Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/tZZnzW95S52VQT9asPsqP3V1cmA.roa
File: tZZnzW95S52VQT9asPsqP3V1cmA.roa (raw, json)
Hash identifier: zilxXyy0uXG93bMnQ1ht3ap+UHL5eWVa+lXOC9sSbiQ=
Subject key identifier: B5:96:67:CD:6F:79:4B:9D:95:41:3F:5A:B0:FB:2A:3F:75:75:72:60
Certificate issuer: /CN=544a82aa5e2eb71719b7f9f049a307b12454497e
Certificate serial: 01A0A4F1091010A9FA5FA897E73CE44DC15F
Authority key identifier: 54:4A:82:AA:5E:2E:B7:17:19:B7:F9:F0:49:A3:07:B1:24:54:49:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VEqCql4utxcZt_nwSaMHsSRUSX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/tZZnzW95S52VQT9asPsqP3V1cmA.roa
Signing time: Tue 15 Sep 2026 12:00:54 +0000
ROA not before: Tue 15 Sep 2026 12:00:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210895
IP address blocks: 145.63.134.0/24 maxlen: 24
145.63.142.0/24 maxlen: 24
145.63.143.0/24 maxlen: 24
188.137.178.0/24 maxlen: 24
188.137.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VEqCql4utxcZt_nwSaMHsSRUSX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 21:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a4:f1:09:10:10:a9:fa:5f:a8:97:e7:3c:e4:4d:c1:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=544a82aa5e2eb71719b7f9f049a307b12454497e
Validity
Not Before: Sep 15 12:00:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b59667cd6f794b9d95413f5ab0fb2a3f75757260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ca:ef:b0:10:36:7f:c4:d3:07:ab:a0:2b:81:
d0:84:e8:a9:6e:8d:e4:d3:3b:f2:9d:d0:68:99:b0:
bf:8d:0e:92:bc:f8:44:b1:07:48:cc:39:a4:93:3e:
1d:f6:9d:59:3d:3a:33:5a:bf:24:db:70:6b:ca:d9:
1d:34:1d:13:8e:f5:fe:32:e2:0c:f0:9a:e9:98:b6:
57:32:d7:16:4b:44:59:e1:44:13:c3:50:f9:8e:d8:
15:08:93:c9:db:6d:62:52:39:cb:68:17:01:fe:8b:
d9:92:4d:2e:97:1f:18:a6:27:e0:02:24:45:91:f3:
0f:ce:f6:16:66:c2:f5:a6:19:28:84:9f:64:8f:cb:
07:64:e9:6e:32:93:1c:5f:c6:24:ba:c8:b0:bb:14:
4d:6a:f5:72:98:55:89:91:f0:70:ee:64:90:9c:5a:
ae:38:fb:65:52:b1:0e:a7:38:00:93:ad:12:f2:b7:
a9:20:dd:1c:78:6b:f7:eb:65:db:c1:c8:c3:f1:d2:
4b:19:92:d0:8d:a8:67:fa:2e:ba:ab:76:33:b7:5e:
b3:3f:0c:00:f5:62:e4:ea:aa:42:56:51:37:1c:01:
ed:b8:3c:4d:f3:ec:9f:47:a3:82:a1:44:97:e4:ac:
a9:5c:75:ab:f9:f3:fb:e3:cb:ac:6d:5a:06:89:c2:
90:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:96:67:CD:6F:79:4B:9D:95:41:3F:5A:B0:FB:2A:3F:75:75:72:60
X509v3 Authority Key Identifier:
keyid:54:4A:82:AA:5E:2E:B7:17:19:B7:F9:F0:49:A3:07:B1:24:54:49:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEqCql4utxcZt_nwSaMHsSRUSX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/tZZnzW95S52VQT9asPsqP3V1cmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.63.134.0/24
145.63.142.0/23
188.137.178.0/24
188.137.244.0/24
Signature Algorithm: sha256WithRSAEncryption
40:db:9f:30:d9:ce:a4:e6:e9:60:da:0e:30:bb:6d:f1:55:f9:
5b:48:5e:82:95:ff:1d:1d:b2:03:31:bc:fd:5d:20:68:69:70:
8f:17:a9:c7:3f:ce:af:74:c6:c9:70:16:eb:ad:6e:d5:d7:a9:
11:bc:e5:8e:64:5b:e4:2d:50:59:42:fa:cb:50:49:30:02:6a:
9b:61:99:33:eb:e4:c8:ae:f2:5c:b6:7c:79:93:29:42:03:d6:
10:82:1d:79:70:74:be:64:cc:36:34:b8:8c:19:02:da:69:8f:
2d:85:30:70:11:53:2d:85:d0:4b:db:6f:90:6f:69:30:c5:0f:
af:52:bc:89:2a:ca:7a:15:68:d5:e6:ca:5a:fa:04:62:6e:28:
83:63:c6:92:c3:ad:bc:f4:de:67:44:26:64:8f:79:56:3b:d0:
11:2b:48:e8:7b:85:e1:54:3d:a6:3c:69:0b:c6:52:3f:bc:7e:
4f:e2:54:a1:6a:1e:4a:c8:e7:51:85:e3:fa:ec:28:d4:8c:8a:
08:37:e7:92:39:fe:cd:a8:5e:8f:a5:8b:4c:9f:e4:17:62:f5:
2b:49:e8:db:04:e5:6e:6f:8f:8b:ac:dc:da:ac:13:b0:60:63:
fd:c0:e9:cf:01:24:0f:db:3e:ff:6b:75:1c:28:8a:0e:ff:c8:
6d:6e:ca:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:16:59 2026 by rpki-client