Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/z4qbPsOP-xo2NMp3HqpekMdf7sA.roa
File: z4qbPsOP-xo2NMp3HqpekMdf7sA.roa (raw, json)
Hash identifier: CIa0hH24rP2xgaENBe4fdRe+EVe1YceIYbMEnicxUf8=
Subject key identifier: CF:8A:9B:3E:C3:8F:FB:1A:36:34:CA:77:1E:AA:5E:90:C7:5F:EE:C0
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 019DDE33CB977095ADDBC246DB19CD4081E3
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/z4qbPsOP-xo2NMp3HqpekMdf7sA.roa
Signing time: Thu 30 Apr 2026 11:43:49 +0000
ROA not before: Thu 30 Apr 2026 11:43:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206119
IP address blocks: 45.133.37.0/24 maxlen: 24
185.169.181.0/24 maxlen: 24
185.174.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 18:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:de:33:cb:97:70:95:ad:db:c2:46:db:19:cd:40:81:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Apr 30 11:43:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf8a9b3ec38ffb1a3634ca771eaa5e90c75feec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7c:a1:e5:00:ae:f8:ba:44:ed:71:22:37:cf:
10:c8:09:84:57:2d:f7:59:5d:e7:fa:75:f7:7d:47:
87:9f:5b:3f:8f:29:1c:60:54:93:1c:f7:38:21:8d:
19:5e:11:59:5e:d7:db:d6:c8:fb:6b:aa:48:8e:16:
98:be:dc:00:8f:e8:9b:59:a8:f4:7c:9b:f8:55:d0:
0d:b2:55:06:ad:77:8f:08:f1:d1:6a:35:eb:dd:a4:
99:3a:1d:e4:5a:8f:69:68:3e:ed:5c:b2:06:5a:c9:
7b:c1:a2:3d:a6:ae:f6:1b:a2:91:8a:28:72:d7:f3:
5b:b4:45:bf:c5:7b:a2:0b:5e:36:4b:ce:5d:94:33:
66:b5:49:df:0b:48:2a:fb:38:8e:cb:3c:99:a8:f3:
4b:f9:00:86:ea:8e:6d:82:5f:76:9a:c5:39:70:1e:
36:91:a6:27:9e:32:a2:59:4e:88:51:1e:8a:b1:26:
90:7a:1f:63:60:ec:a4:88:ec:d9:3d:07:43:c5:dd:
20:89:41:08:02:3e:59:d9:0c:e8:40:6d:be:44:56:
58:f8:f5:34:41:e2:8a:ce:ea:6b:9c:fb:30:b2:e7:
64:03:9e:f5:68:88:83:00:eb:d4:3b:1f:97:4c:97:
3f:ae:44:7c:37:70:d0:99:ff:2b:b4:4c:64:91:aa:
b7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:8A:9B:3E:C3:8F:FB:1A:36:34:CA:77:1E:AA:5E:90:C7:5F:EE:C0
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/z4qbPsOP-xo2NMp3HqpekMdf7sA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.37.0/24
185.169.181.0/24
185.174.21.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:1e:38:1f:dc:80:78:05:d7:2d:1b:9d:01:48:84:d2:c3:22:
f3:77:31:be:fe:54:d9:6a:4a:91:2b:40:a1:26:6f:61:ef:38:
32:db:29:19:ce:f9:34:87:3c:23:13:8c:4a:63:f1:ea:5d:71:
ce:cf:98:3f:5b:25:51:c9:d1:1b:3e:23:ca:fc:3a:32:e4:17:
30:d5:11:8f:f3:63:c1:a0:8a:18:73:3a:ee:92:54:b0:43:04:
04:c8:04:20:27:90:35:1d:e9:90:86:90:54:1f:36:84:a3:e3:
c4:09:df:85:20:1a:03:3a:81:38:26:13:53:02:6d:07:55:d4:
19:8e:1e:21:c3:c5:ae:81:62:ff:89:9a:49:c7:e0:e5:71:cf:
26:8e:bc:c2:a9:b4:38:d8:e0:d8:48:56:3a:1f:9a:ad:c3:79:
08:5e:f8:4a:f2:f1:fd:be:ad:3b:b1:9b:44:76:38:03:54:71:
88:51:d9:f4:d5:b0:9f:75:36:75:f8:c5:ab:6e:69:72:bc:21:
d0:52:df:8b:aa:9c:99:06:30:2f:da:7d:5d:58:e9:de:de:36:
20:a7:8d:8c:63:4f:97:3a:41:50:5a:cf:18:4e:d6:6e:b2:4c:
49:c9:41:09:ad:f0:c4:c7:29:54:25:62:48:cc:06:b7:bb:df:
6c:e9:be:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 04:11:43 2026 by rpki-client