Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/ZodP2OgEV6Tcb8eizcTh60ow6rk.roa
File: ZodP2OgEV6Tcb8eizcTh60ow6rk.roa (raw, json)
Hash identifier: 2x8RsOXovbTACRckal+rSh/iwVBzDb5YrtolgSEcABM=
Subject key identifier: 66:87:4F:D8:E8:04:57:A4:DC:6F:C7:A2:CD:C4:E1:EB:4A:30:EA:B9
Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7
Certificate serial: 019DB425C229F0561AE23DD0EC448B433F39
Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/ZodP2OgEV6Tcb8eizcTh60ow6rk.roa
Signing time: Wed 22 Apr 2026 07:44:26 +0000
ROA not before: Wed 22 Apr 2026 07:44:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215540
IP address blocks: 5.44.42.0/24 maxlen: 24
45.129.185.0/24 maxlen: 24
157.22.240.0/24 maxlen: 24
2a05:541:102::/48 maxlen: 48
2a05:541:103::/48 maxlen: 48
2a05:541:104::/48 maxlen: 48
2a05:541:105::/48 maxlen: 48
2a05:541:106::/48 maxlen: 48
2a05:541:107::/48 maxlen: 48
2a05:541:108::/48 maxlen: 48
2a05:541:109::/48 maxlen: 48
2a05:541:110::/48 maxlen: 48
2a05:541:111::/48 maxlen: 48
2a05:541:112::/48 maxlen: 48
2a05:541:113::/48 maxlen: 48
2a05:541:114::/48 maxlen: 48
2a05:541:115::/48 maxlen: 48
2a05:541:116::/48 maxlen: 48
2a05:541:117::/48 maxlen: 48
2a05:541:118::/48 maxlen: 48
2a05:541:119::/48 maxlen: 48
2a05:541:121::/48 maxlen: 48
2a05:541:122::/48 maxlen: 48
2a05:541:123::/48 maxlen: 48
2a05:541:124::/48 maxlen: 48
2a05:541:125::/48 maxlen: 48
2a05:541:126::/48 maxlen: 48
2a05:541:127::/48 maxlen: 48
2a05:541:129::/48 maxlen: 48
2a05:541:131::/48 maxlen: 48
2a05:541:133::/48 maxlen: 48
2a05:541:134::/48 maxlen: 48
2a05:541:135::/48 maxlen: 48
2a05:541:136::/48 maxlen: 48
2a05:541:137::/48 maxlen: 48
2a05:541:138::/48 maxlen: 48
2a05:541:139::/48 maxlen: 48
2a05:541:141::/48 maxlen: 48
2a05:541:152::/48 maxlen: 48
2a05:541:153::/48 maxlen: 48
2a05:541:156::/48 maxlen: 48
2a05:541:157::/48 maxlen: 48
2a05:541:158::/48 maxlen: 48
2a05:541:159::/48 maxlen: 48
2a05:541:170::/48 maxlen: 48
2a05:541:171::/48 maxlen: 48
2a05:541:172::/48 maxlen: 48
2a05:541:173::/48 maxlen: 48
2a05:541:174::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b4:25:c2:29:f0:56:1a:e2:3d:d0:ec:44:8b:43:3f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7
Validity
Not Before: Apr 22 07:44:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=66874fd8e80457a4dc6fc7a2cdc4e1eb4a30eab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cc:99:d0:fe:7f:84:87:0c:a4:8f:45:e8:1b:
71:13:fe:ef:b0:29:e9:45:3c:9c:bc:21:80:4d:f0:
e7:04:5d:7d:9e:3d:e7:c1:1f:0f:2b:0d:a8:c4:d9:
26:1a:d8:b3:ac:56:cb:57:e3:26:aa:18:41:53:db:
53:2e:06:f1:72:aa:2b:60:05:84:b2:0b:0f:fa:0a:
bd:bf:20:1e:4c:4e:8d:58:0c:f0:d1:2d:1e:9e:fe:
10:df:77:85:15:6b:d0:94:7c:48:d8:10:62:cf:ea:
54:ac:be:93:bc:81:6e:84:2f:43:4a:e0:c3:f8:6e:
0a:0d:ea:fb:64:51:8e:3f:33:5a:d3:fb:a4:64:45:
5c:c8:d5:04:8b:8a:b8:15:af:5c:18:01:f3:1a:e1:
3f:f6:19:31:af:9d:8a:8c:da:51:84:d2:ef:d7:0b:
e3:1a:f7:16:c5:4c:13:a4:31:76:87:7e:28:e8:e6:
2b:36:30:47:1b:19:98:41:76:cb:ec:26:ca:00:b2:
0b:0d:4c:59:06:9c:7e:07:0f:00:42:3a:7c:d1:21:
f8:3f:43:cd:6f:5c:9c:23:c5:33:fe:33:71:02:76:
43:b1:64:d0:43:89:aa:9d:b4:31:dd:d2:40:18:9a:
7e:51:ca:a5:cb:63:13:da:de:19:46:d6:36:01:30:
2a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:87:4F:D8:E8:04:57:A4:DC:6F:C7:A2:CD:C4:E1:EB:4A:30:EA:B9
X509v3 Authority Key Identifier:
keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/ZodP2OgEV6Tcb8eizcTh60ow6rk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.42.0/24
45.129.185.0/24
157.22.240.0/24
IPv6:
2a05:541:102::-2a05:541:109:ffff:ffff:ffff:ffff:ffff
2a05:541:110::-2a05:541:119:ffff:ffff:ffff:ffff:ffff
2a05:541:121::-2a05:541:127:ffff:ffff:ffff:ffff:ffff
2a05:541:129::/48
2a05:541:131::/48
2a05:541:133::-2a05:541:139:ffff:ffff:ffff:ffff:ffff
2a05:541:141::/48
2a05:541:152::/47
2a05:541:156::-2a05:541:159:ffff:ffff:ffff:ffff:ffff
2a05:541:170::-2a05:541:174:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
13:54:cb:da:1b:97:41:da:c3:6e:99:83:dc:c7:63:f1:e5:58:
34:a1:5a:e8:1f:ce:8a:97:02:9e:f7:5c:78:d5:0f:b6:5e:cb:
2e:ac:fc:bf:98:51:81:39:74:aa:54:04:77:0b:2d:3a:bb:0d:
fa:05:5e:d4:14:9a:b8:e3:84:63:49:b0:e2:b4:15:c2:15:c3:
fe:ba:28:9a:da:85:ce:25:64:52:ca:28:43:76:86:b5:4c:95:
dd:46:d6:5c:17:92:0c:e3:1d:00:a4:f5:b1:af:2d:64:3f:07:
42:96:a5:30:6d:5e:51:8b:88:97:d8:03:10:df:24:0b:51:6c:
34:de:7c:07:10:ee:ed:a6:00:0d:4b:ed:e0:ba:3b:86:fb:a7:
01:68:50:76:f2:41:49:4f:b6:9f:f8:f1:a6:cc:06:0c:b0:d3:
77:63:6e:5e:05:ce:fe:fd:02:02:11:d0:a2:11:11:af:0b:98:
31:e0:fe:34:66:36:66:32:7b:bb:cc:36:e7:81:3a:16:bc:1f:
a2:fa:0c:64:ab:9a:3e:80:54:f1:ad:9e:f4:81:2c:be:07:bb:
5a:f6:5a:ae:22:07:1d:43:f9:9b:90:a3:1e:50:15:c8:d6:0a:
da:3b:10:f1:ac:a8:64:57:ae:f0:ee:20:18:7f:cc:cd:5f:78:
5a:2c:de:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 18:19:25 2026 by rpki-client