Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/zpdR7loa9HpfYpJEQQp_OtKL5mM.roa
File: zpdR7loa9HpfYpJEQQp_OtKL5mM.roa (raw, json)
Hash identifier: uCRrEMwmFIVoAvdK7/LPwa+oR6pu1LnsFBoPQd5nM+Y=
Subject key identifier: CE:97:51:EE:5A:1A:F4:7A:5F:62:92:44:41:0A:7F:3A:D2:8B:E6:63
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 01A01E4CFCAF96D5B32384B4F04066BE02ED
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/zpdR7loa9HpfYpJEQQp_OtKL5mM.roa
Signing time: Thu 20 Aug 2026 08:32:36 +0000
ROA not before: Thu 20 Aug 2026 08:32:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58087
IP address blocks: 5.253.247.0/24 maxlen: 24
37.221.93.0/24 maxlen: 24
45.10.21.0/24 maxlen: 24
45.11.229.0/24 maxlen: 24
45.13.225.0/24 maxlen: 24
45.13.236.0/24 maxlen: 24
45.13.237.0/24 maxlen: 24
45.13.238.0/24 maxlen: 24
45.13.239.0/24 maxlen: 24
45.86.155.0/24 maxlen: 24
45.90.98.0/23 maxlen: 23
45.131.64.0/24 maxlen: 24
45.133.74.0/24 maxlen: 24
45.134.111.0/24 maxlen: 24
45.142.106.0/24 maxlen: 24
92.118.206.0/24 maxlen: 24
109.71.252.0/24 maxlen: 24
194.15.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1e:4c:fc:af:96:d5:b3:23:84:b4:f0:40:66:be:02:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Aug 20 08:32:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ce9751ee5a1af47a5f629244410a7f3ad28be663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:60:f3:6f:e8:05:64:24:1e:01:1d:d0:69:92:
b2:5b:68:46:9b:34:4c:7c:f4:80:e7:07:f0:c8:98:
47:6a:d5:09:97:58:bd:40:98:7e:c5:0c:93:4d:6d:
32:29:95:93:63:25:28:d8:b6:f2:78:7a:5b:3d:8e:
24:06:b1:13:7f:ab:b8:7b:85:ea:3b:12:3a:17:03:
53:e5:8b:ea:37:9a:f4:38:d7:1a:60:70:52:5b:f6:
0a:5b:07:3e:b1:93:ce:f7:77:dc:50:e3:6f:1f:11:
93:ab:8a:fc:31:cf:09:09:95:cd:8e:dc:a2:ea:fb:
86:99:5a:da:21:20:82:ae:45:05:ef:f2:f3:4f:26:
bb:8c:10:81:e2:ad:ef:dd:07:48:63:c4:5c:1b:c0:
6b:ee:5b:95:f0:08:55:98:96:52:90:d7:a6:5b:d7:
74:35:cd:0f:89:2c:da:ed:2b:21:45:17:65:12:14:
f2:e8:3f:26:bd:db:9d:90:99:25:f9:3f:36:72:e2:
ef:77:fa:69:8c:d1:36:bd:11:2a:8e:a8:57:82:fd:
f6:a8:79:ca:94:9b:4f:2d:41:11:5b:10:f2:43:fe:
4e:bb:60:da:e3:69:7e:be:7e:24:12:f7:c2:60:3f:
82:db:2c:81:7f:c7:03:aa:5e:9b:56:ff:53:db:a9:
6f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:97:51:EE:5A:1A:F4:7A:5F:62:92:44:41:0A:7F:3A:D2:8B:E6:63
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/zpdR7loa9HpfYpJEQQp_OtKL5mM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.247.0/24
37.221.93.0/24
45.10.21.0/24
45.11.229.0/24
45.13.225.0/24
45.13.236.0/22
45.86.155.0/24
45.90.98.0/23
45.131.64.0/24
45.133.74.0/24
45.134.111.0/24
45.142.106.0/24
92.118.206.0/24
109.71.252.0/24
194.15.36.0/24
Signature Algorithm: sha256WithRSAEncryption
51:d2:e6:ea:24:45:49:12:7f:09:f9:eb:10:9f:84:c7:47:28:
c7:36:8e:43:5e:8f:e8:57:81:fb:4c:25:d3:2e:01:09:19:dd:
68:c2:65:cc:d6:3a:3d:6b:bf:b2:05:01:b5:fb:c3:1c:c9:bc:
bb:d2:92:fb:90:2b:e3:26:7c:d7:73:df:2d:b4:1e:22:0e:57:
75:e9:68:94:c1:5c:04:5d:c3:b4:2b:a8:00:db:98:00:35:da:
2d:30:ad:fb:6a:b2:ec:15:46:f5:36:2d:f6:17:e7:80:ae:48:
16:fc:0d:84:75:10:8e:75:0c:5f:52:c5:3c:3f:87:e8:d0:d5:
c1:fe:bc:ad:f3:be:23:82:4b:e7:62:ee:db:88:0f:65:bc:c2:
45:f9:19:1c:a5:54:d0:03:9b:0e:5d:e8:41:10:f0:c1:d8:e0:
62:70:af:ca:c2:f6:92:bc:bd:87:92:c4:ec:03:95:48:43:de:
d9:60:fd:af:ea:e1:0d:1a:3a:c2:58:23:bb:1e:c7:36:f4:d7:
d3:c3:c3:c8:e7:8a:5d:04:30:bc:e6:1d:fb:0a:dd:e5:eb:25:
44:17:79:ee:55:4f:40:7c:52:a2:ce:a3:c6:30:7d:7b:db:a0:
45:74:9e:4a:d9:a1:0e:43:b1:4c:c1:4f:8c:50:8c:29:01:ef:
12:b3:be:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 16:29:16 2026 by rpki-client