:f781:100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.mft
rsync://rpki.ripe.net/repository/DEFAULT/wftJLwoYjwAUJ44N9ruwKc66268.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Feb 2026 15:25:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a2:a5:4c:8a:ed:29:92:2d:dd:8a:49:c0:f4:5c:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1fb492f0a188f0014278e0df6bbb029cebadbaf
Validity
Not Before: Jan 1 08:18:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cd3c8e69954944daa6ef13c45de6b0b5e994127c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:82:a5:58:6b:00:44:3e:b2:c6:4f:50:1e:73:
cb:75:6b:ed:d6:92:47:90:62:a4:82:e4:eb:05:a7:
e1:9b:b1:1c:08:b3:df:f7:8a:38:cc:a5:bc:37:b7:
0f:a7:70:cc:93:e2:6e:9b:83:c1:7e:6a:1e:e6:4b:
00:d9:d0:53:bf:28:a1:a5:04:a5:e2:61:11:dd:de:
32:95:be:bd:9e:c2:f2:a6:d0:ef:3b:6a:d6:2d:6c:
59:04:60:21:20:ff:d5:54:1b:5d:f2:5d:6b:63:92:
6f:39:a2:c3:8a:58:dd:c5:28:a6:b4:7c:9e:55:22:
4c:c8:46:f4:5d:4b:6d:27:49:65:b1:d6:49:cd:61:
6f:3c:04:97:89:df:ee:d7:9f:65:f7:2b:57:57:03:
b8:2a:de:f8:6b:fb:94:da:b2:55:26:f2:3d:b3:86:
95:a2:78:63:4e:2a:4d:4f:4e:e9:96:68:de:ce:41:
29:de:3e:66:f1:b1:e0:3c:a6:50:15:37:3d:77:62:
23:0f:96:24:45:21:51:65:8f:f9:34:9f:16:5b:9a:
23:c1:47:ce:c2:9d:2f:bd:6b:8a:8d:c2:6a:e8:34:
f3:42:17:b9:3a:35:4a:61:d0:7b:33:77:e4:0d:55:
8e:04:e8:e2:ad:98:52:b1:5e:d4:84:22:4a:5c:aa:
bf:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:3C:8E:69:95:49:44:DA:A6:EF:13:C4:5D:E6:B0:B5:E9:94:12:7C
X509v3 Authority Key Identifier:
keyid:C1:FB:49:2F:0A:18:8F:00:14:27:8E:0D:F6:BB:B0:29:CE:BA:DB:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wftJLwoYjwAUJ44N9ruwKc66268.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/zTyOaZVJRNqm7xPEXeawtemUEnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.252.0-185.63.254.255
IPv6:
2a04:f780::-2a04:f781:1ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
01:5a:f7:c1:d3:64:57:0a:a7:8f:c6:00:b5:ed:f1:be:e0:f7:
9c:e6:81:d9:3c:c6:80:fc:df:54:32:15:48:9a:28:8e:67:48:
06:a9:95:08:a1:6a:dd:11:8c:e8:69:78:2c:65:56:dc:76:66:
96:d3:45:45:42:8e:bf:83:c8:f4:40:f2:94:9b:fc:ff:30:aa:
36:c7:3a:2e:f9:f8:aa:cb:a4:f8:f9:8a:47:4e:58:91:94:53:
fe:52:6b:de:72:e6:fe:62:8f:04:02:39:1c:d2:69:fe:ba:0e:
ef:96:f7:b2:b7:d3:26:40:62:ea:61:74:4f:66:84:36:e6:7d:
09:8c:de:44:3a:fb:18:77:f3:b8:11:c2:5f:12:62:2f:96:aa:
c6:57:d1:26:e6:f8:60:40:4b:19:38:f3:f2:d7:78:da:73:d7:
e4:e3:0f:b1:af:2b:6b:94:5c:b1:11:ef:31:61:63:2a:2b:5f:
15:5a:e5:47:80:c7:01:99:db:52:59:da:3e:1e:73:83:22:6a:
ea:87:43:dd:16:24:37:55:35:aa:39:54:06:ae:d5:7e:51:71:
2c:e8:a9:5d:38:59:7d:d9:88:b2:c0:c5:61:da:c0:f0:e1:e8:
c7:8f:e9:10:18:15:9b:d0:10:4c:75:58:12:64:19:c2:63:87:
89:f2:de:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:43:11 2026 by rpki-client