Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/ztSs7zmKYYrvh6ddsY39F_uOKEk.roa
File: ztSs7zmKYYrvh6ddsY39F_uOKEk.roa (raw, json)
Hash identifier: /k/b9/O5jpdDOIMSaJIPt2QCSI1+oOFC4DFoJBolsYM=
Subject key identifier: CE:D4:AC:EF:39:8A:61:8A:EF:87:A7:5D:B1:8D:FD:17:FB:8E:28:49
Certificate issuer: /CN=70bf553042f1a43827dc034500bbd1068a7297ca
Certificate serial: 01A02437208FFB0A337EE08A1E004DE3B5B6
Authority key identifier: 70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/ztSs7zmKYYrvh6ddsY39F_uOKEk.roa
Signing time: Fri 21 Aug 2026 12:06:27 +0000
ROA not before: Fri 21 Aug 2026 12:06:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 141039
IP address blocks: 186.247.172.0/24 maxlen: 24
186.247.173.0/24 maxlen: 24
186.247.174.0/24 maxlen: 24
187.13.31.0/24 maxlen: 24
187.13.181.0/24 maxlen: 24
187.13.182.0/24 maxlen: 24
187.13.206.0/24 maxlen: 24
187.13.207.0/24 maxlen: 24
187.13.208.0/24 maxlen: 24
187.14.55.0/24 maxlen: 24
187.14.56.0/24 maxlen: 24
187.14.115.0/24 maxlen: 24
187.14.224.0/24 maxlen: 24
187.14.225.0/24 maxlen: 24
187.14.230.0/24 maxlen: 24
187.14.231.0/24 maxlen: 24
187.14.237.0/24 maxlen: 24
187.14.238.0/24 maxlen: 24
187.14.239.0/24 maxlen: 24
187.14.253.0/24 maxlen: 24
187.14.254.0/24 maxlen: 24
187.15.80.0/24 maxlen: 24
187.15.81.0/24 maxlen: 24
187.15.82.0/24 maxlen: 24
187.15.174.0/24 maxlen: 24
187.15.175.0/24 maxlen: 24
2a13:240:3600::/40 maxlen: 40
2a13:240:4100::/40 maxlen: 40
2a13:240:7600::/40 maxlen: 40
2a13:240:7b00::/40 maxlen: 40
2a13:240:8100::/40 maxlen: 40
2a13:240:8600::/40 maxlen: 40
2a13:240:8f00::/40 maxlen: 40
2a13:240:b900::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:24:37:20:8f:fb:0a:33:7e:e0:8a:1e:00:4d:e3:b5:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bf553042f1a43827dc034500bbd1068a7297ca
Validity
Not Before: Aug 21 12:06:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ced4acef398a618aef87a75db18dfd17fb8e2849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:29:fd:2c:77:be:9b:68:36:9f:ba:49:79:f4:
05:2a:d7:cc:7e:c4:63:fc:0a:03:42:8d:0c:de:54:
b4:3e:f7:87:c5:2c:dc:54:fb:98:21:fe:59:ca:10:
5b:32:99:2a:b6:58:69:ca:e2:b1:dc:e9:9a:77:f8:
0c:cd:1c:53:be:25:11:d6:20:5f:0c:6e:d8:96:3f:
35:ba:85:7f:ba:64:87:47:2f:cb:f0:f2:83:06:05:
66:58:f4:e2:34:fc:6d:ca:d3:85:6b:3b:9b:ab:92:
cd:62:24:97:11:3d:3f:6a:d8:da:a2:22:e1:d9:d3:
40:60:88:ff:2e:03:0b:29:a2:56:a6:43:2d:70:47:
40:c1:3f:41:71:0a:f4:5d:91:34:31:73:bb:6e:1b:
c1:4d:e0:03:52:83:e6:1b:17:4e:e9:ac:60:6c:aa:
a3:01:f6:91:be:ee:4c:26:6b:99:17:34:7d:a6:23:
5c:86:f1:c0:97:03:c4:18:9d:13:42:7f:4d:06:3c:
ff:4a:a6:b6:a8:bd:6f:32:ae:d6:80:99:7e:31:1c:
14:9d:bf:b3:2a:fd:ef:15:87:ac:2d:0d:1f:a0:00:
7b:ce:f9:33:47:1e:8e:82:4b:6f:fd:4e:de:bc:cb:
d6:f0:92:5c:c1:a2:d0:17:bf:5a:36:4b:a1:c1:e4:
61:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D4:AC:EF:39:8A:61:8A:EF:87:A7:5D:B1:8D:FD:17:FB:8E:28:49
X509v3 Authority Key Identifier:
keyid:70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/ztSs7zmKYYrvh6ddsY39F_uOKEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.247.172.0-186.247.174.255
187.13.31.0/24
187.13.181.0-187.13.182.255
187.13.206.0-187.13.208.255
187.14.55.0-187.14.56.255
187.14.115.0/24
187.14.224.0/23
187.14.230.0/23
187.14.237.0-187.14.239.255
187.14.253.0-187.14.254.255
187.15.80.0-187.15.82.255
187.15.174.0/23
IPv6:
2a13:240:3600::/40
2a13:240:4100::/40
2a13:240:7600::/40
2a13:240:7b00::/40
2a13:240:8100::/40
2a13:240:8600::/40
2a13:240:8f00::/40
2a13:240:b900::/40
Signature Algorithm: sha256WithRSAEncryption
95:41:59:65:03:b4:97:e0:09:57:54:15:37:50:31:b7:73:e8:
f7:aa:dc:fc:50:e1:f0:54:4f:b3:2c:37:33:2f:c9:ba:7c:88:
00:06:62:c4:5c:60:36:89:1e:c6:93:68:70:b0:b6:3b:73:97:
df:2d:8b:63:92:ee:33:35:ce:a5:74:8f:d0:29:37:6f:55:b5:
f0:ad:a8:63:9d:8c:db:f8:95:83:91:ce:0c:61:d6:eb:b3:4a:
45:f9:0a:5d:cc:78:f0:d7:fb:b6:44:9d:bb:2f:91:4a:c3:90:
2b:67:2a:77:76:d9:af:7c:ce:4e:72:52:9e:8f:ed:bf:91:6d:
1e:3c:2c:67:9d:cb:f4:61:5d:6f:a0:5a:68:b8:98:05:3a:56:
97:17:1b:01:bf:ca:6b:d4:72:d0:83:7f:10:03:16:72:49:51:
3d:9d:22:db:b2:a4:b9:89:63:aa:24:08:9c:24:7e:82:df:d7:
5e:bb:70:b6:2e:37:7a:96:40:b6:14:4e:93:0f:a5:04:94:84:
f3:45:a2:c8:d6:fd:18:da:66:8c:02:89:bd:c5:9f:13:30:04:
eb:35:f6:c1:77:d6:85:10:b7:a5:da:5a:60:89:f6:b3:56:6e:
13:c1:07:d9:4b:7d:4f:0c:bf:c9:eb:2a:bd:78:0d:e9:42:65:
21:71:33:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:58:12 2026 by rpki-client