Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/ZwZjPmKqIDTnl3lP9m_rRWyYN0c.roa
File: ZwZjPmKqIDTnl3lP9m_rRWyYN0c.roa (raw, json)
Hash identifier: TD6pBOGIF20vbuMuxYPEJhEGW+OrNQ5RfnBfL6AVH4w=
Subject key identifier: 67:06:63:3E:62:AA:20:34:E7:97:79:4F:F6:6F:EB:45:6C:98:37:47
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01A060F6E1165413F53C8C8B99F22BD71A65
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/ZwZjPmKqIDTnl3lP9m_rRWyYN0c.roa
Signing time: Wed 02 Sep 2026 07:13:07 +0000
ROA not before: Wed 02 Sep 2026 07:13:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152698
IP address blocks: 45.155.253.0/24 maxlen: 24
79.98.245.0/24 maxlen: 24
79.98.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 10:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:60:f6:e1:16:54:13:f5:3c:8c:8b:99:f2:2b:d7:1a:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Sep 2 07:13:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6706633e62aa2034e797794ff66feb456c983747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:46:e5:09:69:71:8b:8c:bd:80:bd:2b:b2:e7:
08:25:9a:8c:04:f5:2b:49:a3:cc:96:4a:cf:81:93:
25:27:fd:e1:fb:cc:e1:7e:37:55:71:c8:35:a3:f0:
43:91:23:48:90:a2:1a:84:e6:55:8d:fd:64:0f:2f:
bc:ef:88:7d:48:08:58:30:d0:b5:63:92:12:97:29:
95:35:f9:08:5c:36:0e:8f:5a:c6:8f:b5:82:33:c0:
b8:71:28:df:8f:f9:50:14:f9:7d:df:56:55:cf:d6:
31:a4:3e:2a:0f:9d:d7:ea:6a:8e:0a:03:2d:d7:ce:
4d:d2:43:53:91:75:60:b6:f5:a2:d8:82:b0:27:87:
2e:20:14:48:ea:51:8a:0d:09:54:69:24:ac:1f:e6:
bc:e7:a5:ad:a1:33:fd:87:ff:a8:1f:8b:b4:db:c6:
a6:46:43:41:ab:56:2b:6c:70:86:f9:ef:22:14:be:
0a:8d:6e:2a:20:49:15:1f:3a:0c:f0:7d:57:c7:8f:
0b:f6:95:bd:a5:b1:a2:30:41:d9:57:62:28:ae:4f:
e2:66:2f:3d:7a:27:e7:4f:2b:39:78:9b:8c:ad:77:
74:88:59:48:23:85:97:f9:59:dd:a2:aa:5d:f7:2b:
43:40:a1:15:55:8a:85:05:a2:08:91:11:ff:3f:bd:
5d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:06:63:3E:62:AA:20:34:E7:97:79:4F:F6:6F:EB:45:6C:98:37:47
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/ZwZjPmKqIDTnl3lP9m_rRWyYN0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.253.0/24
79.98.245.0-79.98.246.255
Signature Algorithm: sha256WithRSAEncryption
5b:48:f2:6f:de:3a:f5:43:96:12:23:7e:b9:1f:5b:34:04:ff:
03:c2:62:f7:e9:15:f2:c7:90:7e:83:4a:6b:ad:7e:06:bc:b9:
11:01:e3:28:c0:4d:af:d2:90:d6:36:d3:c7:86:51:16:7a:76:
23:d2:16:fb:f5:7f:a2:98:33:3e:8e:78:0e:4b:2b:6d:f9:8c:
e5:cd:54:3e:45:df:0e:a8:40:95:55:07:7d:3a:d8:1b:cf:39:
01:d8:20:e2:7e:ea:bd:ed:2d:83:b5:4b:8b:da:1a:0a:8b:92:
90:24:f3:57:3a:00:02:8a:4f:9d:e1:4d:77:e9:5d:91:84:e8:
44:c2:95:3f:f1:9e:1a:a5:f5:b4:99:4c:c7:3d:64:4d:bc:a3:
38:d6:26:cd:31:99:c1:df:c3:2f:21:1d:5f:3d:80:aa:24:e8:
9f:cb:44:24:46:24:68:6b:a9:02:b3:2e:45:6a:97:1f:42:87:
6e:79:25:7d:e1:f5:61:c0:d3:ce:63:82:d0:91:5b:f3:cd:74:
0c:41:01:62:b2:bd:a8:02:15:54:07:78:59:63:3e:13:e6:18:
58:f0:00:b6:32:f7:78:a3:a0:88:fe:60:98:20:74:56:3f:d3:
07:7f:e3:59:b7:c1:55:a1:7f:23:5b:ea:62:d7:8a:95:cd:28:
9a:db:f8:65
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAaBg9uEWVBP1PIyLmfIr1xplMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz
YWE5YjMwHhcNMjYwOTAyMDcxMzA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzA2NjMzZTYyYWEyMDM0ZTc5Nzc5NGZmNjZmZWI0NTZjOTgzNzQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0blCWlxi4y9gL0rsucIJZqMBPUr
SaPMlkrPgZMlJ/3h+8zhfjdVccg1o/BDkSNIkKIahOZVjf1kDy+874h9SAhYMNC1
Y5ISlymVNfkIXDYOj1rGj7WCM8C4cSjfj/lQFPl931ZVz9YxpD4qD53X6mqOCgMt
185N0kNTkXVgtvWi2IKwJ4cuIBRI6lGKDQlUaSSsH+a856WtoTP9h/+oH4u028am
RkNBq1YrbHCG+e8iFL4KjW4qIEkVHzoM8H1Xx48L9pW9pbGiMEHZV2Iork/iZi89
eifnTys5eJuMrXd0iFlII4WX+Vndoqpd9ytDQKEVVYqFBaIIkRH/P71dGQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFGcGYz5iqiA055d5T/Zv60VsmDdHMB8GA1UdIwQY
MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt
MGFlMmU5MjJhMjkyLzEvWndaalBtS3FJRFRubDNsUDltX3JSV3lZTjBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky
LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQALZv9MAwD
BABPYvUDBABPYvYwDQYJKoZIhvcNAQELBQADggEBAFtI8m/eOvVDlhIjfrkfWzQE
/wPCYvfpFfLHkH6DSmutfga8uREB4yjATa/SkNY208eGURZ6diPSFvv1f6KYMz6O
eA5LK235jOXNVD5F3w6oQJVVB3062BvPOQHYIOJ+6r3tLYO1S4vaGgqLkpAk81c6
AAKKT53hTXfpXZGE6ETClT/xnhql9bSZTMc9ZE28ozjWJs0xmcHfwy8hHV89gKok
6J/LRCRGJGhrqQKzLkVqlx9Ch255JX3h9WHA085jgtCRW/PNdAxBAWKyvagCFVQH
eFljPhPmGFjwALYy93ijoIj+YJggdFY/0wd/41m3wVWhfyNb6mLXipXNKJrb+GU=
-----END CERTIFICATE-----
Generated at Thu Sep 3 16:14:18 2026 by rpki-client