Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/ZUV0jhQ2guh5Znw4r7MK31_OjBE.roa
File: ZUV0jhQ2guh5Znw4r7MK31_OjBE.roa (raw, json)
Hash identifier: LnaAJuj99vAMW7ciXruEozC3uPYJ6VZLPCj09EMLZA0=
Subject key identifier: 65:45:74:8E:14:36:82:E8:79:66:7C:38:AF:B3:0A:DF:5F:CE:8C:11
Certificate issuer: /CN=1b12120c351c14eec22109f603249fcdac1d3321
Certificate serial: 019FAFEE8DB702AA791DE8021CEEC09E2766
Authority key identifier: 1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/ZUV0jhQ2guh5Znw4r7MK31_OjBE.roa
Signing time: Wed 29 Jul 2026 22:11:14 +0000
ROA not before: Wed 29 Jul 2026 22:11:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203458
IP address blocks: 185.7.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Aug 2026 13:52:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:af:ee:8d:b7:02:aa:79:1d:e8:02:1c:ee:c0:9e:27:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b12120c351c14eec22109f603249fcdac1d3321
Validity
Not Before: Jul 29 22:11:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6545748e143682e879667c38afb30adf5fce8c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:19:c6:66:f6:23:58:ec:52:95:73:a6:58:9b:
af:7b:d4:91:00:2b:d9:cd:46:93:47:bf:83:4f:22:
f9:ed:48:46:a6:a1:3e:3d:e7:3a:58:a2:5d:36:bc:
fb:a1:91:36:13:19:3e:2a:46:97:ad:dc:a5:02:e4:
f8:e8:6f:3d:5f:07:a0:8b:51:3a:be:87:aa:25:cc:
34:81:7c:74:49:eb:c7:99:5a:c3:f0:72:e9:88:89:
db:b3:73:50:30:f0:0b:de:2a:8b:42:2b:1c:ca:77:
26:e8:90:80:f7:ef:74:70:9e:ff:cf:69:e5:4e:12:
1a:cc:63:47:c8:6a:de:28:09:14:7c:2a:9d:76:53:
eb:39:45:88:1b:37:72:52:ee:9a:ac:7b:9c:30:54:
87:e1:44:87:e5:a3:38:80:ec:a4:4d:06:56:bb:50:
85:b5:b6:d6:22:4f:31:a7:19:bf:27:15:67:eb:e2:
7a:39:87:77:7e:e2:30:7a:5c:17:cd:cd:90:14:20:
4d:bc:42:b1:0a:e0:fe:9b:ba:57:3b:b6:02:1a:a1:
d7:84:dc:7e:48:43:b1:c4:42:6d:72:b0:1e:3e:b0:
89:ae:e8:0f:8f:84:46:24:e2:b0:d3:ce:dd:0d:2d:
61:5e:de:39:c8:48:aa:03:aa:80:93:35:05:2b:13:
43:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:45:74:8E:14:36:82:E8:79:66:7C:38:AF:B3:0A:DF:5F:CE:8C:11
X509v3 Authority Key Identifier:
keyid:1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/ZUV0jhQ2guh5Znw4r7MK31_OjBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.241.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:66:17:b4:10:dc:75:47:49:73:4f:49:4d:21:65:d2:b3:a3:
11:21:da:a5:f4:91:c9:de:eb:97:f1:09:5a:f6:d0:04:89:29:
66:a6:5f:72:40:f1:63:7b:92:aa:9f:69:42:1d:a5:08:e1:c0:
aa:54:11:5d:79:ec:ad:d2:93:e5:d3:b8:27:88:fa:4e:0c:03:
76:b7:27:46:ba:ab:03:7b:c4:4f:3a:a0:63:6f:a6:fa:24:ce:
52:50:9c:9c:0b:f0:4f:b1:cd:66:63:04:7a:a4:77:48:5c:9a:
04:80:c8:14:4c:fe:17:bf:77:d7:4b:8c:da:35:d3:28:3c:4a:
bc:b2:11:bc:f6:d4:ed:36:81:50:46:e5:a7:12:04:1a:15:06:
d5:0d:cc:16:68:8e:41:cb:09:65:3b:d0:ba:fe:73:12:f9:9b:
bb:f0:22:3a:89:50:81:a2:95:30:75:67:02:f9:23:c6:f3:88:
c2:72:2c:06:cf:5f:e6:25:36:57:5f:6f:58:f5:78:d4:16:cf:
19:6a:e9:84:08:05:d0:73:a0:0a:84:d2:64:af:04:9f:85:9e:
79:bd:20:3b:4c:63:98:e5:72:91:c3:fe:6a:bf:4e:ea:ac:66:
72:e0:44:49:3b:21:5e:82:9b:d7:c9:10:8b:15:75:a6:4a:39:
2b:41:81:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 20:00:54 2026 by rpki-client