Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZWwoTpcGYnsnU93DjUku_cD6ing.roa
File: ZWwoTpcGYnsnU93DjUku_cD6ing.roa (raw, json)
Hash identifier: 2YXsvXCKmAlIUOM3SpJm+F/NRfn56hCU1h+I7qxpAOg=
Subject key identifier: 65:6C:28:4E:97:06:62:7B:27:53:DD:C3:8D:49:2E:FD:C0:FA:8A:78
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019D0671BD3FDDCE767FA963FA2BC58E1108
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZWwoTpcGYnsnU93DjUku_cD6ing.roa
Signing time: Thu 19 Mar 2026 14:13:30 +0000
ROA not before: Thu 19 Mar 2026 14:13:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48090
IP address blocks: 93.123.109.0/24 maxlen: 24
193.47.62.0/24 maxlen: 24
195.178.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 14:13:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:06:71:bd:3f:dd:ce:76:7f:a9:63:fa:2b:c5:8e:11:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 19 14:13:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=656c284e9706627b2753ddc38d492efdc0fa8a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7d:ad:13:56:37:c5:a5:5f:4b:07:7c:82:f9:
38:05:a2:50:57:7b:08:c7:7e:7c:0e:3d:64:8e:64:
e8:ef:f5:79:9c:5c:64:ba:dd:97:87:ab:e8:2c:49:
8b:66:e2:fb:6a:de:4b:cb:72:65:d5:67:df:e5:20:
2b:88:a5:87:d3:b2:e7:5e:e4:53:fa:47:f8:9e:ea:
be:f5:b7:70:20:c2:5d:d8:d1:ab:aa:77:84:d6:24:
b7:49:ea:95:ec:ee:28:f8:74:53:23:2c:4f:f7:c8:
9f:ea:2c:56:0c:df:7d:8e:11:d2:89:9f:69:2c:28:
7f:57:85:c0:0c:1b:1b:8a:1e:aa:0f:76:22:ea:90:
1c:33:36:bc:34:14:36:0d:5d:d9:4d:a5:d5:85:58:
aa:65:32:0f:b8:3e:15:8b:1f:f0:02:20:b3:84:5a:
d2:63:1b:62:51:de:8c:ca:1b:35:99:f7:fd:61:70:
67:c5:70:79:d0:c8:fc:91:b5:05:32:eb:ce:1d:9a:
0e:02:e1:35:52:ad:03:14:af:cc:92:0f:5c:ae:c0:
1f:8d:7e:39:dd:bd:ec:c5:ed:05:25:76:e3:7d:9b:
63:6b:88:cc:ec:0a:11:ed:be:de:79:4c:c7:6d:36:
b1:cb:bf:52:57:c8:98:b5:3d:45:24:da:f8:1d:d3:
66:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:6C:28:4E:97:06:62:7B:27:53:DD:C3:8D:49:2E:FD:C0:FA:8A:78
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZWwoTpcGYnsnU93DjUku_cD6ing.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.109.0/24
193.47.62.0/24
195.178.110.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:47:bd:89:5e:8a:88:97:ea:90:2d:e4:59:c1:9b:49:ce:90:
97:de:09:1c:47:e3:cb:45:d1:6e:86:d9:7d:bb:b4:11:5c:ab:
45:bc:a4:bd:1d:63:7b:0a:d1:2e:54:1b:7b:c3:2f:55:d9:01:
37:6c:ef:08:e4:4b:10:d6:66:ab:a4:11:91:60:2c:c2:ac:d2:
72:30:a0:7d:40:e9:cc:47:8e:1b:8c:b3:1a:28:ed:bb:67:a5:
1d:8e:ba:77:af:c7:79:ef:db:72:a3:61:76:fc:91:a1:f5:23:
86:04:5c:9d:89:1a:c3:2d:41:ce:ce:b7:17:ea:f1:83:e2:32:
ee:ee:3a:e0:e6:b9:cd:fd:a7:8d:bd:fe:7e:e7:53:5b:39:1d:
df:98:cf:e9:71:b7:ed:3a:88:3b:6d:63:20:8c:6c:3c:97:64:
b4:63:8c:12:ec:1f:92:25:68:01:d1:b9:7b:e7:da:63:c8:86:
81:46:40:fa:71:bf:af:ad:80:9e:a2:1b:76:6a:5c:5f:6b:08:
19:c1:1b:19:3e:7d:7e:e4:bb:42:1d:51:2f:c8:b2:5b:9e:bd:
8f:1d:57:c0:2d:0f:14:d9:86:ad:dd:0f:67:02:2b:87:2f:fc:
b0:bd:4c:cd:7d:07:25:da:1a:d5:0d:29:d8:b3:1f:d5:be:85:
6f:f6:b0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 22:37:34 2026 by rpki-client