Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zd0GSXLVC9hla0dZISY7XiTlRWo.roa
File: zd0GSXLVC9hla0dZISY7XiTlRWo.roa (raw, json)
Hash identifier: S7od2rFfyy8QjxMZLoK9Y2miZa+N5mOMB9MnIvMIOFI=
Subject key identifier: CD:DD:06:49:72:D5:0B:D8:65:6B:47:59:21:26:3B:5E:24:E5:45:6A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019E8C957F247E1590E30F386484B6958019
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zd0GSXLVC9hla0dZISY7XiTlRWo.roa
Signing time: Wed 03 Jun 2026 08:24:28 +0000
ROA not before: Wed 03 Jun 2026 08:24:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 31.13.224.0/24 maxlen: 24
37.139.128.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.91.194.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
83.143.113.0/24 maxlen: 24
84.54.51.0/24 maxlen: 24
85.217.130.0/23 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.126.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.120.191.0/24 maxlen: 24
91.92.21.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.100.0/23 maxlen: 24
93.123.109.0/24 maxlen: 24
94.156.188.0/24 maxlen: 32
147.78.101.0/24 maxlen: 24
185.218.84.0/22 maxlen: 24
185.222.160.0/24 maxlen: 24
185.246.221.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8c:95:7f:24:7e:15:90:e3:0f:38:64:84:b6:95:80:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 3 08:24:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cddd064972d50bd8656b475921263b5e24e5456a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:71:df:de:c4:d8:42:c1:66:39:50:5a:1b:16:
85:f2:af:3f:ab:6f:90:35:3e:e6:fb:34:92:75:a5:
65:b4:a5:6f:15:8a:fa:d2:87:0a:0d:14:e0:5c:55:
34:2a:d4:47:06:18:cf:82:1e:d8:99:db:09:d5:02:
87:f1:a6:cd:b7:23:8b:a8:b8:d2:49:2a:6a:c5:d0:
19:89:6b:94:f6:bb:44:d6:5b:aa:ae:63:0b:db:27:
59:0d:3d:e9:a3:89:39:6b:92:6f:bc:97:ae:ac:5d:
61:f5:37:4b:51:c5:68:af:31:a0:b8:94:62:27:4c:
a6:66:3b:f1:3d:da:90:4f:c9:06:e6:12:c0:18:8f:
e2:25:ff:28:2c:21:80:3c:8f:cb:5f:71:ca:8b:4b:
89:a3:82:cc:96:91:eb:12:ae:1c:29:e6:48:05:9e:
0a:a3:b4:b3:a1:12:11:15:0a:60:3b:ba:14:7d:17:
b0:64:4b:2a:62:31:ba:1d:3e:60:59:2f:57:86:5d:
1f:07:a3:07:db:b1:3e:a0:23:f7:4e:ce:5b:d5:6e:
a9:28:c4:c2:67:27:39:c5:08:2e:e0:5d:f9:87:ef:
40:23:67:c4:af:61:a4:5b:76:58:4a:fb:a3:2f:4b:
c4:64:ee:33:ce:db:85:a8:a8:80:1a:70:ed:07:b9:
a6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:DD:06:49:72:D5:0B:D8:65:6B:47:59:21:26:3B:5E:24:E5:45:6A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zd0GSXLVC9hla0dZISY7XiTlRWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.224.0/24
37.139.128.0/24
45.66.228.0/24
45.66.231.0/24
45.89.247.0/24
45.91.194.0/24
45.141.158.0/24
81.161.238.0/24
83.143.113.0/24
84.54.51.0/24
85.217.130.0/23
87.120.87.0/24
87.120.126.0/24
87.120.166.0/24
87.120.191.0/24
91.92.21.0/24
92.249.50.0/24
93.123.100.0/23
93.123.109.0/24
94.156.188.0/24
147.78.101.0/24
185.218.84.0/22
185.222.160.0/24
185.246.221.0/24
194.55.186.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:23:a8:0b:5f:86:76:66:29:58:ca:69:72:4e:03:6b:c5:03:
53:01:44:a6:87:58:83:ef:f4:dd:e6:72:61:4d:43:09:8e:97:
3e:58:84:f1:fc:d2:2b:eb:c3:54:7c:64:d2:b3:fd:0d:25:31:
a7:76:5e:2c:f5:f6:63:47:06:77:6a:4c:ba:7a:c5:e2:5c:bd:
0f:ce:aa:39:1e:cb:7b:ae:fd:3c:93:b5:1e:25:64:5d:8c:4a:
65:df:70:be:28:39:4a:2e:c7:fa:bc:a3:9d:b2:98:a4:f3:8e:
ee:86:64:31:83:9f:51:08:dc:b8:c7:3e:ad:57:62:d4:8b:61:
5e:1c:bd:90:e3:a7:c1:11:47:e7:b0:e7:36:7e:d1:70:55:87:
46:3c:af:df:47:73:21:c3:9c:b2:d5:20:37:c6:92:db:9f:62:
09:b9:e7:fe:19:d8:8f:d7:85:71:c1:82:13:70:fe:d4:54:cf:
1d:fa:88:a0:78:ee:69:84:92:10:b7:0e:77:48:20:7d:2b:4f:
d4:d2:48:7b:58:6a:43:b8:8e:eb:1b:a4:9a:bc:8f:e7:6f:1b:
a6:f1:5f:7d:53:59:7f:3a:06:00:30:79:4b:8a:db:90:54:1b:
d9:91:4e:03:33:78:cb:bc:04:82:47:76:2c:00:0a:8b:8e:9f:
0c:c4:92:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 12:48:47 2026 by rpki-client