Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/Z-hhgfcLIhNgwfzbyzG36W6MOrA.roa
File: Z-hhgfcLIhNgwfzbyzG36W6MOrA.roa (raw, json)
Hash identifier: L1ITxAcJEWuuVgq009QLh0lsKimck02OWHUFOzQohuo=
Subject key identifier: 67:E8:61:81:F7:0B:22:13:60:C1:FC:DB:CB:31:B7:E9:6E:8C:3A:B0
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 01A159026ECF7DDD6FEBBD9131064C75E9B4
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/Z-hhgfcLIhNgwfzbyzG36W6MOrA.roa
Signing time: Tue 20 Oct 2026 11:11:34 +0000
ROA not before: Tue 20 Oct 2026 11:11:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218834
IP address blocks: 45.140.144.0/24 maxlen: 24
2a0e:4007:1::/48 maxlen: 48
2a0e:4007:2::/48 maxlen: 48
2a0e:4007:3::/48 maxlen: 48
2a0e:4007:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:02:6e:cf:7d:dd:6f:eb:bd:91:31:06:4c:75:e9:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Oct 20 11:11:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=67e86181f70b221360c1fcdbcb31b7e96e8c3ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:98:f8:05:05:ac:09:a4:c6:02:d5:fd:8a:19:
9b:6b:f8:02:94:a0:a8:e6:4f:ae:9b:46:e1:40:0c:
c5:6e:47:99:1f:e5:5c:45:9d:e7:0f:23:bf:4c:ed:
2f:a8:cd:45:d1:4a:3c:62:f9:c2:ba:66:21:a3:9f:
c0:b9:89:42:6a:b9:fa:6c:79:6e:0d:61:1f:a0:7d:
ab:9c:77:b3:29:6d:81:d1:1f:c0:25:6a:d0:99:11:
91:d7:79:60:3c:e3:56:8b:27:d1:7e:94:70:7c:6c:
90:1a:6a:7f:4c:0e:42:13:13:48:49:99:0d:91:31:
fa:ff:9d:d8:6e:8d:96:33:08:4f:b6:a7:7f:1c:d8:
42:85:e9:96:18:9d:f2:0e:45:19:2c:76:c7:1f:66:
95:a7:88:47:e6:3b:07:61:11:c6:79:eb:1c:23:1d:
78:12:5e:80:0e:53:79:9f:58:99:55:fa:11:b1:d8:
fb:d4:59:74:b0:d7:34:ee:2b:d1:ea:66:41:44:12:
aa:6f:7f:e6:bc:37:53:5a:64:6f:63:51:2e:bc:ee:
aa:0b:71:67:58:91:8a:0c:b7:9e:a7:e4:cd:d6:ca:
21:3b:5b:ef:4a:8c:48:36:5a:ba:02:ac:41:a5:a4:
b2:23:c6:05:90:93:1d:84:08:93:29:ff:60:4e:7c:
2c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E8:61:81:F7:0B:22:13:60:C1:FC:DB:CB:31:B7:E9:6E:8C:3A:B0
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/Z-hhgfcLIhNgwfzbyzG36W6MOrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.144.0/24
IPv6:
2a0e:4007:1::-2a0e:4007:4:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
55:ed:da:a4:0b:ee:9a:83:0b:20:3d:53:2d:e4:11:4b:bf:37:
dd:5e:80:6c:4d:de:51:db:a0:ff:c2:b1:02:a4:ea:6a:bf:f3:
fe:a1:4e:4c:00:55:48:a0:28:d2:4d:dd:56:a4:24:3c:8e:9e:
53:4a:13:36:b6:e5:fb:db:e7:5f:80:6f:f8:d3:dd:34:81:34:
f3:07:12:22:51:91:e8:eb:04:da:95:bf:1c:fe:b7:a2:84:33:
d7:b2:65:82:cc:36:8c:2f:7e:7d:0c:af:94:7e:d4:cd:3c:be:
bc:bf:15:da:0e:3d:f8:79:d6:23:c5:da:13:2e:36:79:32:2e:
4b:09:ad:9c:09:5b:44:21:30:6a:ec:50:ea:3c:07:e6:4a:a1:
ee:e2:90:c6:f1:5c:41:e5:68:bd:5b:ec:76:2a:57:5f:9d:d2:
5e:d4:2b:ff:73:24:96:e2:4f:c5:c8:62:0b:8d:52:e2:13:08:
23:a5:6a:ba:4c:e1:f0:3f:48:e8:82:5f:a7:04:61:07:5d:12:
60:18:e8:78:38:ea:02:e0:3b:41:c6:ce:46:98:66:c1:46:5a:
c6:5f:74:3b:09:35:ab:19:35:fd:27:e0:8f:00:ce:3b:28:b7:
68:e8:1a:8e:49:8f:dc:82:ed:e2:60:fa:10:65:62:e8:fc:c8:
cf:dd:21:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 20:06:30 2026 by rpki-client