Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/ZARbx5bAarPck6seWXYGAj4qWnc.roa
File: ZARbx5bAarPck6seWXYGAj4qWnc.roa (raw, json)
Hash identifier: JpX21sdBJg/jVku9jqKtfjncO/IBPatxYfuMMZevGKg=
Subject key identifier: 64:04:5B:C7:96:C0:6A:B3:DC:93:AB:1E:59:76:06:02:3E:2A:5A:77
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01A0000D549980C373DD9FE9DB2798F11FA5
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/ZARbx5bAarPck6seWXYGAj4qWnc.roa
Signing time: Fri 14 Aug 2026 11:34:28 +0000
ROA not before: Fri 14 Aug 2026 11:34:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 45.88.145.0/24 maxlen: 24
185.224.2.0/24 maxlen: 24
193.25.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Aug 2026 13:52:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:0d:54:99:80:c3:73:dd:9f:e9:db:27:98:f1:1f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Aug 14 11:34:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=64045bc796c06ab3dc93ab1e597606023e2a5a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f0:cf:76:78:e3:6a:2f:0d:ae:39:40:16:04:
13:a9:c7:19:0d:66:58:57:32:6f:9f:4b:52:66:3f:
5a:d4:ea:bf:91:74:fa:56:4d:30:ae:f4:82:c2:83:
f6:57:4d:de:2e:bd:c1:3d:cc:0f:ba:f4:af:86:bf:
b8:e6:bc:d2:00:eb:ab:7e:a3:6d:d7:a1:e5:8f:58:
45:f3:42:c3:da:ce:15:ef:38:b9:01:59:06:28:96:
5e:6b:11:37:6f:bd:02:83:ea:b5:37:dd:ea:85:80:
7c:27:83:36:f2:32:1e:79:a5:1e:a8:09:ce:ad:62:
b2:09:08:5e:17:44:ce:5f:50:45:dd:05:00:75:63:
13:97:0e:7a:80:bb:92:7c:79:f5:22:29:99:7f:95:
19:9d:19:2d:79:0d:95:97:55:a2:4e:82:7a:96:e4:
96:56:22:23:ca:1b:ab:d8:ca:7b:55:21:c1:5d:54:
bd:5e:7f:b2:0b:f6:f7:80:20:c0:d4:75:b5:29:0f:
3e:c3:86:b9:f1:5c:83:6e:18:00:cc:df:fa:b4:4e:
e3:73:a7:e6:21:20:bc:d5:2d:4c:e0:b1:94:19:6c:
d0:34:18:82:ba:7d:df:95:bf:a8:78:41:c6:53:15:
2a:9b:08:e8:84:af:38:01:50:a1:7d:e8:92:35:70:
4e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:04:5B:C7:96:C0:6A:B3:DC:93:AB:1E:59:76:06:02:3E:2A:5A:77
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/ZARbx5bAarPck6seWXYGAj4qWnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.145.0/24
185.224.2.0/24
193.25.166.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:9e:91:7c:93:4c:64:87:d9:58:18:9f:5f:ad:7a:a6:a3:fd:
83:e3:9a:a7:d8:3c:a8:65:1d:9a:52:13:12:9a:7b:e3:f6:2a:
d5:d8:d6:a6:20:3f:97:be:5b:37:72:1b:32:d1:3d:c3:cc:fb:
c2:b4:d9:eb:ab:ca:72:c6:b3:db:d3:e3:12:4c:9e:99:7c:e6:
a6:30:5e:7e:54:30:5e:3c:dc:c2:84:0b:f2:25:a7:42:3a:24:
19:a3:1d:db:3d:a1:a5:7d:b4:12:c2:f4:2e:4d:45:f3:45:5b:
a0:8f:0d:61:cf:a7:8f:c9:0c:24:cb:dc:e2:95:82:0c:f5:3b:
e0:65:bc:7b:a1:9d:5c:0b:9f:79:6b:14:af:34:6b:2b:fe:67:
90:a9:81:d1:17:36:4f:40:c9:9e:2a:24:a7:91:9f:ef:54:9e:
43:f0:ea:15:e1:ea:54:64:c2:30:27:21:9d:d5:56:36:83:c5:
21:0e:78:b6:9a:ae:5f:75:22:1a:4d:c1:b2:8c:7c:c5:81:de:
35:0f:84:3a:38:6a:38:8b:8e:a7:08:52:54:60:c0:3d:0b:b0:
f2:e6:1a:52:29:50:3e:f3:ec:6f:ed:50:97:7f:96:5a:7c:53:
a5:5f:c9:e9:1c:81:39:0a:ee:f7:a6:fb:4c:17:d6:d7:e9:6b:
84:bd:84:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 21:31:02 2026 by rpki-client