Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/ZWh8XNyZ3ux0P9qN2xmeunRt47Y.roa
File: ZWh8XNyZ3ux0P9qN2xmeunRt47Y.roa (raw, json)
Hash identifier: KQH6zKOfxN2cVsZUBp9eYxUeC2HM4RkXiNCWyr/qZ/0=
Subject key identifier: 65:68:7C:5C:DC:99:DE:EC:74:3F:DA:8D:DB:19:9E:BA:74:6D:E3:B6
Certificate issuer: /CN=91394e0ca5d80900381925cf413f839e8bcb3b4f
Certificate serial: 019F23691EFDD859F273054FB23132B72BFA
Authority key identifier: 91:39:4E:0C:A5:D8:09:00:38:19:25:CF:41:3F:83:9E:8B:CB:3B:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTlODKXYCQA4GSXPQT-DnovLO08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/ZWh8XNyZ3ux0P9qN2xmeunRt47Y.roa
Signing time: Thu 02 Jul 2026 15:18:39 +0000
ROA not before: Thu 02 Jul 2026 15:18:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197890
IP address blocks: 185.94.252.0/24 maxlen: 24
185.94.253.0/24 maxlen: 24
2a03:e300::/32 maxlen: 32
2a06:4580::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/kTlODKXYCQA4GSXPQT-DnovLO08.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/kTlODKXYCQA4GSXPQT-DnovLO08.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTlODKXYCQA4GSXPQT-DnovLO08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:1e:fd:d8:59:f2:73:05:4f:b2:31:32:b7:2b:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91394e0ca5d80900381925cf413f839e8bcb3b4f
Validity
Not Before: Jul 2 15:18:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=65687c5cdc99deec743fda8ddb199eba746de3b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e3:19:12:43:1b:22:27:19:71:18:c3:15:5e:
c9:26:65:77:37:8d:b1:cd:1f:ea:2f:3d:b3:42:8a:
43:dc:cd:cc:d5:25:31:15:b4:7b:ea:be:cd:2d:9b:
bf:7f:a6:30:16:3a:07:1b:00:be:5f:79:1d:c7:da:
95:f1:60:de:89:f6:f2:e1:66:04:14:5b:2e:7f:bc:
b7:8a:a8:70:d9:72:eb:be:1f:9f:65:d3:a7:d5:aa:
42:ec:00:ae:41:19:ad:02:ab:fe:18:d5:4b:e0:5f:
7a:6e:0b:ae:8d:95:10:c2:79:7c:15:ae:63:d9:8b:
36:60:13:5a:74:67:f4:e0:fc:9f:fe:7b:60:d6:79:
25:00:97:ff:5e:f4:0c:19:e5:ee:fc:ed:f0:a1:c3:
18:e3:fb:32:ec:31:f9:0a:fe:f9:73:4f:07:67:a8:
4c:f3:e2:84:af:57:13:85:13:e6:e6:39:e5:9e:ad:
a5:8d:e0:9c:61:6c:a4:5d:d2:0c:87:3e:25:58:db:
b0:d8:59:d2:44:21:af:fa:12:51:60:95:8c:67:31:
b8:01:b6:68:da:10:90:3b:ae:f0:a0:b9:25:7b:0b:
74:ba:7b:4c:ad:65:40:ab:b7:fc:9e:9a:27:84:37:
95:8c:45:f9:3d:35:74:91:b2:c7:45:70:eb:30:77:
2e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:68:7C:5C:DC:99:DE:EC:74:3F:DA:8D:DB:19:9E:BA:74:6D:E3:B6
X509v3 Authority Key Identifier:
keyid:91:39:4E:0C:A5:D8:09:00:38:19:25:CF:41:3F:83:9E:8B:CB:3B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTlODKXYCQA4GSXPQT-DnovLO08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/ZWh8XNyZ3ux0P9qN2xmeunRt47Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/kTlODKXYCQA4GSXPQT-DnovLO08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.252.0/23
IPv6:
2a03:e300::/32
2a06:4580::/29
Signature Algorithm: sha256WithRSAEncryption
7a:21:1c:23:e5:cd:59:44:9d:d8:23:d9:97:3a:c6:88:ed:3f:
d7:17:b9:3c:57:b8:f8:1d:cf:c6:d1:80:44:85:31:3c:d3:f4:
be:ad:b9:15:35:4d:77:e4:82:ac:b3:e8:04:a9:0b:2a:be:6f:
15:ee:6c:3c:e3:e4:72:46:d7:f0:f9:09:0b:20:34:9f:e7:c3:
7c:cc:2c:58:89:7e:db:19:92:c3:e7:fe:33:52:f3:48:5f:28:
d1:9b:65:c4:df:4c:f1:9f:bd:3e:1a:07:91:2b:69:2b:1e:e6:
74:af:4a:2f:c0:c1:17:6d:00:04:61:d8:0b:8c:5f:4f:3b:68:
55:58:73:6a:7b:5b:c2:04:c1:74:51:e5:48:5b:55:83:84:d6:
95:91:e4:4c:f2:26:f5:c8:87:77:0b:c1:77:6c:30:0f:0e:2b:
18:76:62:24:21:20:72:35:2c:51:18:1e:e8:0e:6c:7a:45:3e:
8a:dc:e0:29:e3:6b:d8:10:f5:3e:d2:60:a9:25:83:79:02:84:
3e:3d:05:0c:47:4b:83:03:56:2d:cb:c8:2e:19:b9:16:cd:d6:
e8:95:17:4f:77:1d:fa:cd:cd:63:00:21:5e:82:fa:bd:be:09:
d9:48:9a:0f:3d:3c:05:e9:f4:67:ab:16:25:18:07:b5:ad:93:
f1:ea:0c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:56:56 2026 by rpki-client