Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/zDS0-NOEBFJ8tjGld9dWyC3SFk0.roa
File: zDS0-NOEBFJ8tjGld9dWyC3SFk0.roa (raw, json)
Hash identifier: 87kMWzZR0eNkhrGmbsUUAAlcNxN5TKqLrkj4JN7tDpo=
Subject key identifier: CC:34:B4:F8:D3:84:04:52:7C:B6:31:A5:77:D7:56:C8:2D:D2:16:4D
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 019F5CBE043C3A46666636EB6EB38C8242B4
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/zDS0-NOEBFJ8tjGld9dWyC3SFk0.roa
Signing time: Mon 13 Jul 2026 18:29:44 +0000
ROA not before: Mon 13 Jul 2026 18:29:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209207
IP address blocks: 147.45.39.0/24 maxlen: 24
147.45.61.0/24 maxlen: 24
147.45.63.0/24 maxlen: 24
193.233.75.0/24 maxlen: 24
193.233.82.0/24 maxlen: 24
193.233.126.0/24 maxlen: 24
193.233.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5c:be:04:3c:3a:46:66:66:36:eb:6e:b3:8c:82:42:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jul 13 18:29:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cc34b4f8d38404527cb631a577d756c82dd2164d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:79:58:11:cd:9b:17:d8:15:7d:28:23:f1:0d:
cd:c3:39:b8:e6:81:40:e9:96:77:8d:32:6e:2d:94:
6f:a3:5b:92:c3:66:22:72:5d:4e:3a:2e:ff:6d:4c:
3c:83:84:c0:50:28:5d:80:e4:82:5b:d0:37:fb:25:
0d:19:d4:88:d4:28:9b:de:91:27:e7:33:24:51:25:
ed:4d:23:77:15:63:12:67:c3:73:11:91:17:e9:87:
56:37:f9:52:40:dd:34:bc:f3:78:62:26:96:7f:4b:
02:85:38:d8:d2:83:31:b7:c6:45:55:0f:aa:28:2f:
58:3e:79:c6:7b:c6:75:08:62:49:19:b3:8b:7d:af:
e7:0e:3e:03:69:4a:53:0d:e5:64:f9:55:ea:e4:49:
30:b3:2a:53:f7:d4:4e:e4:73:75:f9:17:5c:a3:56:
cb:9d:75:00:0c:eb:ce:99:a1:35:36:a5:07:52:38:
b4:97:bc:0b:5b:5a:ed:7f:b2:e2:83:7e:08:3c:2c:
90:b2:64:1c:88:e2:f3:67:78:98:9d:62:1f:2c:5a:
15:58:2d:4e:8f:23:65:96:7b:71:ea:6b:f9:a7:c1:
06:bc:2c:cd:31:fc:51:13:62:74:19:81:81:6f:00:
ae:c5:30:5c:e6:22:2c:ba:95:8a:74:3d:28:dd:62:
c2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:34:B4:F8:D3:84:04:52:7C:B6:31:A5:77:D7:56:C8:2D:D2:16:4D
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/zDS0-NOEBFJ8tjGld9dWyC3SFk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.39.0/24
147.45.61.0/24
147.45.63.0/24
193.233.75.0/24
193.233.82.0/24
193.233.126.0/24
193.233.198.0/24
Signature Algorithm: sha256WithRSAEncryption
86:f1:73:1e:b2:54:92:a8:01:27:70:76:22:cb:c1:a2:56:0d:
b3:58:de:1e:22:72:22:f2:c8:09:f2:b0:66:c6:33:92:0d:49:
17:0e:0a:10:d2:d9:60:43:58:ff:52:4b:66:63:54:cf:52:c9:
a9:a5:e9:fa:63:cf:ff:32:a4:22:4a:4b:6f:c4:49:29:16:9d:
15:39:c0:ba:50:1a:d9:c1:5a:9c:51:77:5d:0a:de:a3:f0:55:
f4:ff:c6:c3:d1:53:28:0a:37:7c:f6:61:84:f3:70:df:1c:a3:
47:cc:11:19:27:b8:f8:37:6a:e9:ef:1a:cf:3c:97:19:8e:23:
f0:93:17:09:a4:e3:0b:a3:a4:57:0e:7b:8a:ad:2c:8e:95:e6:
76:a1:da:8e:27:82:1d:58:a9:d9:75:fe:ef:e9:a4:83:a8:ac:
de:e4:11:d7:37:3d:7f:72:84:4d:c1:65:4e:32:d9:48:37:61:
80:55:c6:d5:76:09:a7:37:9d:9d:f5:63:8b:ae:cd:a5:18:dc:
5c:d9:38:03:1f:4d:43:5e:34:5a:f7:e7:fc:c2:3a:6f:08:82:
5c:05:b8:70:f4:32:7c:21:9d:a2:ce:c8:af:75:29:a2:40:96:
33:ca:7c:74:b7:7e:cc:d8:d5:f9:e8:23:c8:22:81:76:f2:c0:
1e:18:6d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 09:38:24 2026 by rpki-client