Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Zd7eWqpO82rj4tMVM1FiOzZTNwI.roa
File: Zd7eWqpO82rj4tMVM1FiOzZTNwI.roa (raw, json)
Hash identifier: GTjYTfCCVp1Wx0hphN/N2xZgmhKU/cU0xSNlx/oabus=
Subject key identifier: 65:DE:DE:5A:AA:4E:F3:6A:E3:E2:D3:15:33:51:62:3B:36:53:37:02
Certificate issuer: /CN=4eaf14b67e051cfbd5e1b1d51693d44682392792
Certificate serial: 019CCA3E9CAB5E8CB93857BA6B337678FEF3
Authority key identifier: 4E:AF:14:B6:7E:05:1C:FB:D5:E1:B1:D5:16:93:D4:46:82:39:27:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Zd7eWqpO82rj4tMVM1FiOzZTNwI.roa
Signing time: Sat 07 Mar 2026 21:40:26 +0000
ROA not before: Sat 07 Mar 2026 21:40:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212123
IP address blocks: 167.150.90.0/23 maxlen: 24
2001:678:110::/48 maxlen: 48
2001:678:c44::/48 maxlen: 48
2001:678:c6c::/48 maxlen: 48
2001:67c:e70::/48 maxlen: 48
2001:67c:e74::/48 maxlen: 48
2001:67c:e78::/48 maxlen: 48
2001:67c:e7c::/48 maxlen: 48
2001:67c:2908::/48 maxlen: 48
2001:67c:2ea8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ca:3e:9c:ab:5e:8c:b9:38:57:ba:6b:33:76:78:fe:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eaf14b67e051cfbd5e1b1d51693d44682392792
Validity
Not Before: Mar 7 21:40:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=65dede5aaa4ef36ae3e2d3153351623b36533702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6d:97:26:1c:ec:51:f2:09:1b:ca:59:55:64:
4c:46:bf:dd:e7:4f:02:17:4d:5f:62:ab:3c:f8:da:
e8:e4:fe:22:4b:db:f0:41:e0:aa:18:89:11:77:db:
90:dd:4e:c2:03:22:7b:70:7b:3e:39:cc:0b:b0:29:
f5:71:db:d8:3c:0a:f4:b2:09:02:5c:dd:c1:bc:45:
84:29:ab:92:ff:23:f9:9b:6f:b4:6f:9e:a7:ce:fa:
37:f2:51:b9:d8:f2:bb:3b:ba:4f:a8:27:f8:8d:b4:
04:22:cf:d5:06:25:2a:03:bf:47:d6:a1:09:09:9f:
e6:55:a3:11:c7:b3:c5:b2:be:b2:d9:a7:fb:60:a5:
b7:d1:81:8e:e0:62:3c:8b:e9:4b:b9:a9:c4:10:1c:
b2:0d:4b:e5:c8:e6:26:52:f5:01:d5:ca:27:ac:76:
b4:13:6d:92:c6:6b:49:66:34:64:89:1f:60:81:1b:
42:0b:ab:4d:ef:1d:4a:22:42:8b:46:8c:86:60:35:
ec:57:c1:23:ba:e4:02:f7:04:5e:68:51:07:73:b0:
a7:fb:8c:67:1d:21:1b:c9:18:d0:b6:18:69:e5:fe:
e3:d5:ae:2d:56:69:47:6f:b8:16:4f:ae:3e:fa:4d:
37:3e:bc:af:61:d1:d8:96:fa:2e:51:c3:e5:2b:b2:
0d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:DE:DE:5A:AA:4E:F3:6A:E3:E2:D3:15:33:51:62:3B:36:53:37:02
X509v3 Authority Key Identifier:
keyid:4E:AF:14:B6:7E:05:1C:FB:D5:E1:B1:D5:16:93:D4:46:82:39:27:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Zd7eWqpO82rj4tMVM1FiOzZTNwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.150.90.0/23
IPv6:
2001:678:110::/48
2001:678:c44::/48
2001:678:c6c::/48
2001:67c:e70::/48
2001:67c:e74::/48
2001:67c:e78::/48
2001:67c:e7c::/48
2001:67c:2908::/48
2001:67c:2ea8::/48
Signature Algorithm: sha256WithRSAEncryption
4e:97:29:2d:9d:e3:c9:e9:ca:06:8c:12:e4:1b:91:d8:52:2a:
b5:71:d9:51:13:5f:b7:c6:af:82:4b:5a:7c:6d:bc:8e:93:d7:
71:af:08:74:7b:15:ad:2d:80:0f:d7:19:6e:01:e3:a9:42:6a:
2b:52:c8:48:b3:87:fc:00:85:ce:ed:ef:7b:17:2d:4b:19:02:
12:5b:4e:8b:f0:b8:eb:af:d1:c6:06:f7:e0:69:2f:d8:a7:19:
cd:73:b7:77:8a:a4:ad:3e:19:08:4f:b0:a0:cd:40:73:e7:ac:
f7:e9:d9:2f:4a:05:8b:a5:f4:9f:be:16:74:9c:98:f0:75:5d:
c9:c7:67:59:c4:82:bf:50:1a:32:6a:2b:83:92:dd:b9:25:4d:
42:84:c2:af:f6:d7:4f:30:e4:21:aa:44:32:b3:22:3e:20:d4:
d0:de:a8:8d:9f:0f:7f:e7:e4:e6:60:bd:95:40:52:df:f2:ef:
2b:a7:0a:0e:44:30:15:f8:7d:9c:a6:c2:68:86:76:6b:97:c2:
88:b6:c7:42:0c:5f:f3:09:9c:78:6a:b4:a7:b4:ba:43:40:58:
11:24:08:31:f8:ff:ef:23:0c:3b:ab:db:30:7d:75:3a:11:25:
82:84:92:a4:0b:3a:5e:94:37:74:9f:93:74:51:b7:7c:9d:d8:
08:aa:6a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 23:50:55 2026 by rpki-client